Privacy Policy & Data Security

Data and transaction security are extremely important, and we therefore take all necessary measures to protect them. Customer information is never disclosed to third parties and remains encrypted while you browse the website, making it inaccessible to unauthorised third parties. Encryption applies at every stage of transactions and transmission of your personal information to and from https://cochleagarden.com/, including the wishlist, shopping basket and order form. You alone have access to your credentials (username and password), and you are solely responsible for keeping them confidential and preventing disclosure to others. If you lose them, you must notify us immediately; otherwise https://cochleagarden.com/ is not responsible for their use by an unauthorised person. For security reasons, we recommend changing these credentials regularly and avoiding repeated or easily guessed passwords. Use letters, numbers and symbols (for example #@*) when creating passwords. As a registered user, you have the right to change your username and password and to request removal from the online store by contacting us by email or telephone.

Protecting consumers’ personal data is our absolute priority. The management and protection of personal data are governed by the terms of this agreement and the relevant provisions of Greek, EU and international law on protecting individuals in relation to personal data processing, as well as the decisions of the Hellenic Data Protection Authority, which we respect and comply with. Any future change to this regulatory framework will form part of this agreement. To provide the best services and help you shop through suitable product suggestions, we collect personal information with your express consent and after informing you fully of your rights under Law 4624/2019 and the corresponding provisions of Regulation 679/2016 (GDPR).

COOKIES

Like most websites, this website uses cookies so that https://cochleagarden.com/ can access certain information whenever a user or visitor browses its online store. Without cookies, https://cochleagarden.com/ would be unable to offer important services such as order status and saving products in the shopping basket.

Cookies are alphanumeric files stored in a website user’s or visitor’s browser. They help maintain statistics needed to provide services such as those described above, identify popular websites, support marketing, and enable users or visitors to access their chosen website.

Cookies do not pose a risk to the website user’s or visitor’s computer. If you do not wish information to be collected through cookies, you can configure your browser to delete existing cookies from your hard drive and either automatically reject all new cookies or ask you to accept or reject each cookie before it is installed. However, users and visitors should be aware that rejecting cookies may make parts of the website and its services more difficult or impossible to use.

DATA CONTROLLER

Under the law, the business is responsible for processing the personal data of visitors to https://cochleagarden.com/, whether registered or not, in the course of providing services.

PERSONAL DATA

Personal data means information that can identify or be used to contact a person, together with other information relating to that person. The personal information we collect is limited to first name, surname, address, email address and IP address in conjunction with your shopping basket.

You hereby give your express consent to the collection and processing of the above personal data, without which we cannot provide our services. You may withdraw or modify your consent at any time. We reserve the right to change the personal data protection terms without notice, in accordance with the applicable regulatory framework. Please review these terms regularly for changes, as continued participation in our services implies acceptance of any amendments.

PERSONAL DATA PROCESSING

Processing means any operation or set of operations performed on personal data or sets of personal data, with or without automated means, including collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

COLLECTION AND USE OF PERSONAL DATA

We collect your personal data solely to inform you about our activities, services and products, as well as the services and products of third-party companies with which our business cooperates for advertising purposes. You may also contact our business through the contact form. Information entered in this form may be used for one of the following purposes:

Our company contacting you to respond to a message or request you sent to our business.

Registration on the newsletter mailing list, containing information about product and service offers, company news, events organised by our business and third-party companies, discount coupons and competitions.

Registration in our competitions.

Receiving discount coupons.

Purchasing our products. Your personal data will be used to issue the relevant transaction document and to deliver products to your address through courier companies cooperating with our company.

Receiving beauty advice.

Subject to the relevant legal provisions, the company may use users’ personal data for the following purposes:

Sending personalised information about new products and services and regular updates that the business considers relevant to the user.

Sending information about products and services upon request.

Market research and marketing.

Internal business administration and improvement of the services provided.

Direct marketing activities, including any company communication promoting products and services.

All personal data collected and subsequently processed by the business is appropriate, adequate and limited to the needs and purposes for which it is collected. We also process your personal data in a manner that ensures accuracy, ongoing updating and security, including protection against unauthorised or unlawful processing, accidental loss, destruction or damage. We take the technical and organisational measures considered appropriate for this purpose, particularly encryption, encoding, pseudonymisation and anonymisation of personal data, together with checking, monitoring and regular recording of all processing procedures.

We will provide all the information you need to give prior consent to the business processing your personal data for one or more specific purposes. You may withdraw your consent at any time, easily and free of charge. Where automated withdrawal is not available, contact our business by any means and we will provide the information necessary to withdraw your consent.

When consent is given for automated processing of personal data, the business collects and processes information based on your personal preferences and interests solely to provide personalised information or notifications about the business’s services and activities through direct marketing.

The data collected also serves to fulfil legal obligations. The business undertakes to maintain strict confidentiality of all data, with access limited to what is required in the ordinary course of its activities.

Your data is retained only for as long as needed to fulfil the purpose for which you provided it, unless legal claims or obligations require a longer retention period.

Your consent to receive the newsletter is retained for as long as the business sends you newsletters, and in any event for no longer than six months after newsletter delivery stops.

User account data is retained for as long as the account is active, unless a new processing purpose arises for some of that data.

The contact details you provide will be retained in our database and may be used occasionally to email information about products and services similar to those covered by your agreement with the business. If you do not wish to receive such information, please exercise your rights as described below.

DATA SUBJECT RIGHTS

The business provides data subjects with the rights set out in law and facilitates their exercise. We also provide full information about these rights. Specifically, data subjects have the right to request:

Access to their rights and information about processing.

Correction of inaccurate personal data.

Erasure of the personal data they provided.

Restriction of processing of their personal data.

Portability of their personal data.

To object to further processing of their personal data.

The business will respond in writing within 30 days of receiving the request and identifying the applicant.

Where you exercise one or more of the above rights to rectification, erasure or restriction of processing, the relevant requests will also be communicated to any third-party recipient to whom your personal data may have been transmitted for the processing purposes.