PRIVACY POLICY
Customer commitment to data protection and privacy.
Protecting personal data and your privacy is of greatest concern for Flossy Box.
Here at Flossy Box we use your personal data lawfully, fairly, correctly and in a transparent manner, we collect no more personal data than necessary and only for legitimate purposes, we retain no more data than necessary,
This Privacy Notice intends to establish a clear, concise and transparent communication on the collection, use, processing, storing etc. of personal data relating to customers of Flossy Box.
Who is responsible for processing of your personal data?
Flossy Box and Eleni Seira are primarily responsible for the processing of personal data within the scope of this Privacy Notice. Under certain circumstances the responsibility for data protection and your privacy is shared with one or several other legal entities.
Under each specific section of this Privacy Notice you will be informed about who is responsible for processing your personal data, the allocation of responsibilities and the modalities for the execution of rights.
Identity of Flossy Box
We are Flossy Box, a private company by Eleni Seira, Komninon 12 str., P.C.: 54624, Thessaloniki, Greece, V.A.T. No: EL117581830
Where do we process your data?
The personal data that we collected from you is generally stored within a country of the European Union or the European Economic Area (“EU/EEA”) but may also, whenever necessary, be transferred to and processed in a country outside of the EU/EEA. Any such transfer of your personal data will be carried out in compliance with applicable laws and without undermining your statutory rights.
Who has access to your data?
Your personal data is available and accessible only by those who need the data to accomplish the intended processing purpose. To the extent necessary, your personal data may be shared between Flossy Box, with suppliers, sub-contractors and independant third-parties (acting as processors and sub-processors) carrying out certain tasks on FlossyBox’s behalf.
In addition, we may also disclose personal data to third parties, if we have reason to believe that using or disclosing such information is necessary or advisable to: (i) conduct investigations of possible breaches of law; (ii) identify, contact, or bring legal action against someone who may be violating an agreement they have with us; (iii) investigate security breaches or cooperate with government authorities pursuant to a legal matter; or (iv) to protect our rights, safety or property, including the prevention of fraud.
We reserve the right to transfer any personal data we have about you in the event that we merge with or are acquired by a third party, undergo another business transaction such as a reorganization, or should any such transaction be proposed.
What is the legal ground for processing?
Flossy Box is not allowed to collect, process, use, store etc. personal data without a valid legal ground. Lawfulness may be derived from your consent, by contract, statutory obligations or from our legitimate interest as a business. For each specific process purpose of processing of personal data, we will inform you about which legal ground that will apply, and what rights you are entitled to exercise, whether the provision of personal data is statutory or required to enter a contract and whether it is an obligation to provide the personal data and possible consequences if you choose not to.
What are your rights?
Right to access:
You have the right to request information about the personal data we hold on you at any time. You can contact Flossy Box and we will provide you with your personal data via e-mail.
Right to portability:
Whenever Flossy Box processes your personal data, by automated means based on your consent or based on an agreement, you have the right to get a copy of your data transferred to you or to another party. This only includes the personal data you have submitted to us.
Right to rectification:
You have the right to request rectification of your personal data if the data is incorrect, including the right to have incomplete personal data completed.
Right to erasure:
You have the right to erase any personal data processed by Flossy Box at any time except for the following situations:
*you have an ongoing matter with Customer Service
*you have an open order which has not yet been shipped or partially shipped
*you have an unsettled debt with Flossy Box, regardless of the payment method
*if you are suspected or have misused our services within the last four years
*if you have made any purchase, we will keep your personal data in connection to your transaction for book-keeping purposes
Your right to object to processing based on legitimate interest:
You have the right to object to processing of your personal data that is based on FlossyBox’s legitimate interest. Flossy Box will not continue to process the personal data unless we can demonstrate legitimate grounds for the process which overrides your interest and rights or due to legal claims.
Right to restriction:
You have the right to request that Flossy Box restricts the process of your personal data under the following circumstances:
* if you object to a processing based on FlossyBox's legitimate interest, Flossy Box shall restrict all processing of such data pending the verification of the legitimate interest.
* if you have claim that your personal data is incorrect, Flossy Box must restrict all processing of such data pending the verification of the accuracy of the personal data. <p">* if the processing is unlawful you can oppose the erasure of personal data and instead request the restriction of the use of your personal data instead
* if Flossy Box no longer needs the personal data but it is required by you to defend legal claims.
How do you exercise your rights?
We take data protection very seriously and therefore we have dedicated customer service personnel to handle your requests in relation to your rights stated above. You can always reach them at [email protected]
Right to complain with a supervisory authority:
If you have complaints about the way Flossy Box processes and protects your personal data and privacy you have the right, at any time, to make a complaint to the Hellenic Data Protection Authority, Kifisias 1-3 str., P.C. 11523, Athens, tel.: 00302106475600, E-mail: [email protected] or any other competent a supervisory authority in the country of residence.
Updates to our Privacy Notice:
We may need to update our Privacy Notice. The latest version of the Privacy Notice is always available on our website. We will communicate any material changes to the Privacy Notice, for example the purpose of why we use your personal data, the identity of the Controller or your rights.
The revision history is set out in section Changes of this Privacy Notice.
Why do we use your personal data?
We use your personal data to provide you with the information, products and services that you request or purchase from us, both online and in stores. In this context, we use your personal data to be able to process your purchase order and payment transactions and to manage your deliveries, claims, returns and refunds in a secure and effective manner.
Purchase order and payment data collected for the purpose above will also be used, under certain conditions and limitations, for marketing, business development and analytics purpose and to detect fraud and thefts in connection with online and offline sales and to comply with applicable laws.
We will use your personal data to generate and send ads and promotions, including style and shopping recommendations, notifications, information, surveys and invitations through multiple communication channels.
Ads, promotions and other direct marketing communication will be distributed according to your preferences through electronic mail, text messages, phone calls or postal mail as well as displayed in your mobile app, social media channels or web browser.
To optimize online customer experience, we provide you with personalized ads and promotions resulting from algorithmic analysis and predictions of your preferences, interests and behaviour.
How do we use your personal data?
The personal data we obtain from you when placing a purchase order or making a payment will be used only to the extent necessary to process that order and to deliver the requested products and services.
Whenever you place a purchase order, make a payment, return a product or sign up for a financial service we use your personal data to verify your identity and your capacity to enter into a contract, to check that the financial information you provide us is accurate, to check creditworthiness, to conduct fraud checks or prevent other illegal activity.
We only use data obtained directly from you, when you create your account, shop with us, sign up for membership, subscribe to newsletters or engage with us in any other way.
We will never retrieve, use, and store personal data from data brokers or other external sources. Nor do we have access to such data for pursuing a marketing purpose, unless we explicitly say so.
FLOSSY BOX collaborates with advertising partners such as Facebook, Instagram, Snapchat, Pinterest and YouTube for advertising on social networks and with Google for online advertising networks such as Google Ads and Google Marketing Platform.
Advertising partners use data provided by us and collected from cookies and other technologies in order to predict your preferences and interests, and take this into account when choosing the adverts on the advertising spaces mediated via their online advertising networks. This is standard industry practice commonly known as "retargeting". Retargeting allows us to run advertising campaigns which is as relevant to you as possible and to measure the efficiency and reach of the advertising materials, but also to measure the advertising partners’ performance and efficiency of campaigns.
Advertising partners use cookies and similar technologies to trace your usage of our websites and services by accessing data stored on your device or in apps.
What is the legal ground to process your personal data?
When making products and services available to you, FLOSSY BOX will process your personal data necessary for concluding a contract with you and to fulfill any obligations derived from that contract, whether the contract refers to a purchase order and payment, or the use of other services provided by us or by third parties.
The processing of your personal data for marketing purpose is based on our legitimate interest if you are either a customer, member or an account holder.
If you are neither a customer, member nor an account holder, we will first obtain your consent before preparing and sending you any ads, promotions or other marketing communication.
Regardless of the above, we will always obtain your consent before we send you newsletters through e-mail.
How long do we keep your personal data?
We will keep and process your personal data no longer than necessary for us to perform our contractual obligations.
However, we may continue to use and store your data for additional purposes.
Purchase order data will also be used for the purpose of Development and Improvement of products, services and supply chains.
Purchase order data will also be used for the purpose of Security and Safety through fraud detection and loss prevention.
In addition to the above, for the purpose of Compliance with Laws, we are compelled to continue to save and sometimes use your purchase order data to abide with applicable tax and accounting legislation and to protect consumer rights.