Privacy Policy

Privacy Policy

(In accordance to the regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016)

Data privacy is of high importance for COSMOMODA S.A. and we want to be open and transparent with our processing of your personal data, taking every measure possible for the protection and security of their transfer (e.g. encryption protocol, antivirus scanning, firewall etc.). Our company (COSMOMODA S.A., EGNATIA & SYMMACHIKI STR. - OREOKASTRO THESSALONIKI, 57013), being responsible for the personal data you're providing to us and in accordance to the regulation about personal data protection and the regulation 2016/679, defines a policy setting out how your personal data will be processed and protected, as described below.

Every time you use this website you will be bound by the current Privacy Statement and you should review this text every time you use the website to be sure that you agree with it.

Where do we store your data?
The data that we collect from you is stored within the European Economic Area ("EEA") but may also be transferred to and processed in a country outside of the EEA. Any such transfer of your personal data will be carried out in compliance with applicable laws. For transfers outside the EEA, COSMOMODA S.A. will use Standard Contractual Clauses and Shields as safeguards for countries without adequacy decisions from the European Commission.

Why do we store your data?
Personal data you provide us with will be processed and stored in a file under the responsibility of COSMOMODA S.A. for the purposes of:

i. the development, performance and enforcement of the purchase and sale contract over the products you have purchase, or of any other contract between you and us;
ii. attending to your requests, and;
iii. with your consent, providing you with information about the products of COSMOMODA SA that are related to textile, finished fashion and homeware products sectors, as well as other complimentary sectors such as cosmetics and leather goods, and the development of e-commerce related businesses, including, as regards the above referred products, sending commercial communications by e-mail or by any other equivalent electronic communication means (such as SMS).
iv. In the event that you provide us with personal data of a third party, you will be responsible of having informed them about the use of their personal data, as well as having obtained the relevant express consent for this information to be provided for the purposes explained above. In the event that you have purchased a product or a gift card, the personal data of the third party provided by you, will be used for the following purposes:
  a) managing the delivery and/or verification of correct receipt of the corresponding product and;
  b) attending any query or suggestion you or the third party may have.
v. In the event that you have a Gift Voucher and you wish to return the goods associated with it via the website, we will use the personal details provided by you on the return form only for (a) managing the request and processing the door to door collection of goods, (b) meeting any requests related to the Gift Voucher or the return that you request, and (c) confirming acceptance of the return and then sending the Store Credit Card with the refund amount via email or other equivalent electronic means.
vi. Should you choose to checkout using your card (Credit Card, Debit Card etc.), COSMOMODA S.A. will never store or process the details of your card. The payment is completed by redirecting you to the bank's electronic environment who might be processing part or all of your personal details that you provide. COSMOMODA S.A. transfers your data to authorized third party companies (e.g. banks) with the principal international confidentiality and security standards for credit and debit cards. The use of this functionality might require your password reset, for security reasons. Please remember that security when using the website also depends on the correct use and conservation of certain sensitive codes.

TRUE AND CORRECT DATA DECLARATION

The user-consumer (you) declare by the current statement that the details provided are true and accurate and you are legally bound to update them whenever necessary. For any damage or loss caused to the website or any third party responsible for the website due to incorrect, untrue or incomplete details completed in the registration and order fields, the user is wholly responsible.

Who can access your data?
COSMOMODA S.A. will make sure, as the responsible company for the processing of your personal details, that the confidential nature of your personal data is always secured and provides you with means to excercise your rights to access, edit, delete your personal data or complain about them, by sending your e-mail to gdpr@doca.gr. If necessary, we might request a photocopy of your national ID, passport or any other valid identification document. Also, for the forementioned purposes, we might transfer some of the personal details provided to COSMOMODA S.A. or related companies (processing companies, data collection centers, banks or other) that help our company functions (like fraud screening, account gathering, company programs and rewards programs, financial services, logistics services and services to the customer, transaction analysis etc.) or are necessary for the completion of your orders.
With the current statement we inform you that with your registration and data collection either via our website or by printed/manually filled form, you authorize us and provide your consent to transfer part of your personal data to the forementioned partners. By providing your personal data to this website or to our company in general, in any other way, you give your consent to process and transfer your details as described above. Your consent to this processing/sharing of personal data includes these cases where, in order to better provide our services, our partners and suppliers might be located in the USA or other countries outside the European Economic Area ("EEA").

What is the legal basis for processing?
For every specific process of personal data we collect from you, we will inform you whether the provision of personal data is objective or requires a contract, and whether there is an obligation to provide your personal data and the possible consequences if you do not choose to do so.

What are your rights?

Right to access:
You have the right to request information about the personal data we hold on you at any time. You can contact COSMOMODA S.A. and we will provide you with your personal data via e-mail.

Right to portability:
Whenever COSMOMODA S.A. processes your personal data, by automated means based on your consent or based on an agreement, you have the right to get a copy of your data transferred to you or to another party. This only includes the personal data you have submitted to us.

Right to rectification:
You have the right to request rectification of your personal data if the information is incorrect, including the right to have incomplete personal data completed.
If you have a DOCA Club membership you can edit your personal data by written request, via e-mail at gdpr@doca.gr, fax at +302310695954 or any DOCA Shop.

Right to erasure:
You have the right to erase any personal data processed by COSMOMODA S.A. at any time except for the following situations:

• you have an ongoing matter with Customer Service
• you have an open order which has not yet been shipped or partially shipped
• you have an unsettled debt with COSMODATA S.A., regardless of the payment method
• if you are suspected or have misused our services within the last four years
• your debt has been sold to a third party within the last three years or one year for deceased customers
• your credit application has been rejected within the last three months
• if you have made any purchase, we will keep your personal data in connection to your transaction for book-keeping purposes

Your right to object to processing based on legitimate interest:
You have the right to object to processing of your personal data that is based on COSMOMODA S.A.'s legitimate interest. COSMODATA S.A. will not continue to process the personal data unless we can demostrate legitimate grounds for the process which overrides your interest and rights or due to legal claims.

Your right to object to direct marketing:
You have the right to object to direct marketing, including profiling analysis made for direct marketing purposes.

You can opt out from direct marketing by the following means:

• by following the instruction in the marketing message you receive
• by written request, via e-mail at gdpr@doca.gr, fax at +302310695954 or any DOCA Shop.

Right to restriction:
You have the right to request that COSMODATA S.A. restricts the process of your personal data under the following circumstances:

• if you object to a processing based COSMODATA S.A.'s legitimate interest, COSMOMODA S.A. shall restrict all processing of such data pending the verification of the legitimate interest.
• if you have claim that your personal data is incorrect, COSMODATA S.A. must restrict all processing of such data pending the verification of the accuracy of the personal data.
• if the processing is unlawful you can oppose the erasure of personal data and instead request the restriction of the use of your personal data instead
• if COSMODATA S.A. no longer needs the personal data but it is required by you to defend legal claims.

How can you exercise your rights?
We take data protection very seriously and therefore we have dedicated customer service personnel to handle your requests in relation to your rights stated above. You can always reach them at gdpr@doca.gr.

Data Protection Officer:
We have appointed a Data Protection Officer to ensure that we continuously process your personal data in an open, accurate and legal manner. You can contact our Data Protection Officer at gdpr@doca.gr and write DPO as subject matter.

Right to complain with a supervisory authority:
If you consider COSMOMODA S.A. to process your personal data in an incorrect way you can contact us. You also have the right to raise a complaint to a supervisory authority.

Updates to our Privacy Notice:
We may need to update our Privacy Notice. The latest version of the Privacy Notice is always available on our website. We will communicate any material changes to the Privacy Notice, for example the purpose of why we use your personal data, the identity of the Controller or your rights.

ONLINE PURCHASE

Why do we use your personal data?
We will use your personal data to manage your purchase online at COSMOMODA S.A. by processing your orders and returns via our online services and send you notifications of delivery status or in the event of any problems with the delivery of your items.
We will use your personal data to manage your payments.
We will also use your data in order to handle complaints and warranty matters for products.
Your personal data is being used to identify you and to validate your legal age for shopping online and to confirm your address with external partners.
We want to offer you different payment alternatives and will carry out analysis in order to find out what payment alternatives are available to you, including your payment history and credit checks.

What types of personal data do we process?
We will process personal data like contact details (full name, address, email and phone number), the payment details, the payment history, credit information, order information etc. If you have a DOCA Club membership as well, we will also edit your personal data submitted and related to your membership, like the member card number, the order history, the member card details etc. We will also need to process in some cases your visitor behavior in our website in order to provide better services, like your clicks, preferred products and categories, other preferences as a buyer etc.

Who has access to your personal data?
Your personal data that is forwarded to third parties, is only used to provide you with the services mentioned above, companies to validate your address, communication agencies to send you order confirmation, warehouse and distribution suppliers in connection with the delivery of your order. Payment service providers for your payment. Credit reference agencies for identity and credit checks and debt collection agencies. Many of these partners and companies have an indepentend right or obligation to process your personal data.

What is the legal ground to process your personal data?
The processing of your personal data is necessary for DOCA S.A. to fulfil the service of managing and delivering the order to you.

How long do we save your data?
We will keep your data as long as you are an active customer.

Automated decision making:
When you apply for credit as a method of payment we will perform an automated decision-making process regarding your credit application. You have the right to to express your point of view and to contest the decision with a member of staff.

DIRECT MARKETING, ADVERTISING AND PRODUCT MARKETING

Why do we use your personal data?
We will use your personal data to send you marketing offers, information surveys and invitations through e-mails, text messages, phone calls and postal mail.
In order to optimise your experience of COSMOMODA S.A. we will provide you with relevant information, recommended products, send you reminders of products left in your shopping bag and send you personalised offers. All these great services are based on your previous purchases, what you have clicked on and information you have submitted to us.

What types of personal data do we collect?
We will process personal data like contact details (full name, address, email and phone number), the payment details, the payment history, credit information, order information etc. If you have a DOCA Club membership as well, we will also edit your personal data submitted and related to your membership, like the member card number, the order history, the member card details etc. We will also need to process in some cases your visitor behavior in our website in order to provide better services, like your clicks, preferred products and categories, other preferences as a buyer etc.

Who has access to your personal data?
Data that is forwarded to third parties is only used to provide you with the service mentioned above, to media agencies and technical suppliers for distribution of physical and digital direct marketing.
We never pass on, sell or swap your data for marketing purposes to third parties outside the COSMODATA S.A. group.

What is the legal ground to process your personal data?
The processing of your personal data is based on your consent when you agree to direct marketing. Except for postal marketing, including catalogues, that will be sent to you based on our legitimate interest.

Your right to withdraw your consent:
You have the right to withdraw your consent for the processing of your personal data at any time and also object to direct marketing. You can opt out from direct marketing by the following means:

• by following the instruction in the marketing message you receive
• by written request, via e-mail at gdpr@doca.gr, fax at +302310695954 or any DOCA Shop.

How long do we save your data?
We will keep your data for direct marketing until you withdraw your consent. For e-mail marketing, the removal of your address can be done with a written request, via e-mail at gdpr@doca.gr, fax at +302310695954 or any DOCA Shop.

ACCOUNT

Why do we use your personal data?
We will use your personal data to create and manage your personal account in order to give you a personalized and relevant experience at COSMOMODA S.A. We will provide you with your order history and details around your orders and enable you to handle your account settings (including marketing preferences). We will also provide you with easy ways to maintain accurate and updated information such as contact details and payment information. Further we will enable you to save items in your shopping bag, offer you size recommendations and enable you to rate and review the products you've purchased from us. In order to provide you with relevant product recomendations COSMOMODA S.A. will process your navigation and browsing on our digtal platforms (including website and app), your shopping history and product reviews as well as the data you submitted to us through your account.

What types of personal data do we collect?
We will always process your e-mail address and password that you submit to us when you sign up for COSMOMODA S.A. account. We will process following categories of personal data if you choose to provide it to us: contact information such as name, address, telephone number, date of birth, gender, country, account settings, encrypted payment card information. We will process the following categories of personal data if you make a purchase order history, delivery information, payment history. We will also process the following categories of personal data connected to your cookies, click history, navigation and browsing history

Who has access to your personal data?
Data that is forwarded to third parties, is only used to provide you with the services mentioned above, to optimize the website we use website agencies and analysis tools for product rating.

What is the legal ground to process your personal data?
The processing of your personal data to for your account is based on your consent when you create your COSMOMODA S.A. account. The processing of your personal data to provide you with relevant product information is based on our legitimate interest.

How long do we keep your data?
We will keep your data for as long as you have an active COSMOMODA S.A. account. You have the right to terminate your account at any time. If you choose to do so your account will cease to exist and you are being considered inactive. We will keep your personal data in there are any legal requirements and if there is an open dispute. After your account has been terminated your data will be deleted.

Your right to object to processing of your data:
You have the right to object to processing of your personal data that is based on COSMOMODA S.A.'s legitimate interest by contacting gdpr@doca.gr. Your account will then be deleted and we will not be able to carry out our services to you.

CLUB MEMBERS CARD

Why do we use your personal data?
We will use your personal data to create and manage your Club membership and to give you a personalised and relevant experience of DOCA Club.
We will register and manage your points based on your purchases, send you information regarding your points and rewards suchs as discounts and Club events.
We will also use your personal data for invitations for events and competitions and DOCA Club member discounts and additional services.
We will provide you with your order history and details around your orders and enable you to handle your account settings (including marketing preferences). We will also provide you with easy ways to maintain accurate and updated information such as contact details and payment information. Furthermore, we will enable you to save items in your shopping bag and enable you to rate and review the products you've purchased from us.
In order to provide you with relevant product recomendations DOCA Club will process your navigation and browsing on our digtal platforms (including website and app), your shopping history and product reviews as well as the data you have submitted to us through your account. If you have not opted-out for direct marketing we will use your personal data to send you marketing offers, information surveys and invitations through e-mails, text messages, phone calls and mail.

What types of personal data do we collect?
We will process the following categories of personal data that you submit to us when you sign up for DOCA Club: identification data such as e-mail address and password, contact information such as name, postal code, e-mail address
date of birth, gender, member card number, telephone number, address, account settings.
We will process the following categories of personal data if you make a purchase order history: delivery information, payment history.
We will also process the following categories of personal data connected to your cookies: click history, navigation and browsing history.

Who has access to your personal data?
Data that is forwarded to third parties, is only used to provide you with the services mentioned above and for event booking as we use event booking tools and to optimise the website, as we use website agencies. For product ratings we use analysis tools and moderating and publishing agencies. To distribute marketing we use communication and marketing distribution suppliers.

What is the legal ground to process your personal data?
The processing of your personal data is necessary to fulfill the service of the DOCA Club. Collecting your personal data when creating and managing you DOCA Club membership is required to fullfill our commitments according to the membership agreement. If you don't submit your personal data we won't be able to provide you with the membership or the services of the DOCA Club.

How long do we keep your data?
We will keep your data for as long as you have an active Club membership. You have the right to terminate your membership at any time. If you choose to do so your membership will cease to exist. After the membership has been terminated your data will be deleted. We will keep your personal data in there are any legal requirements and if there is an open dispute.

Your right to object to direct marketing:
You have the right to object to direct marketing, including profiling analysis made for direct marketing purposes. If you object to direct marketing we will cease to process your personal data for that purpose and will cease to send out marketing material based on the DOCA Club membership. If have signed up for newsletters you will still receive direct marketing based on your consent.

CUSTOMER SERVICE

Why do we use your personal data?
We will use your personal data to manage your queries, to handle complaints and warranty matters for products and technical support matters through e-mail, our chat function, telephone and through social media.
We may also contact you if there is a problem with your order.

What types of personal data do we process?
We will process any data you provide to us, including the following categories: contact information such as name, address, e-mail address and telephone number, birth date, payment information and payment history, credit information, order information, account or member number and all correspondance in the matter

Who has access to your personal data?
Data that is forwarded to third parties, is only used to provide you with the services mentioned above.

What is the legal ground to process your personal data?
The processing of your personal data is based on COSMOMODA S.A.'s legitimate interest.

How long do we keep your data?
We will keep your data for 100 days for telephone and e-mails logs and correncepondation and for 12 months for case management. For in store complaints your personal data will be saved for 2 years.

Your right to object to processing based on legitimate interest:
You have the right to object to the processing of your personal data that is based on COSMOMODA S.A.'s legitimite interest. COSMOMODA S.A. will not continue to process the personal data unless we can demostrate a legitimate ground for the process which overrides your interest and rights or due to legal claims.

COMPETITIONS

Why do we use your personal data?
We will process your data when you enter our competitions. Your personal data will be used for DOCA S.A. to contact contestants regarding the competition, before and after an event, to identity contestants, verify the age of contestants, to contact winners, deliver and follow up on prize deliveries.

What types of personal data do we process?
We will process following categories of personal data: contact information such as name, address, e-mail address and telephone number, age and any other information submitted in the contest.

Who has access to your personal data?
Data that is forwarded to third parties, is only used to provide you with the services mentioned above, to shipping suppliers for delivery of prizes.

What is the legal ground to process your personal data?
The processing of your personal data is based on your consent when you choose to enter a competition.

Your right to withdraw your consent:
You have the right to withdraw your consent for the processing of your personal data at any time. When you do so DOCA S.A., will not be able to provide you with the services mentioned above.

How long do we save your data?
We will keep your personal data for 45 days after the competition has ended.

DEVELOPMENT AND IMPROVEMENT

Why do we use your personal data?
We will use data to evaluate, develop and improve our services, products and systems for all of our customers. For this purpose we will not analyse your data on an individual level, all processing will be done on pseudonymised data. This includes analysis to make our services more user-friendly, such as modifying the user interface to simplify the flow of information or to highlight features that are commonly used by our customers in our digital channels and to improve IT systems in order to increase the security for our visitors and customers in general. The analysis is also used to develop and constantly improve the logistics flow of goods by forecasting purchases, stocks and deliveries as well as our resource capacity from a sustainability point of view by streamlining purchasing and scheduling of deliveries. In addition we use the data to be able to plan new establishments of stores and warehouses and improve our product range.

What types of personal data do we process?
We will process following categories of personal data if you have chosen to provide it to us: customer number, date of birth, gender, country, account settings.
We will process the following categories of personal data if you have made a purchase: order history, delivery information, payment history.
We will also process the following categories of personal data connected to cookies: click history, navigation and browsing history.

Who has access to your personal data?
Data that is forwarded to third parties, is only used to provide you with the services mentioned above. We use web-analysis companies to analyse our customer online behaviour on a general level.

What is the legal ground to process your personal data?
The processing of your personal data, to develop and improve our services and products, is based on our legitimate interest.

How long do we save your data?
We will keep your data for as long as you have an active COSMOMODA S.A. account or Club membership. After your account or membership has been terminated your data will be deleted.

Your right to object to the processing of your data:
You have the right to object to the processing of your personal data that is based on COSMOMODA S.A.'s legitimate interest, by contacting gdpr@doca.gr. Your account will then be deleted and we will not be able to carry out our services to you.

FULLFILMENT OF LEGAL OBLIGATIONS

Why do we use your personal data?
We will use your personal data to comply with obligations in laws, court rulings and decisions from authorites.
This includes using your personal data to collect and verify accounting data to comply with our book-keeping rules.

What types of personal data do we process?
We will process following categories of personal data: customer number, order number, name, postal address, transaction amount, transaction date.

Who has access to your personal data?
Your data will be shared within the COSMOMODA S.A. group.
We will share your personal data with IT companies that provide book-keeping system solutions or lawyers, whenever that is needed.

What is the legal ground to process your personal data?
The processing of your personal data is necessary for COSMOMODA S.A. to fulfil its legal obligation.

How long do we save your data?
We will save your data in compliance with the book-keeping rules in your country.

PREVENTION OF MISUSE AND CRIME

Why do we use your personal data?
We will use your personal data for loss prevention management by securing that terms and conditions are being followed and to detect and prevent misuse of our services. We will also use your personal data via video surveillance for security reasons. This data will be used to be able to follow up on incidents and to prevent and report criminal offences in our stores. Your personal data will be used to prevent and investigate abuse of our services online and losses and fraud, by analysing online shopping behavior.

What types of personal data do we process?
We will process the following categories of personal data: contact information such as name, address, telephone number and e-mail address, club membership ID, customer number, video footage, order history, delivery information, payment history.

Who has access to your personal data?
Your personal data that is forwarded to third parties, is only used for purposes mentioned above. We will share your data with companies for exception based reporting.
Incidents and fraud may be shared with insurance companies, legal authorities or local and global law enforcements to complete investigations. Please be aware that such recipients will have an independent right or obligation to process your personal data.

What is the legal ground to process your personal data?
The processing of your personal data to prevent misuse of our services is based on our legitimate interest.

How long do we save your data?
We will keep your data for the time we need to prevent and/or report potentional fraud and other offenses. Video footage will be saved in compliance with local legislation, for the amount of days specified by the law.

Your right to object to the processing of your data:
You have the right to object to the processing of your personal data that is based on COSMOMODA S.A.'s legitimate interest by contacting gdpr@doca.gr. Your account will then be deleted and we will not be able to carry out our services to you.

COOKIES

What is a Cookie?
A Cookie is a small text file that a website stores on your PC, telephone or any other device, with information about your navigation on that website. Cookies are necessary to facilitate browsing and to make it more user-friendly, and they do not damage your computer. While this Policy uses the general term "Cookies", as they are the main method for storing information used by this website, the browser's "Local Storage" space is also used for the same purposes as the Cookies. All the information included in this section is also applicable to this "Local Storage".

What are Cookies used for on this website?
Cookies are an essential part of how our website works. The main purpose of our Cookies is to improve your browsing experience. For example, they are used to remember your preferences (language, country, etc.) while browsing and on future visits. The information collected by the Cookies also enables us to improve the site by estimating numbers and patterns of use, the suitability of the website to the individual interests of the users, quicker searches,
etc. On occasions, if we have obtained your informed consent in advance, we may use Cookies, tags or other similar devices to obtain information that enables us to show you, either from our own website or from third-party websites or any other means, advertising based on the analysis of your browsing habits.

What are Cookies NOT used for on this website?
We do not store sensitive personal information, such as your address, your password, your credit or debit card data, etc., in the Cookies we use.

Who uses the information stored in Cookies?
The information stored in the Cookies from our website is used exclusively by us, except some "third-party cookies", which are used and managed by external entities to provide services requested by us to improve our services and the experience of the user when browsing our website. The main services for which these "third-party cookies" are used are to obtain access statistics and to guarantee the payment transactions that are carried out.

How can I avoid using Cookies on this website?
If you prefer to avoid the use of Cookies on this page, taking into account the above-described limitations, first you must disable the use of Cookies in your browser and then delete the Cookies saved in your browser associated with this website. You may use this option for preventing the use of Cookies at any time.

How do I disable and prevent the use of Cookies?
You may restrict, block or delete the Cookies from this website at any time by changing the configuration of your browser following the steps indicated below. While settings are different in each browser, Cookies are normally configured in the "Preferences" or "Tools" menu. For further details on configuring Cookies in your browser, see the "Help" menu in the browser itself.

How long do we save your data?
COSMOMODA S.A. does not save your personal data. You can easily erase cookies from your computer or mobile device using your browser. For instructions on how to handle and delete cookies please look under "Help" in your browser. You can choose to disable cookies, or to receive a notification each time a new cookie is sent to your computer or mobile device. Please note that if you choose to disable cookies, you will not be able to take advantage of all our features.