PRIVACY POLICY
The protection of your personal data is important to us. This Privacy Notice (the "Notice") is intended to inform you about the terms and conditions concerning the collection, storage, and use of your personal information when you visit or use our online Store (www.liuba.style), provided that you are a natural person.
1. Controller
Grudina Liubov Boris, who is the owner of the individual enterprise
functioning under the business name “LIUBA – Womenswear” (hereinafter "Store"
or "we" or “us”) acts as the Data Controller of any personal data
entered in or collected through our website.
Our business is based in Glyfada, Greece, at
Aggelou Metaxa Str No.11 (P.C. 16675). If you wish to contact us,
for any issue related to the processing of your Personal Data and the exercise
of your rights, you can use the following contact details.
Tel: +30 2108986443. Email address: contact@liuba.style .
2. A few words about our website www.liuba.style
This website is the official website of
the online Store of “LIUBA – Womenswear” (hereinunder “eShop”).
The personal data that you provide to us while browsing, shopping, or registering as a user in our eShop, are subject to processing and will be kept on file under the responsibility of our Store, according to the conditions contained in this Notice.
The term "personal data", as used in this Notice, refers to any information relating to you as a natural person, either as an individual or as a professional, that can be linked to you and/or can identify you, directly or indirectly, such as, for example: full name, postal address, email address, contact telephone number, details about your purchases, etc. (hereinafter referred to as "Personal Data or Data")
4. What is the Processing of Personal Data?
Processing of Personal Data refers to any operation or set of operations which is performed on
personal data or on sets of personal data, whether or not by automated means,
such as collection, recording, organizing, structuring, storage, adaptation or
alteration, retrieval, consultation, use, disclosure by transmission,
dissemination or otherwise making available, alignment or combination,
restriction, erasure or destruction.
5. Which types of Data are we collecting about you,
and how?
5.1. As a rule, we
only collect the personal data that you choose to provide to us with directly
when you browse our website. This may take place when you complete the
following forms or use the following services:
A) When completing and submitting an order
for the purchase of products (data collected include: full name, contact
details, billing & shipping address, payment method, type and value of
purchased products, Company name).
B) When you register as a member/create an
account on our eShop, and when you use the member services (data collected
include but are not limited to: full name. Email, contact phone number,
password, products you have selected in your "wishlist", product
returns, details of previous orders, invoices of previous orders, shipping
addresses of products).
C) When filling in the contact form of our
Store "Contact us" (data collected include: name, email, subject, as
well as the content of your message).
D) When you subscribe to our newsletter, by
filling in the designated form on the footer of our eShop.
Please note that your password is stored
in encrypted form, solely to control access to your account, and the Store cannot
gain access to the actual characters/digits that make up your password.
5.2. In addition to
the abovementioned cases, the following personal data are also collected for
the purposes of the website:
A) Website usage data
and metadata are collected through the use of cookies. For more information
about the collection and use of this data, please read our Website’s Cookies Policy , and
B) Confirmation of the
success or failure of transactions made with a debit or credit card to pay for
products from your shopping cart or via paypal. This confirmation is
automatically provided to us by Piraeus Bank or paypal, whose systems are used
to carry out your online transactions with the Store. Please note that the
Store does not, in any case, have knowledge of your card details, and that the
Bank and paypal act as independent controllers of your personal data processed
by them when using their payment services, which operate under their sole
responsibility.
6. Are we processing personal data belonging to minors?
In general, we do not process data
concerning children under the age of 15, as the services of our Online Store
are addressed to persons over the age of 15 who have legal capacity to perform
a purchase contract (see also our Store’s Terms & Conditions ). If we discover that we have collected Data of a minor under 15 years
of age, without a legal basis for this, we will proceed to the immediate
deletion of the data. Otherwise, the provisions of chapters 7 and 8 of this
policy shall also apply to minors.
7. For what purposes is your data processed?
We collect your Data exclusively for
purposes related to the provision of our services and to maintaining the proper
daily operation of our Store and our website.
More Specifically, your data is processed
for the following purposes:
(a) providing you
with the online services available to our Online Store’s registered users,
(b) the smooth
execution of your purchase order, and the settlement of return and replacement
requests and issues,
(c) to
communicate with you, regarding the
issues you brought to our attention via our website's contact form
(d) to monitor the
traffic to the website,
(e) to ensure the
security of information on the website,
(f) to disseminate
our Store’s newsletter and similar promotional communications to you, and
(e) to comply
with any obligations imposed on us by applicable laws and regulations.
8. What is the legal basis for the processing of your
Data by our Store?
According to the
applicable legislation (GDPR, Law 4624/2019), the processing of your personal
data, for any intent and purpose, must be based on specific legal grounds.
The processing of
website users' data for the abovementioned purposes (chapter 7 of this Notice)
is carried out on the following legal bases:
A) For the purpose of providing
you with our Online Store’s services for registered users (purpose
"a"), the processing is carried out because it is necessary for
the pursuance of the legitimate interests of our Store; in particular, increasing
the level of satisfaction of our customers through the provision of better and
more personalised services/tools and communication and information channels to
customers and prospective customers of our Online Store.
B) Where your data are
processed for the completion of your purchase order,
and the settlement of return and replacement requests and issues (purpose "b"), the processing is carried out because it is
necessary for taking preliminary measures (at the order stage) and for the
execution and monitoring of the agreement for the sale of products concluded
between you and our Store.
C) Where data is
processed to monitor website traffic (purpose "d"), to
communicate with you regarding your contact form requests (purpose “c”),
and to ensure the information security
of our website (purpose "e"), the legal basis for the
processing is the pursuit of the legitimate interests of our Store. More
specifically, processing "d" seeks to increase the reach of our
website, processing “c” seeks to maintain efficient communication channels with
our customers and increase customer satisfaction, while processing "e"
seeks to secure the data and intellectual property of both our Store and our customers,
as well as of the visitors of our website.
D) For the purpose of disseminating
newsletters/promotional material of our Store (purpose "f"),
processing is carried out, depending on your relationship with the store, on
two distinct legal bases:
i. If you are already
a customer of our Store, you have a previous business relationship with us, or
you have placed and completed an order in our Store, we may send the abovementioned
promotional materials to your email, based on our legitimate interest as
recognized by article 11 paragraph 3 of Greek Law 3471/2006, unless you have
declared your opposition to receiving the relevant messages. In this case, you may
declare opt-out from receiving such communications, at any time, either by
selecting the "unsubscribe" option, which is included at the end of
each relevant message, by changing the relevant settings in the
"newsletter" section of your profile (if you are a registered user),
or by informing us of your opposition by sending an email to the following
email address: contact@liuba.style .
ii. If you do not fall
within the abovementioned categories of customers/users, we will send you our
promotions only if you have provided us with your explicit consent to do so. Your
consent can be provided by choosing the corresponding option ("yes"
and "subscribe") in our website’s newsletter subscription form, which
is located on the footer of our website. If you wish to withdraw your consent
after you have provided us with it, you may do so, at any time, either by
selecting the "unsubscribe" option, which is included at the end of
each relevant message, or by informing us about the withdrawal of your consent
by sending an email to: contact@liuba.style , and we will ensure that you do not receive any
further promotional messages from us.
Ε) With regard to the use of cookies on our website, to the extent that the cookies used are not necessary for the functioning and the smooth and secure operation of our website, the lawfulness of their processing relies on your consent, which you may choose to provide to us through the options of our website's "cookie banner". For more information on this issue, please see our CookiesPolicy.
9. Who are the recipients of your
Data/Where are your data transferred?
As a rule,
your data is only being processed by the competent, in each case, staff of our Store,
who have been duly informed about the secure processing of your personal data.
Additionally,
your data may also be transferred, where applicable and necessary, to:
1) Natural and
legal persons to whom we entrust the performance of specific tasks on our
behalf, such as the external partner who has developed our website and supports
its operation and the external accountant with whom our Store cooperates. These
persons, who act as data processors on our behalf, have been informed and
committed in advance to respecting the confidentiality of your data, are aware
of and follow our instructions regarding the processing of personal data, and
take all appropriate measures to protect it.
2)
Co-operating Mailing Service Providers/Couriers, as well as partner Banks and
online payment services (paypal), whose payment systems support your electronic
payments to our Store. These partners act as independent Data Controllers for
your data within the scope of the regulatory/legal frameworks governing their
operations. You may find more information on the processing of your personal
data by these partners in the respective Privacy Policies of these organizations.
3) Supervisory,
auditing, independent, judicial, public and/or other official authorities and
bodies within the scope of their statutory powers, and duties when the
transmission, of your data, to them is required by law.
4) Lawyers, law firms, bailiffs, experts, and expert witnesses, in cases where we need to take legal actions to safeguard our rights and interests.
10. How do we ensure that our
Processors respect your Personal Data?
The Processors, who process your data on
our behalf, have agreed and contractually bound themselves to:
·
Processing your
personal data solely in accordance with our instructions,
·
to maintaining strict
confidentiality,
·
to not disclosing data
to third parties without our permission,
·
to undertake
appropriate security measures.
·
complying with the
legal framework for the protection of personal data, including the European
GDPR Regulation and Greek Law 4624/2019.
11. Is your data outside the European Union?
We do not transfer your Data outside the EEA. Your personal data are stored and processed exclusively within the European Union.
12. Is your data safe?
We are committed to safeguarding your Personal Data. We have taken appropriate organizational and technical measures to ensure the security and protection of your Data from any form of accidental or unlawful processing. These measures are reviewed and modified at regular intervals and also on an ad-hoc basis when necessary.
13. Which rights do you possess in regard to
your personal data?
You have the right to access your
personal data.
This means that you have the right to be
informed by us on whether we are processing your Data. If we are processing
your Data, you can request to be informed about the purpose of the processing,
the type of your Data we hold, who we give it to, how long we store it for,
whether automated decision-making is taking place, and on how to exercise your
remaining data protection rights, such as the right to rectification, the right
of erasure, and the right of restriction of processing and the right to file a
complaint with the Data Protection Authority.
You have the right to rectify
inaccurate personal data.
If you find that there is an error in your Data, you may submit a request for us to correct it (e.g., correcting your name or updating a change of telephone number).
You have the right ask for the deletion
of your personal data/right to be forgotten.
You may ask us to delete your Data if it
is no longer necessary for the processing purposes listed above or if you wish
to withdraw your consent, where your consent is used as the sole legal basis
for the processing.
You have the right to restrict the
processing.
You may ask us to restrict the processing
of your Data for as long as your objections to the processing are pending or if
part of the processing is no longer necessary to fulfil the purposes for which
your Data was collected.
You have the right to object to the
processing of your Data.
You may object to the processing of your
Data where it is carried out in the pursuit of our legitimate interests, and we
will stop processing your Data if there are no other compelling and legitimate
grounds that override your rights and interests.
You have the right to portability of
your Data.
You may request to receive the Data you
have provided to us in a readable form or request us to transfer it to another
controller directly, when the processing is based on your consent or is
necessary for the performance of a contract between us.
You have the right to withdraw your
consent.
In cases where the processing of your data, for a specific purpose, is based solely on your prior consent to the processing, you have the right to withdraw your consent at any time.
14. How can you exercise your rights?
To exercise your rights, you may send us a request either to our postal address (11, Aggelou Metaxa Str, 16675, Glyfada, Greece), or to our e-mail address (contact@liuba.style) with the title "Exercise of the right of access/ correction/ deletion/ portability/ restriction/ objection/ consent withdrawal" and the description of your request. From our part, we will examine your request and reply to you as soon as possible.
15. When will
you receive a response to your request?
We will respond to your Requests free of
charge and without delay. We aim to always respond to your requests within one
(1) month of receiving them. However, if your Request is complex or there is a
large number of pending Requests, we will let you know within the first month
if we need an extension of two (2) additional months within which to respond to
you.
If your Requests are manifestly unfounded
or excessive, in particular because of their repetitive nature, our Store may
impose a reasonable fee, taking into account the administrative costs of
providing the information or performing the requested action, or refuse to
follow up on your request.
16. Right to lodge
a complaint
If you believe
that: a) your request has not been adequately and/or lawfully fulfilled, or b)
your personal data protection rights are being violated by any processing
carried out by us, you have the right to lodge a complaint with the Hellenic
Data Protection Authority-HDPA (postal address: 1-3 Kifisias Ave,P.C. 115 23,
Athens, website: https://www.dpa.gr/, tel: 210 6475600, e-mail: contact@dpa.gr) or the competent data protection authority of your country of
residence (within the EU).
17. How will you be informed about potential
updates to this Privacy Notice?
We will update this Privacy Notice
whenever necessary. If there are significant changes to this Notice or to the
way we use your Personal Data, we will notify you either by posting a notice in
a prominent place within our website before the changes take effect or by any
other appropriate means. We encourage you to periodically read this Notice to keep
updated on how your Data is being protected.
Day of Publication: 2/10/2023
