- Who is the controller of your data?
The Data Controller of your personal data is Helenoutlet (we).
In case you have a request relating to the processing of your data or in case of wish to exercise your rights as set out in Clause 4 below, please send us an e-mail at info@Helenoutlet.com
- What personal data do we collect about you? For what purpose and for how long do we collect it?
We process your personal data only to the extent determined by the services we provide to you (i.e. operating the Platform) or other related purposes of processing, as specified below.
2.1 We use your personal data to provide you with the information, products and services that you request or purchase from us when shopping online. In this context, we use your personal data to be able to process your purchase order and payment transactions, and to manage your deliveries, claims, returns and refunds in a secure and effective manner. Purchase order and payment data collected for the purpose above will also be used, under certain conditions and limitations, for marketing, business development and analytics purpose and to detect fraud and thefts in connection with online sales and to comply with applicable laws those data are necessary for processing your purchases on the Platform (together “Personal Data”); When making products and services available to you Helenoutlet will process your personal data necessary for concluding a contract with you and to fulfill any obligations derived from that contract, whether the contract refers to a purchase order and payment, or the use of other services provided by us or by third parties. For the purpose of identify and contact you when an item you have signed up to receive information regarding is available again for purchase, we use legitimate interest as a business as legal ground for processing. The personal data we obtained directly from you when you are placing a purchase order, making a payment or using any other of our services will be used only to the extent necessary to process that order and to deliver the requested products and services.
Whenever you place a purchase order, make a payment, return a product or signing up for a financial service we use your personal data to verify your identity and your capacity to enter into a contract, that financial information you provide us is accurate, conduct fraud checks or prevent other illegal activity.
2.2 For the purpose of provision of our services or making products (i.e. operating the Platform), we may process the following information:
- Personal Data filled out during the registration as specified above;
- payment details;
Please note, that the data mentioned in this Section will not be disclosed, transferred or sold to any third party and will be stored on servers which are located in the ___Canada____
The legal basis for processing is the performance of a contract (i.e. provision of our services) to which you are a party. The personal data will be processed for the period of the duration of the contractual relationship and sometime thereafter to meet our legal obligations and serve our legitimate interests.
2.3 We may contact you via electronic means (e.g. e-mail) for the purposes of promotion of our services even without your prior consent. You may, however, refuse receiving this kind of marketing communication at any time (i.e. you may opt-out from such messages – such option will be included in each newsletter). Your contact details will be processed for the period of the duration of the contractual relationship unless you opt-out from it.
In other cases, for example in the case of marketing communication for other services or if we send messages tailored to your particular interests and needs, we may process your personal data based on your consent. Your personal data will be processed for the duration of the consent.
2.4 For the purpose of ensuring the security of IT systems and networks, we may process the following information: username, password, logs, and cookies (more information in Article 9) and automatically generated information (e.g. the type of device you use, the IP address of your device, the operating system you use, the browser software you use). The legal basis for such processing is our legitimate interest or of a third party. The personal data will be processed for the period of the duration of the contractual relationship.
2.5 In addition, we may process and store some of the data mentioned above (e.g., payment details) in light of potential claims in the future. This processing is based on our legitimate interest or of a third party as we might need to keep evidence for potential disputes that may arise. The personal data will be processed for the period necessary to fulfill this purpose, however, no longer than for the period of ten years from the commencement of the statutory limitation period in each particular case.
- Who do we share your personal data with?
We share your personal data within Helenoutlet whenever necessary to fulfil the intended purpose. For the same reason, personal data is also shared with suppliers carrying out certain tasks on our behalf, such as order fulfillment and payment processing. Helenoutlet always fully responsible for its suppliers.
We may from time to time also share personal data with independent third parties, such as electronic communication providers, banks and postal services. Please be aware that many of these recipients have an independent right or obligation to process your personal data in their own rights.
Except as explicitly stated herein, we never pass on, sell or swap your data to any third parties.
We are not transferring your personal information to countries outside the EU/ EEA.
- What are your rights in relation to the processing?
Right to access:
You have the right to request information about the personal data we hold on you at any time. Please contact Customer Service and we will provide you with your personal data via e-mail.
Right to portability:
Whenever Helenoutlet processes your personal data, by automated means based on your consent or based on an agreement, you have the right to get a copy of your data transferred to you or to another party. This only includes the personal data you have submitted to us.
Right to rectification:
You have the right to request rectification of your personal data if the information is incorrect, including the right to have incomplete personal data completed.
If you have an Helenoutlet account, you can edit your personal data under your account pages.
Right to erasure:
You have the right to erase your personal data processed by Helenoutlet at any time. Your request may be hindered if any of the following situation apply:
*you have an ongoing matter with Customer Service
*you have an open order which has not yet been shipped or partially shipped
*you have a balance with Helenoutlet, regardless of the payment method
Right to object to processing based on legitimate interest:
You have the right to object to processing of your personal data that is based on Helenoutlet legitimate interest. NOME AZIENDA will not continue to process the personal data unless we can demostrate legitimate grounds for the process which overrides your interest and rights or due to legal claims.
Right to restriction:
You have the right to request that Helenoutlet restricts the process of your personal data under the following circumstances:
* if you object to a processing based Helenoutlet legitimate interest, Helenoutlet shall restrict all processing of such data pending the verification of the legitimate interest.
* if you have claim that your personal data is incorrect, Helenoutlet must restrict all processing of such data pending the verification of the accuracy of the personal data.
* if the processing is unlawful you can oppose the erasure of personal data and instead request the restriction of the use of your personal data instead
* if Helenoutlet no longer needs the personal data but it is required by you to defend legal claims.
How do you exercise your rights?
If you have an Helenoutlet account, you can exercise your right to access, portability and rectification under your account pages, where you also can delete your account.
Data Protection Officer:
We have appointed a Data Protection Officer to ensure that we continuously process your personal data in an open, accurate and legal manner. You can contact our Data Protection Officer at dataprotectionofficer@Helenoutlet.com and write DPO as subject matter.
If you are a resident of California, you have the right to access the Personal Information we hold about you (also known as the ‘Right to Know’), to port it to a new service, and to ask that your Personal Information be corrected, updated, or erased. If you would like to exercise these rights, please contact us through the contact information below info@Helenoutlet.com If you would like to designate an authorized agent to submit these requests on your behalf, please contact us at the address below.
COMPLAINTS TO LOCAL AUTHORITIES IN THE EU
In addition, you have the right to make a complaint to your local data protection authority or to seek a remedy through the courts if you believe that your rights have been breached. Also, see here for an overview of local authorities.
- For how long do we keep your personal data?
However, we may continue to use and store your data for additional purposes.
In addition to the above, for the purpose of Compliance with Laws, we are compelled to continue to save and sometimes use your purchase order data to abide with applicable tax and accounting legislation and to protect consumer rights.
- How do we process and protect your personal data?
We process your personal data through our Platform. Your personal data are then processed electronically by automated means and stored in our information systems; your personal data can be also stored in mirrors or on back-up servers.
For protection of your personal data we have adopted appropriate security measures, administrative, physical and technical, to keep your personal data secured at any time and protect them from accidental or unlawful loss, access, transfer or destruction or any other misuse. All persons having access to your personal data are bound by legal or contractual confidentiality obligations.