1. Data Controller
Out of any data that are generated and collected during your browsing any of the Services of Femme Fanatique will be the controller of your personal data provided to, or collected by or for, or processed in connection with our Services.
3. Data we collect
3.1 Data you provide to us
To create an account you need to provide data including your name, email address and/or mobile number, and a password. At the point of effecting your first buy, you will need to provide payment (e.g., credit card) and billing information.
Posting and Uploading
We collect personal data from you when you provide, post or upload it to our Services, such as when you fill out a form, (e.g., with payment or address data), respond to a survey, or select a size for one of the products we sell.
You don’t have to post or upload personal data; though if you don’t, it may limit your ability to engage with our Services.
3.2 Data from others
We may receive personal data about you when you use the services of our suppliers and partners, such as data regarding the tracking of mailed orders to you.
Related companies and other services
We may receive data about you when you use some of the other services provided by us or our affiliates, such as Facebook Marketplace or eBay.
3.3 Service use
We log usage data when you visit or otherwise use our Services, including our sites, app and platform technology (e.g., our off-site plugins), such as when you view or click on content or ads (on or off our sites and apps) or when you perform a search. We use log-ins, cookies, device information and internet protocol (“IP”) addresses to identify you and log your use.
3.4 Cookies, web beacons and other similar technologies
3.5 Your device and location
When you visit or leave our Services (including our plugins or cookies or similar technology on the sites of others), we receive the URL of both the site you came from and the one you go to next. We also get information about your IP address, proxy server, operating system, web browser and add-ons, device identifier and features, and/or ISP or your mobile carrier. If you use our Services from a mobile device, that device will send us data about your location based on your phone settings.
4. How we use your data
How we use your personal data will depend on which Services you use, how you use those Services and the choices you make in your settings. We use the data that we have about you to provide and personalize, including with the help of automated systems and inferences we make, our Services so that they can be more relevant and useful to you and others.
We use your data to authorize access to and make possible for you the use of our Services.
We may contact you through email, mobile phone, notices posted on our websites or apps and other ways through our Services, including text messages and push notifications. We may send you messages about the availability of our Services, security, or other service-related issues. We also send messages about how to use the Services, product updates, reminders, product suggestions and promotional messages from us and our partners. You may change your communication preferences at any time. Please be aware that you cannot opt-out of receiving service messages from us, including security and legal notices for as long as you keep being a registered user of our Services.
We target (and measure the performance of) ads to visitors and users of our services both on and off our Services directly or through a variety of partners, using the following data, whether separately or combined:
- Data from advertising technologies on and off our Services, like web beacons, pixels, ad tags, cookies, and device identifiers;
- Member-provided information (e.g., profile, contact information, address and payment information);
- Data from your use of our Services (e.g., search history, content you view, page visits, videos you watch, clicking on an ad, etc.);
- Information from advertising partners and publishers; and Information inferred from data described above (e.g., using first names or pronoun usage to infer gender).
We use data of our users for invitations and communications promoting products and Services growth as well as engagement and our Services.
4.5 Developing Services
We may use data, including public feedback, to conduct research and development for the further development of our Services in order to provide you and others with a better, more intuitive and personalized experience, drive growth of our business and engagement on our Services.
Polls and surveys may be conducted by us and others through our Services. You are not obligated to respond to polls or surveys, and you have choices about the information you provide. You may opt-out of survey invitations.
4.6 Customer Support
We use the data (which can include your communications) to investigate, respond to and resolve complaints and Service issues (e.g., bugs).
4.7 Aggregate Insights
We use your data to produce and share aggregated insights that do not identify you. For example we may use your data to generate statistics about our members, their buying preferences, to calculate ad impressions served or clicked on, or to generate visitor demographics that will be useful for us in the further advancement of our Services.
4.8 Security and investigations
5. How we share data
5.1 Others’ services
Subject to your settings, other services may look-up your data. When you opt to link your account with other services (e.g. with PayPal), personal data may become available to them.
5.2 Related services
5.3 Other services
We use others to help us provide our Services (e.g., maintenance, analysis, payments, fraud detection, marketing and development). They will have access to your information as reasonably necessary to perform these tasks on our behalf and are obligated not to disclose or use it for other purposes.
5.4 Legal Disclosures
It is possible that we will need to disclose information about you when required by law, subpoena, or other legal process or if we have a good faith belief that disclosure is reasonably necessary to (1) investigate, prevent, or take action regarding suspected or actual illegal activities or to assist government enforcement agencies; (2) enforce our agreements with you, (3) investigate and defend ourselves against any third-party claims or allegations or (4) protect the security or integrity of our Service. We attempt to notify users about legal demands for their personal data when appropriate in our judgment, unless prohibited by law or court order or when the request is an emergency. We may dispute such demands when we believe, in our discretion, that the requests are overbroad, vague or lack proper authority, but we do not promise to challenge every demand.
5.5 Change in ownership or sale
6. Your rights and obligations
6.1 Data retention
We retain your personal data while your account is in existence or as needed to provide you Services. This includes data you or others provided to us and data generated or inferred from your use of our Services. Even if you only use our Services sporadically, we may retain your information and keep your account open until you decide to close it. In some cases we may choose to retain certain information in a depersonalized or aggregated form.
6.2 Rights to access and control your data
We provide several choices about the collection, use and sharing of your data, from deleting or correcting data you include in your account to advertising opt-outs and communication controls. We offer you settings to control and manage the personal data we have about you. For personal data that we have about you:
- Delete Data: You can ask us to erase or delete all or some of your personal data (e.g., if it is no longer necessary to provide Services to you).
- Change or Correct Data: You can edit some of your personal data through your account. You can also ask us to change, update or fix your data in certain cases, particularly if it’s inaccurate.
- Object to, or Limit or Restrict, Use of Data: You can ask us to stop using all or some of your personal data (e.g., if we have no legal right to keep using it) or to limit our use of it (e.g., if your personal data is inaccurate or unlawfully held).
- Right to Access and/or Take Your Data: You can ask us for a copy of your personal data and can ask for a copy of personal data you provided in machine readable form.
Visitors can learn more about how to make these requests by getting in contact with us. Your requests will be considered in accordance with applicable laws.
6.3 Account closure
If you choose to close your account, your personal data will generally stop being visible to others on our Services within 24 hours. We generally delete closed account information within 30 days of account closure, except as noted below.
We retain your personal data even after you have closed your account if reasonably necessary to comply with our legal obligations (including law enforcement requests), meet regulatory requirements, resolve disputes, maintain security, prevent fraud and abuse, enforce our User Agreement, or fulfill your request to “unsubscribe” from further messages from us. We will retain de-personalized information after your account has been closed.
Information you have shared with others (e.g., through direct communication via email) will remain visible after you closed your account, and we do not control data that others may have copied out of our Services.
7. Other important information
We implement security safeguards designed to protect your data, such as HTTPS. We regularly monitor our systems for possible vulnerabilities and attacks. However, we cannot warrant the security of any information that you send us. There is no guarantee that data may not be accessed, disclosed, altered, or destroyed by breach of any of our physical, technical, or managerial safeguards.
7.2 Cross-border data transfers
We process data both inside and outside Greece and rely on legally-provided mechanisms to lawfully transfer data across borders. Countries where we process data may have laws which are different, and potentially not as protective, as the laws of your own country.
7.3 Lawful bases for processing
We will only collect and process personal data about you where we have lawful bases. Lawful bases include consent (where you have given consent), contract (where processing is necessary for the performance of a contract with you (e.g. to deliver the goods you have purchased)) and “legitimate interests”.
Where we rely on your consent to process personal data, you have the right to withdraw or decline your consent at any time and where we rely on legitimate interests, you have the right to object. If you have any questions about the lawful bases upon which we collect and use your personal data, please contact our Data Protection Officer here.
7.4 Direct marketing and do-not-track signals
We currently do not share personal data with third parties for their direct marketing purposes without your permission.
7.5 Contact information
If you have questions or complaints regarding this Policy, please first contact us online. You can also reach us by physical mail. If contacting us does not resolve your complaint, you may raise your complaint with the Greek National Data Protection Authority. The complaint should include the name of our company, the alleged privacy violation, your contact information, and whether you'd like the particulars of your complaint shared with the company (i.e. us).