Personal Data Policy
Privacy Policy
LONGCHAMP.GR | EVERMODE SINGLE-MEMBER P.C.
1. Data controller
EVERMODE SINGLE-MEMBER P.C., registered office at 10 Amerikis Street, 10671 Athens, Greece, VAT No. 801852988, Tax Authority KEFODE ATTIKIS, G.E.MI. No. 164579501000 (hereinafter 'EVERMODE' or the 'Company').
Customer Service: +30 210 9200 000 | support@evermode.gr.
EVERMODE acts as controller for the personal-data processing described in this Policy.
2. Data we process
Identification and contact data, such as full name, email, telephone number and address.
Order, delivery, return and customer-service data.
Invoicing data where an invoice is requested.
Limited transaction/payment data transmitted by the payment provider; storage of full card details by EVERMODE is not asserted without technical verification.
User-account data, where an account is created.
Technical and browsing data, such as IP address, device, browser and cookies/similar technologies, in accordance with the Cookie Policy and consent choices.
3. Purposes and legal bases
For order fulfilment, payment, delivery, returns and customer service: processing is necessary for performance of the contract or for steps taken before entering into it.
For tax, accounting and other obligations: processing is based on a legal obligation of the Company.
For fraud prevention, security of systems and accounts, establishment, exercise or defence of legal claims and reasonable service improvement: processing may be based on EVERMODE's legitimate interests in protecting transactions, its information systems, its rights and the proper operation of the online store, following the required balancing against the rights and freedoms of data subjects.
For newsletters and electronic commercial communications: processing is based on consent where consent is required. Where the specific exception for electronic communications to existing customers concerning similar products or services lawfully applies, a clear and easy opportunity to object/unsubscribe is provided in every case. For advertising cookies and other optional technologies requiring consent, processing is activated only after the user's required choice.
4. Recipients and processors
Data may be disclosed, to the extent necessary, to hosting and technical-support providers, payment providers, courier/logistics companies, accountants and professional advisers, communications/marketing providers where there is a lawful basis, and public authorities where required by law. Partners acting as processors are bound by the requirements of Article 28 GDPR.
5. Transfers outside the EEA
Where personal data is transferred outside the European Economic Area, EVERMODE applies an appropriate mechanism under Chapter V GDPR, such as an adequacy decision or Standard Contractual Clauses, together with supplementary measures where required. More detailed information on the relevant transfers and applicable safeguards is provided upon request where required by the GDPR.
6. Retention
Data is retained only for as long as necessary for the purpose for which it was collected and for as long as required by tax, accounting, consumer or other legal obligations and applicable limitation periods. Marketing data is retained until consent is withdrawn or an objection is made, depending on the legal basis, unless limited further retention is required to document compliance.
7. Rights
Subject to the GDPR, data subjects may exercise rights of access, rectification, erasure, restriction, portability and objection, and may withdraw consent at any time where processing is based on consent. They also have the right to lodge a complaint with the Hellenic Data Protection Authority.
Requests may be sent to support@evermode.gr. The Company may request only the information necessary to verify the identity of the requester.
EVERMODE responds to requests to exercise rights without undue delay and, as a rule, within one (1) month of receipt, with the possibility of an extension where the conditions of Article 12 GDPR are met.
7A. Mandatory or optional provision of data and automated decisions
Where specific data is necessary to enter into or perform a contract or is required by law, failure to provide it may make it impossible to complete an order, issue an invoice, deliver goods or handle the relevant request. Fields that are not necessary should be identified as optional. EVERMODE does not make decisions producing legal effects or similarly significantly affecting the user based solely on automated processing, unless this is actually implemented and the specific information required by the GDPR is provided.
8. Cookies and similar technologies
Non-essential cookies or similar technologies are activated only in accordance with applicable law and the user's choices. Detailed information on categories, providers, purposes and duration is provided in the Cookie Policy. Rejecting non-essential cookies must be available in a manner comparably easy to accepting them.
9. Security
EVERMODE applies appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including protection of data in transit, access controls and incident-management procedures.
10. Policy updates
This Policy may be updated when processing activities, providers or the legal framework change. A material change to the Policy does not by itself make lawful processing that requires new consent; where required, new consent will be obtained before the relevant processing.