Sandalmania is the data controller of your personal data and is responsible for the collection, use, disclosure, retention and protection of your personal information in accordance with the General Data Protection Regulation. The processing of personal data, such as the name, address, e-mail address, or telephone number of a data subject shall always be in line with the General Data Protection Regulation (GDPR), and in accordance with the country-specific data protection regulations applicable to sandalmania.gr. By means of this data protection declaration, our business would like to inform the general public of the nature, scope, and purpose of the personal data we collect, use and process. Furthermore, data subjects are informed, by means of this data protection declaration, of the rights to which they are entitled.
What personal data do we collect?
We collect your personal data when you place an order, call our Customer Care team, sign up for our marketing communications or browse our website. The data we collect includes details you provide to us, such as your given name and surname and your shipping and billing addresses. We also collect data regarding your shopping habits and the pages and products you have viewed from your use of the website.
What do we use it for:
- Take your orders, process your payments and deliver the items you have purchased;
- Provide any additional services you have requested, such as our marketing communications;
- Provide you with help and assistance via our Customer Care team and a personalized experience on our site;
- provide and improve our services
- contact you about your account
- detect, prevent, mitigate and investigate fraudulent or illegal activities.
We process personal data relating to your interaction (transactions, site visits, app usage) with sandalmania.gr to enable us to personalize your experience with sandalmania.gr. This processing constitutes profiling under the GDPR and we process your personal data in this way as it is in our legitimate interest to offer you a personalized experience on our sites and to provide you with personalized advertising and marketing.
You can opt out of sales and marketing communications from us at any time.
We retain your personal information as long as it is necessary and relevant for our operations. In addition, we may retain personal information from closed accounts to comply with legal requirements, prevent fraud and resolve disputes. Where a legal requirement obliges the retention of personal data for a specific minimum period, we will retain data for at least that period. When we determine the maximum retention duration of any personal data we hold we do so with regard to our legitimate interests to retain data, our obligation under the GDPR to minimize data we hold with what we do hold as personal data being kept proportionate; the nature, and sensitivity of the personal data and the potential risk of harm from unauthorized use or disclosure of your personal data.
We use and retain your personal information to provide, improve and personalize our service to:
- Offer you site content that includes items and services that you may like and to keep track of your basket
- Customize, measure and improve our services
- Hold views between web and mobile sites, deep linking and device linking
- Provide other services requested by you as described when we collect the information
Where we have the right to do so, we shall use and retain your personal information to personalize communications, to contact you, either via email, telephone, social media, text messages or postal mail in order to inform you of account activity, delivery fulfillment and marketing related activity.
We retain your personal information as long as it is necessary and relevant for our operations. In addition, we may retain personal information from closed accounts to comply with legal requirements, prevent fraud and resolve disputes. After it is no longer necessary for us to retain your personal information, we dispose of it securely according to our data retention and deletion policies.
The General Data Protection Regulation provides for rights of access, modification and deletion of your personal information.
You can submit your rights servicing request here.
Under the Law, the GDPR provides you with the following rights:
The right of access
Your right to obtain confirmation as to whether or not personal data are being processed, and, where how we are using that data, access to the personal data along with details regarding the nature of processing.
The right of rectification
Your right to obtain the rectification of inaccurate personal data.
The right of portability
Your right to receive the personal data provided to us, in a structured, commonly used and machine-readable format.
The right to be forgotten
Your right to erase your personal data.
The right to restrict processing
your right for your data to be effectively ‘frozen’; stored and not further processed.
The right to object
Ask us to supply the personal data we hold about you in an easy readable electronic format, or transfer that data direct to a third party nominated by you.
Disclosure and security
We protect your information using measures that reduce the risks of loss, misuse, unauthorized access, disclosure and alteration. We minimize the amount of personal information we disclose to what is directly relevant and necessary to accomplish the specified purpose.
In doing so we may disclose your personal information to authorized third party service providers who help us to provide our services such as:
- Payment providers to facilitate purchases
- Fulfillment providers to facilitate order management, packaging and delivery
- Marketing and advertising providers in order to personalize your experience
Where legally compelling grounds exist, we may also disclose your personal information to governmental and law enforcement agencies, and otherwise in the defense of legal claims.
We protect your information using measures that reduce the risks of loss, misuse, unauthorized access, disclosure and alteration. We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We won’t share your information with any other organizations for marketing, market research or commercial purposes, and we don’t pass on your details to other websites.