Privacy Policy

Privacy Policy

PLEASE READ THIS PRIVACY POLICY CAREFULLY BEFORE USING THIS WEBSITE

ECCO (Cyprus) Limited with its registered address at 195 ARCH. MAKARIOS III AVE. NEOCLEOUS HOUSE 3030 LIMASSOL CYPRUS, Reg. No.: HE 290547 (referred to herein as “ECCO,” “we,” “us” and “our”) respects your privacy and takes our responsibility seriously.

This Privacy Policy describes how we collect information in connection with your interactions with us, e.g. when you use our websites and any other microsites or mobile websites (the “Website”), information you provide to us when you visit an ECCO owned and operated retail store (referred to as “ECCO stores”), when you use our mobile applications we make available for download on your personal device (our “Apps”), when you use your ECCO membership account on any of our ECCO channels, or information you provide to us when you visit our Facebook, Instagram, TikTok, Pinterest and other social media platforms (our “Social Media Pages”). Additionally, this Privacy Policy describes how we use and share that information. Please take the time to read this Privacy Policy.

With this Privacy Policy we want to ensure that you receive adequate information about our collecting and processing of your personal data, including such information we are obliged to inform you about according to applicable personal data protection regulation incl. the EU Regulation No. 2016/679 the General Data Protection Regulation (“GDPR”). 

In this privacy policy we use the term “Personal Data” synonymously with “personal information” or similar expressions as defined in applicable privacy regulation, which is information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household.

We will update this Privacy Policy periodically and will post updates on the Website. Additionally, this Privacy Policy may be supplemented or amended from time to time by other “privacy notices” posted on the Website or specific pages within the Website or other channels, where we engage with you. These privacy notices describe in more detail the information we collect on particular pages or areas of the Website, App or other channels, where we engage with you.

1. OUR CONTACT DETAILS

The controller of the processing of personal data explained herein is ECCO (Cyprus) Limited with its registered address at, 195 ARCH. MAKARIOS III AVE. NEOCLEOUS HOUSE 3030 LIMASSOL CYPRUS, Reg. No.: HE 290547 , unless otherwise is mentioned herein. Please unfold below sections to read more about how to contact us.

1.1. Identity of the Controller(s) and the Appointed Representative

Unless otherwise specified elsewhere, the legal entity being responsible for the collection and processing of your personal data under this Privacy Policy (the “Controller”) is:

ECCO (Cyprus) Limited

195 ARCH. MAKARIOS III AVE. NEOCLEOUS HOUSE

3030 LIMASSOL

CYPRUS
E-mail: legal@ecco.com

1.2. Our Contact Details

If you have any questions or need to get in contact with us we urge you to contact us through our Customer Care representatives either by;

E-mail: cy-info@ecco.com

Phone: +35 72 24 61 43 6

Letter: 195 ARCH. MAKARIOS III AVE. NEOCLEOUS HOUSE 3030 LIMASSOL CYPRUS, Reg. No.: HE 290547

attn.: Customer Care

1.3 Contact details for the Group Privacy Officer

Our appointed Group Privacy Officer can be contacted either by;

E-mail:       legal@ecco.com

Phone:       +45 7491 1733

Letter:        ECCO Holding A/S, Legal Department, Industrivej 5, 6261 Bredebro, Denmark attn.: Group Privacy Officer

2. HOW WE COLLECT AND USE YOUR PERSONAL DATA

When you interact with us, we will collect personal data about you, and use it for various purposes, such as operating this Website and App, enabling you to make use of our various services, including our online shop, membership programme, signing up for Newsletters, creating accounts with us or contacting our Customer Care representatives. We also use your personal data to evaluate and assess your personal interests and preferences in order to personalize your website experiences and improve our services and offer you services better customized to your interests and preferences.

If you are asked to provide information, then it is optional for you to disclose such information. The information might, however, be needed for statutory, contractual or practical reasons. We will always clearly indicate whether the information is mandatory. If you refrain from disclosing information which we deem as mandatory, it may be that we will not be able to provide you with the services you have requested (e.g., signing up for a Newsletter, creating a membership or making a purchase through our online shop). 

To help personalise and continuously improve our services and communication with you, for instance through our Newsletters, we may upon occasion ask you for information on your personal interests, demographic data or your experience of our products and services. This supplementary information is always voluntary and is used solely to improve our products and services. Further, to improve our targeted advertisement we use information collected on how our customers respond to our advertisement, products and services.

How we collect and use your personal data depends on how you interact with us, and which services you make use of.  

We strongly believe and are committed to the protection of the personal data in our custody and control, and we have therefore implemented what we believe are appropriate technical and organisational security measures to protect this personal data against unauthorized or unlawful processing and against accidental loss, destruction or damage.

If you unfold below sections, you can read more about how we collect and process your personal data in different situations, including the general categories of personal data being processed; the source of the personal data that we do not directly obtain from you; the purposes for which personal data is being processed; and the legal basis for the processing.

2.1. How your personal data is collected by us

We may collect the personal data described herein directly from you, from third parties we partner with, or through cookies or other automated means. These sources may include:

• You: We collect information directly from you, whenever you: make a purchase; visit a store; contact us with questions or comments; upload content to our Website, Apps, or Social Media Pages; enter our contests, sweepstakes, or other promotions; add items to your shopping cart; create an ECCO membership; respond to a survey; make a product review; opt in to text messages; apply for a job; communicate with us through our Social Media Pages; or fill out any forms on our Website, Apps, or Social Media Pages.

• Your Device or Browser: Certain information is automatically collected from your device or browser and analyzed when you visit our Website, use our Apps, interact with our Social Media Pages or online advertising, or open our emails.

• Third Parties: We work with third parties who provide services to us, like analytics or advertising companies, data brokers, etc. These third parties share information they have collected with us. Your information may also be collected and processed by third parties, such as the payment providers you select, who will process your information independently in accordance with their own privacy notices.

• Social Media Platforms: Social media platforms share information, which is typically aggregated and doesn’t include personal information, with ECCO. You can learn more about how social media platforms collect and use your information by reviewing their privacy policies and settings. If you contact us via our Social Media Pages to make a complaint or service request, then we will collect information related to such complaint of service request from the Social Media Page.

• Cookies: ECCO uses cookies (small files stored on your device or browser), pixel tags (tiny graphic images embedded in a website or email), web beacons, and other similar technologies to automatically collect information when you visit our Website, use our Apps, or interact with our emails. Through the use of cookies, we may link information about your interactions with our Website, Apps, or emails over time, for example, which pages you visit, which links you use, and how long you stay on each page. We also contract with third party advertising or analytics companies to serve you online ads on other websites. These companies use cookies or similar technologies to collect information about your interactions with our Website and Apps and interactions with other websites. These advertising companies may use and share the information gathered to deliver ads more tailored to your interests. We receive aggregate information from these third parties to understand our advertising effectiveness. Any information collected by us or by third parties through the use of cookies or similar technologies may be linked with other information we collect about you.

• Publicly Available Data: We may combine the information you provide to us with data that is publicly available and data that we collect in ECCO stores, at our marketing events, or receive from other sources.

2.2. Cookie Information

This Website and our Apps uses 1st and 3rd party cookies and similar technologies to optimize your user experience, and for statistical and marketing purposes. Read more about the cookies and how you can administer and reject these in our Cookie Information on the Website and App.

Below you can read more about the types of personal data and the legal basis for the different purposes that we use data for when you have consented to our placement of cookies:

Optimizing your user experience on our Website or in the App:

• The personal data we process for this is:
  • IP address
  • Data on your behaviour on our website
  • If you have made a purchase
  • Compilation of visited pages
• The legal basis for this processing is GDPR art. 6(1) a), namely the consent you have granted, when accepting our placement of functional, statistical and/or marketing cookies.

Sharing of data with third party advertising and analytics companies to show you ads on other websites and to understand our advertising effectiveness

• We contract with third party advertising or analytics companies to serve you online ads on other websites. These companies use cookies or similar technologies to collect information about your interactions with our Website and Apps and interactions with other websites. These advertising companies may use and share the information gathered to deliver ads more tailored to your interests. We receive aggregate information from these third parties to understand our advertising effectiveness. Any information collected by us or by third parties through the use of cookies or similar technologies may be linked with other information we collect about you. The personal data we process for this is:
  • IP address
  • Data on your behaviour on our website
  • If you have made a purchase
  • Compilation of visited pages
• The legal basis for this processing is GDPR art. 6(1) a), namely the consent you have granted, when accepting our placement of marketing cookies.

General marketing research, profiling and to tailor or improve our Websites, Apps and our service offerings

• For the purposes of performing general marketing research, we use all information collected about you, as described in this section. We may also use information collected about you through other channels as described in section 2.9 (Profiling for marketing purposes).
• For the purposes of being able to personalize your store, website and/or app experiences, adapt the content of future Newsletters and membership account to better suit to your interests and to provide you with personalized offerings, we may also build profiles and inferences based on the personal data described above in this section and information collected about you through other channels as described in section 2.9 (Profiling for marketing purposes).

2.3. When signed up for Newsletters.

You have the opportunity to sign up to receive information by e-mail and text messages (SMS) about ECCO’s products (shoes, bags, leather goods and related accessories) services, contests and promotions from us (“Newsletters”).

We will only send you Newsletters and other marketing material if you have specifically consented to receive Newsletters from us.

Below you can read more about the types of personal data and the legal basis for the different purposes that we use data for when you are signed up for a Newsletter:

Registration, checking the validity of the e-mail and providing you with relevant Newsletter

• The personal data we process for this is mandatory information that you have provided to us when signing up for the Newsletter:
  • First name
  • Last name
  • E-mail address
• The legal basis for this processing is GDPR art. 6(1) a), namely the consent you have granted, when signing up to receive Newsletters.

Tailoring our services and offerings to you (personalising the Newsletters send to you)

• The personal data we process for this is mandatory and non-mandatory information that you may have provided to us when signing up for the Newsletter:
  • First name
  • Last name
  • E-mail address
  • Gender
  • Shoe size
  • Phone number
• The legal basis for this processing is GDPR art. 6(1) f) namely our legitimate interest in improving our services and providing you with content tailored for your segment.
• PLEASE BE INFORMED THAT YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO OUR PROCESSING OF YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES INCL. PROFILING RELATED HERETO. Please also refer to SECTION 5 (YOUR RIGHTS AND HOW TO WITHDRAW CONSENTS AND UNSUBSCRIBE).

Tracking of Newsletters to perform general marketing research and to optimize the distribution and use of Newsletters

          For the purpose of optimising the performance of our newsletters, including by identifying the ideal content and sending time to target customers most likely to be considering their next                purchase and by optimising the number of emails that each segment should receive to create value via greater engagement and lower unsubscribe rate, we are processing your personal            data, including:

• Tracking pixels* (included in the Newsletter), which are used to collect and process personal data such as information on when you open the e-mail and which links in the e-mail you have clicked on.
• The time emails are sent
• Whether or not the email was opened

*A tracking pixel is a miniature graphic embedded in such e-mails, which are sent in HTML format to enable log file recording and analysis. This allows a statistical analysis of the success or failure of online marketing campaigns. Based on the embedded tracking pixel, we may see if and when an e-mail was opened by the recipient, and which links in the e-mail were called up by the recipient.

The legal basis for this processing is GDPR art. 6(1) f), namely our legitimate interest in understanding customer behaviour and interests and ensuring effective marketing and advertisement of ECCO product and services.

General marketing research, profiling and to tailor or improve our Websites, Apps and service offering

• For the purpose of performing general marketing research, we use all information collected about you, as described above in this section. We may also use information collected about you through other channels as described in section 2.9 (Profiling for marketing purposes).
• For the purposes of being able to personalize your store, website and/or app experiences, adapt the content of future Newsletters and membership account to better suit to your interests and to provide you with personalized offerings, we may also build profiles and inferences based on the personal data described above in this section and information collected about you through other channels as described in section 2.9 (Profiling for marketing purposes).
• The legal basis for this processing is GDPR art. 6(1) f), namely our legitimate interest in understanding customer behaviour and interests and ensuring effective marketing and advertisement of ECCO product and services.
• PLEASE BE INFORMED THAT YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO OUR PROCESSING OF YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES INCL. PROFILING RELATED HERETO. Please also refer to SECTION 5 (YOUR RIGHTS AND HOW TO WITHDRAW CONSENTS AND UNSUBSCRIBE)

2.4. When having an ECCO membership.

If you create an ECCO membership with us, then you will be asked to provide certain basic information in order to create and operate the account and membership programme. We may also give you the opportunity to provide us with other supplementary data than the data which we have clearly indicated as mandatory. We recommend that you keep your ECCO membership data updated at all times.

You can use your ECCO membership to manage your account data and provide us with supplementary data, which will help us improve our services and offerings to you. You will also have access to certain transactional data about your recent purchases and returns. In addition, you will have access to all your membership information, including tier level, points, available rewards and any other information that relates to your personal membership profile. We may ask you for additional information periodically to improve our personalized offers and content to you.

To provide you with an increased level of security online, access to your personal data on certain sections of our Websites and App may be protected with a password that you have selected. We strongly recommend that you do not disclose your password to anyone. We will never ask you to disclose your password.

You can manage your ECCO account by logging into the account to administer it. Please also refer to section 5 (Your rights and how to withdraw consents and unsubscribe).

Below you can read more about the types of personal data and the legal basis for the different purposes that we use data for when you are having an ECCO membership:

To create an account for your ECCO membership and make it available to you.

• The mandatory personal data you provide to us when you sign up for an ECCO membership is:
  • First name
  • Last name
  • E-mail address
  • Phone number
  • Gender
  • Password

We cannot create a membership and make an account available to you unless you provide us with the mandatory information.

• The legal basis for this processing is GDPR 6(1) f), namely our legitimate interest in providing you access to and make the membership available to you. 

To provide additional services to you as part of your ECCO membership.

When having an ECCO membership we will store, and you will have access to the following information:

• Transactional data about your recent purchases
• Transactional data about your recent returns
• Membership information, including tier, points and available rewards

The stores will also have access to your membership information, including:

• Transactional data about your recent purchases
• Transactional data about your recent returns
• Membership information, including tier, points and available rewards

The legal basis for this processing is GDPR art. 6(1) f), namely our legitimate interest in providing you access to information about your transactions with us and about your membership.

To improve our services and offerings to you.

We may also give you the opportunity to provide us with the following supplementary data than the data which we have clearly indicated as mandatory:

• Phone Number
• Age
• Date of birth
• family information
• shoe size
• shipping and billing address
• Preferred store
• Other demographic information or information about your interests and purchasing preferences

We will use the data to improve our services and offerings to you, including by creating and placing you in marketing segments, in order to optimize our offers to you. It is your own choice whether you will provide such supplementary data to us.

The legal basis for this processing is GDPR art. 6(1) f), namely our legitimate interest in improving our services and providing you with content tailored for your segment.

To provide you with personalised content and offers.

To evaluate and assess your individual interests and preferences for the purpose of providing you with personalized offerings and benefits as part of your ECCO membership, such as personal discounts or invites, we may use the following data:

• First name
• Last name
• E-mail address
• Gender
• Phone Number
• Age
• Date of birth
• Family information
• shoe size
• shipping and billing address
• Preferred store
• Membership information, including tier, points and available rewards
• Other demographic information or information about your interests and purchasing preferences
• Other supplementary information you have provided to us
• Information collected about you through other channels as described in section 2.9 (Profiling for marketing purposes

The legal basis for this processing is GDPR art. 6(1) f), namely our legitimate interest in improving our services and providing you with offers and benefits tailored for you.

PLEASE BE INFORMED THAT YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO OUR PROCESSING OF YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES INCL. PROFILING RELATED HERETO. Please also refer to SECTION 5 (YOUR RIGHTS AND HOW TO WITHDRAW CONSENTS AND UNSUBSCRIBE)

To provide you with better services when visiting our stores

In order to give you a better service in the ECCO stores operated by our Affiliates, the staff will have access to the following information about you:

• First name
• Last name
• Gender
• E-mail address
• Transactional data
• Membership information, including tier, points and available rewards
• Other supplementary information you have provided to us

The store staff will only access your information if you identify yourself to the staff either by providing your e-mail, name, phone number, or membership barcode.

The ECCO stores may use the data to service you, and may on our behalf register information about your visit, such as the date of the visit, details about your purchases and returns, and usage of membership rewards.

The legal basis for this processing is GDPR art. 6(1) f), namely our legitimate interest in improving and tailoring our services to you.

General marketing research and to tailor or improve our Websites, Apps and our service offerings

• For the purpose of performing general marketing research, we use all information collected about you, as described above in this section. We may also use information collected about you through other channels as described in section 2.9 (Profiling for marketing purposes).
• For the purposes of being able to personalize your store, website and/or app experiences, adapt the content of future Newsletters and membership account to better suit to your interests and to provide you with personalized offerings, we may also build profiles and inferences based on the personal data described above in this section and information collected about you through other channels as described in section 2.9 (Profiling for marketing purposes).
• The legal basis for this processing is GDPR art. 6(1) f), namely our legitimate interest in understanding customer behaviour and interests and ensuring effective marketing and advertisement of ECCO product and services.
• PLEASE BE INFORMED THAT YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO OUR PROCESSING OF YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES INCL. PROFILING RELATED HERETO. Please also refer to SECTION 5 (YOUR RIGHTS AND HOW TO WITHDRAW CONSENTS AND UNSUBSCRIBE)

2.5. When using our online ECCO shops

We offer you the opportunity to make purchases of ECCO products through our online shop. The purchases made through the online shop on cy.ecco.com are made from ECCO (Cyprus) Limited, with its registered address at 195 ARCH. MAKARIOS III AVE. NEOCLEOUS HOUSE 3030 LIMASSOL CYPRUS, Reg. No.: HE 290547. However, the processing of your personal data related to the use of the online shop is under our control.

Below you can read more about the types of personal data and the legal basis for the different purposes that we use data if you make or take steps to make a purchase on this Website or any of our other Websites or Apps:

Completing the purchase and delivery of the purchased items to you

• The mandatory personal data you provide to us when making a purchase is:
  • First name
  • Last name
  • E-mail address
  • Shipping address
  • Billing address
  • Phone Number
  • Details of the purchased items
  • Other information necessary for the purpose of completing the purchase and delivery of the purchased items to you
• The Legal basis for this processing is GDPR art. 6(1) b), namely that the processing is necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract.  

Managing payments on this Website

• The personal data we process for this is:
  • First name
  • Last name
  • Shipping address
  • Billing address
  • Transactional data
  • E-mail address
  • IP address
  • Phone number
  • Mobile phone number
  • Other data necessary for payment processing
• For the purpose of managing payments on this Website, we have integrated components of the following online payment service provider: Altapay A/S, Gyngemose Parkvej 50, 2860 Søborg, Denmark (Hereinafter referred to as the “Online Payment Service Provider”). When having selected the relevant payment method, we automatically transfer personal data to the Online Payment Service Provider, which is necessary for payment processing.
• You will provide your credit card details directly to the Online Payment Service Provider, who will then further transfer necessary data to the relevant credit card agencies for identity and creditworthiness checks and payment clearance.
• The Legal basis for this processing is GDPR art. 6(1) b), namely that the processing is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract. 

Managing Click & Collect

• If you have chosen Click & Collect, then we process the following personal data.
  • First name
  • Last name
  • E-mail address
  • Billing address
  • Phone Number
  • Details of the purchased items
• The Legal basis for this processing is GDPR art. 6(1) b), namely that the processing is necessary for the performance of a contract to which you are party and GDPR art. 6(1) f), namely our legitimate interest in providing customer services. 

Managing vouchers, membership rewards and gift certificates

• If you have received a voucher, membership reward or a gift certificate, then we will for the purpose of managing such voucher, membership reward or a gift certificate and enabling you to benefit from it, process personal data about you. The personal data we process for this is:
  • First name
  • Last name
  • E-mail address
  • Membership information, including tier, points and available rewards
  • Transaction history
• The Legal basis for this processing is GDPR art. 6(1) b), namely that the processing is necessary for the performance of a contract to which you are party. 

Prevention of fraud, misuse of services and money laundering

• If you make an order through our online shop, we perform automated fraud checks to minimize the risk of being exposed to fraudulent behaviour and the misuse of credit cards. The personal data we process for this is:
  • First name
  • Last name
  • Shipping address
  • Billing address
  • Phone Number
  • Transactional data
  • E-mail address
  • Credit card number
  • Expiry date
  • Security code
  • Purchase behaviour for automated decision-making without human intervention to determine whether there is a risk that we are exposed to fraudulent behaviour and misuse of credit cards.
• The Legal basis for this processing is GDPR art. 6(1) f), namely our legitimate interest in the prevention and protection of us and third parties against fraud, misuse of services, and money laundering.   
• If we suspect fraudulent behaviour, then the purchase will not be completed. In case you experience that the purchase is denied, and you want to object to this, please contact our Customer Care in accordance with section 1 (Our Contact Details).

Managing returns request and returning money

• If you return any purchased items to us, then we process the following personal data:
  • First name
  • Last name
  • E-mail address
  • Shipping address
  • Billing address
  • Details of the purchased items
  • Reason for return
  • Phone Number
  • Shoe Size
  • Languages Spoken
• The Legal basis for this processing is GDPR art. 6(1) b), namely that the processing is necessary for the performance of a contract to which you are party and GDPR art. 6(1) f), namely our legitimate interest in providing customer services. 

General marketing research and to tailor or improve our Websites, Apps and our service offerings

• For the purposes of performing general marketing research, we use all information collected about you, as described above in this section. We may also use information collected about you through other channels as described in section 2.9 (Profiling for marketing purposes).
• For the purposes of being able to personalize your store, website and/or app experiences, adapt the content of future Newsletters and membership account to better suit to your interests and to provide you with personalized offerings we may also build profiles and inferences based on the personal data described above in this section and information collected about you through other channels as described in section 2.9 (Profiling for marketing purposes).
• The legal basis for this processing is GDPR art. 6(1) f), namely our legitimate interest in understanding customer behaviour and interests and ensuring effective marketing and advertisement of ECCO product and services.
• PLEASE BE INFORMED THAT YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO OUR PROCESSING OF YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES INCL. PROFILING RELATED HERETO. Please also refer to SECTION 5 (YOUR RIGHTS AND HOW TO WITHDRAW CONSENTS AND UNSUBSCRIBE)

2.6. When visiting our ECCO stores

You can visit the ECCO stores operated by ECCO without disclosing any information about yourself. 

Below you can read more about the types of personal data and the legal basis for the different purposes that we use data if you decide to use one or more of the services offered in our stores:

Electronic Receipt

• We offer to provide you with an electronic copy of your invoice by e-mail, when you make a purchase in one of the ECCO stores operated by ECCO. If you make use of this service, then we will process the following personal data:
  • E-mail address
  • Copy of invoice
• The legal basis for this is GDPR art. 6(1) f), namely our legitimate interest in providing customers services.
• We will not use your e-mail to send you Newsletters or other marketing material, unless you specifically have signed up to receive Newsletters.

Having an ECCO membership or signed up to receive Newsletters

• In order to give you a better service in ECCO stores, the staff will have access to your personal data if you are signed up for our Newsletter or have an ECCO membership and you identify yourself to the staff either by providing your e-mail, name, or phone number. The personal data processed in such case include:
  • First name
  • Last name
  • E-mail address
  • Phone number
  • Transactional data
  • Data of visit of ECCO stores
  • Membership information, including tier, points and available rewards
  • Other supplementary information you have provided to us
• The ECCO store may use the data to service you, and the ECCO stores may on our behalf register information about your visit, such as the date of the visit, details about your purchases and returns.
• The legal basis for the processing described in this section is GDPR art. 6(1) a), namely the consent you have granted when creating the account.
• Please also refer to SECTION 2.4 (WHEN HAVING A MY ECCO ACCOUNT) and section 2.9 (Profiling for marketing purposes).

Managing vouchers, membership rewards and gift certificates

• If you have got a voucher, membership reward or a gift certificate, then we process the following personal data:
  • First name
  • Last name
  • E-mail address
  • Coupon code
  • Membership information, including tier, points and available rewards
  • Transaction history
• The Legal basis for this processing is GDPR art. 6(1) b), namely that the processing is necessary for the performance of a contract to which you are party.

Managing home deliveries

• We may offer you to send your order to your home address. If you choose to use this service, we process the following personal data:
  • First name
  • Last name
  • E-mail address
  • Shipping address
  • Details of the purchased items
• The Legal basis for this processing is GDPR art. 6(1) b), namely that the processing is necessary for the performance of a contract to which you are party.

General marketing research, profiling and to tailor or improve our Websites, Apps and our service offerings

• For the purposes of performing general marketing research, we use all information collected about you, as described in this section. We may also use information collected about you through other channels as described in section 2.9 (Profiling for marketing purposes).
• For the purposes of being able to personalize your store, website and/or app experiences, adapt the content of future Newsletters and membership account to better suit to your interests and to provide you with personalized offerings, we may also build profiles and inferences based on the personal data described above in this section and information collected about you through other channels as described in section 2.9 (Profiling for marketing purposes).
• The legal basis for this processing is GDPR art. 6(1) f), namely our legitimate interest in understanding customer behaviour and interests and ensuring effective marketing and advertisement of ECCO product and services.
• PLEASE BE INFORMED THAT YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO OUR PROCESSING OF YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES INCL. PROFILING RELATED HERETO. Please also refer to SECTION 5 (YOUR RIGHTS AND HOW TO WITHDRAW CONSENTS AND UNSUBSCRIBE)

2.7. When contacting us through Customer Care or e-mailing us

You may always contact us through one of our Customer Care representatives, or e-mail us with a claim, comment or questions.

Below you can read more about the types of personal data and the legal basis for the different purposes that we use data if you decide to contact us through one of our Customer Care representatives, or e-mail us:

Customer care – request handling

• When you contact us either through one of our Customer Care representatives, or e-mail us with a comment or question, we will retain and use the following information in order to respond to your request:
  • First name
  • Last name
  • E-mail address
  • Phone number
  • Country of residence
  • Membership information, including tier, points and available rewards
  • Other information, which might be needed to reply to your request
• It is always optional for you what information you chose to provide us with. However, please note that in case we do not have sufficient information to process your request, then we may not be able to fully support your request or enquiry.
• The Legal basis for this processing is GDPR art. 6(1) f), namely our legitimate interests in providing customer services, understanding customer behaviour and interests and establishing, exercising and/or defending legal claims.   

Customer care – claim handling

• When you contact us either through one of our Customer Care representatives, or e-mail us with a claim we will retain and use the following information in order to respond to your claim:
  • First name
  • Last name
  • E-mail address
  • Phone number
  • Country of residence
  • Membership information, including tier, points and available rewards
  • Information about the claim
• The legal basis for this is GDPR art. 6(1) f), namely our legitimate interest in handling claims and provide customer service.
• If needed for establishing, exercising or defending the claim we may also request other information, including:
  • Health data
  • Biometric data
  • Other special categories of data, if relevant for the claim.
• The legal basis for this is GDPR art. 6(1) f), namely our legitimate interest in establishing, exercising or defending legal claims. The exception that applies to our processing of special categories of data is GDPR art. 9(2) f), namely that the processing is necessary for the establishment, exercise or defence of legal claims.

General marketing research, profiling and to tailor or improve our Websites and our service offerings

• For the purposes of performing general marketing research, we use all information collected about you, as described in this section. We may also use information collected about you through other channels as described in section 2.9 (Profiling for marketing purposes).
• For the purposes of being able to personalize your store, website and/or app experiences, adapt the content of future Newsletters and membership account to better suit to your interests and to provide you with personalized offerings, we may also build profiles and inferences based on the personal data described above in this section and information collected about you through other channels as described in section 2.9 (Profiling for marketing purposes).
• The legal basis for this processing is GDPR art. 6(1) f), namely our legitimate interest in understanding customer behaviour and interests and ensuring effective marketing and advertisement of ECCO product and services.
• PLEASE BE INFORMED THAT YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO OUR PROCESSING OF YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES INCL. PROFILING RELATED HERETO. Please also refer to SECTION 5 (YOUR RIGHTS AND HOW TO WITHDRAW CONSENTS AND UNSUBSCRIBE)

2.8. When participating in competitions, product reviews and surveys etc.

Occasionally we may give you the opportunity to participate in competitions, make product reviews or surveys etc. If you choose to participate, then we will be asking you to provide us with certain data.

Below you can read more about the types of personal data and the legal basis for the different purposes that we use data if you decide to participate in a competition, product review or survey:

Running competitions and surveys

• The personal data we collect, and process depends on the specific competition or survey etc., but it might include:
  • First name
  • Last name
  • E-mail address
  • Age
  • Gender
  • Family information
  • Shoe size
  • Other demographic information
  • Membership information, including tier, points and available rewards
  • Information about your interests and purchasing preferences
• It is always optional for you if you want to participate in a competition or answering a survey and therefore it is always optional what information you chose to provide us with. However, providing specific data may be mandatory for entry into a competition or completion of a survey and not providing this information may preclude your involvement.
• The Legal basis for this is GDPR art. 6(1) a) namely the consent you have granted, when choosing to participate in the competition or survey and/or GDPR art. 6(1) b), namely that the processing is necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract.

Conducting product reviews

• We may from time to time ask you to provide your feedback about products you have acquired from us. If you participate in a product review, we collect and process the following personal data:
  • First name
  • Last name
  • E-mail address
  • Age
  • Gender
  • Nationality
  • Shoe size
  • Other demographic information
  • Data collected through the use of our Websites
  • Transactional data
  • Information about your interests and purchasing preferences
  • Image and video recording of you
  • Your opinion about our products
• It is always optional for you if you want to participate in a product review and therefore it is always optional what information you chose to provide us with. But please be aware that providing specific data may be mandatory and to the extent you will not provide such data you cannot participate in the product review.
• The Legal basis for this is GDPR art. 6(1) a) namely the consent you have granted, when choosing to participate in the product review.

General marketing research and to tailor or improve our Websites, Apps and our service offerings

• We use information for running competitions or surveys, but we also use it for general market research purposes and to tailor or improve our Websites, Apps, membership programme and service offerings.
• For the purposes of performing general marketing research, we use all information collected about you, as described above in this section. We may also use information collected about you through other channels as described in section 2.9 (Profiling for marketing purposes).
• For the purposes of being able to personalize your store, website and/or app experiences, adapt the content of future Newsletters and membership account to better suit to your interests and to provide you with personalized offerings, we may also build profiles and inferences based on the personal data described above in this section and information collected about you through other channels as described in section 2.9 (Profiling for marketing purposes).
• The legal basis for this processing is GDPR art. 6(1) f), namely our legitimate interest in understanding customer behaviour and interests and ensuring effective marketing and advertisement of ECCO product and services.
• PLEASE BE INFORMED THAT YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO OUR PROCESSING OF YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES INCL. PROFILING RELATED HERETO. Please also refer to SECTION 5 (YOUR RIGHTS AND HOW TO WITHDRAW CONSENTS AND UNSUBSCRIBE).

2.9. Profiling for marketing purposes

ECCO wants to better understand our customers to ensure we provide an experience that is relevant and to ensure effective marketing and advertising of ECCO products and services. To better understand our customers and to personalise the experience of our Newsletters, App and Websites, we use the personal data we are in possession of to analyse or predict aspects concerning our individual customers’, newsletter recipients’, members’, and website visitors’ personal preferences, interests and behaviour. And to perform general marketing research including customer analysis, customer segmentation and statistics.

If you have identified yourself to us, for example by making a purchase, creating an ECCO membership or by giving us your name, e-mail address or phone number, then we may link the personal data we have collected about you as per above sections.

PLEASE BE INFORMED THAT YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO OUR PROCESSING OF YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES INCL. PROFILING RELATED HERETO. Please also refer to SECTION 5 (YOUR RIGHTS AND HOW TO WITHDRAW CONSENTS AND UNSUBSCRIBE).

If you disagree and want to object to this, please contact us in accordance with the section 1 “Our Contact Details”, and we will then cease to use your personal data for profiling for direct marketing purposes.

Below you can read more about the types of personal data and the legal basis for the different purposes that we use data for when profiling our customers:

General marketing research incl. customer analysis and customer segmentation and statistics

• The personal data we process for this is:
  • First name
  • Last name
  • E-mail address
  • Phone number
  • data collected through the use of our Websites
  • Newsletter-tracking data
  • Addresses
  • Membership information, including tier, points and available rewards
  • Information from you concerning demographics, interests and preferences (e.g. gender, date of birth, shoe size, the shoe preferences of you and your family members,)
  • Online and Offline Transactional Data including abandoned shopping baskets, returns and Customer Care interactions.
• We use your data for different analytical purposes to better understand: a) how you browse and use our platforms; b) which products you are interested in; c) which features of our products and platforms you like; d) the quality of our services including customer service, marketing and advertising campaigns addressed to you, and your reaction to these services; e) our product and website design; f) whether overall user experience worked for you or not; and g) which rewards you most commonly redeem in your membership programme. We use this analysis to understand and improve and develop our marketing communication to you and the quality of our personalisation experience across our channels and platforms.
• The legal basis for this is GDPR art. 6(1) f) our legitimate interests, namely in understanding customer behaviour and interests and ensuring effective marketing and advertisement of ECCO product and services.

Personalize your shopping and website experiences and optimizing the service you receive

Furthermore, we may use the information to evaluate and assess your individual interests and preferences in order to personalize your shopping and website experiences, membership experience and rewards, and optimizing the service you receive from us.

• The legal basis for this is GDPR art. 6(1) f) our legitimate interests namely in understanding customer behaviour and interests and ensuring effective marketing and advertisement of ECCO product and services.

Customizing Newsletter content and special offers

If you have signed up to receive Newsletters, then we will also use your personal data in order to adapt the content of Newsletters to better suit your interests and to provide you with personalized offerings.

• The Legal basis for this is GDPR art. 6(1) a) namely the consent you have granted, when signing up to receive Newsletters.

Audience Management

• We create a profile about you by consolidating all the information you provided to us directly or indirectly. This allows us to personalise our interactions with you. We use audience management technologies to ensure the right messages and information reach you at the appropriate moment through the channels you have used previously or expressed a preference for. This includes sending you marketing messages of offers and product. News or addressing you across digital media through ads on ECCO brand platforms. The level of personalisation depends on the consents you have provided to us and the length and nature of our relationship with you.
• The Legal basis for this is GDPR art. 6(1) a) namely the consent you have granted, when signing up to receive Newsletters and/or accepted cookies.

Improve data models

• We use data science and your profile and personal data to create data models that can help us improve the logic in our analytics activities that give us more insight about your comments and feedback, your interactions, preference and needs in our products and services. We will compare the data model we created using your profile with other similar consumer profiles and categories to further predict and analyse your preference.
• The legal basis for this is GDPR art. 6(1) f) our legitimate interests namely in understanding customer behaviour and interests and ensuring effective marketing and advertisement of ECCO product and services.

2.10. Social Media

ECCO is present on and operates various Social Media Pages on platforms such as Facebook, TikTok and Instagram. We use these to communicate with you and provide you with information related to ECCO, our products and services and promotional updates. We may receive information from you through your comments, shared images, messages, and reactions, which we use to answer or communicate with you.

If you use a hashtag that includes ECCO, our product names or other information that we search for, we may also use your information to reach out to you, communicate with you and, subject to your consent, use your user generated content on our Website and/or Social Media Pages.

Below you can read more about the types of personal data, the legal basis and the different purposes that we use for processing data on social media:

When visiting our Social Media Pages or when you are engaging with us via social media platforms

• We obtain information about you through different social media channels such as Facebook, Instagram, TikTok, Google, etc. when we use these channels for advertising, analytics purposes or to enrich your profile with ECCO.
• The personal data we process for this about you include any social media information that is publicly available such as your social media handles, social media interactions and public postings, your “Likes” and other reactions, your social media connections, your photos that are public, or those you send to us by mentioning us or following our social media posts by using “handles” or “hashtags”, and comments or messages you shared with us publicly or privately on social media platforms.
• Also, we may be able to obtain information indirectly from social media companies (Facebook, Google, etc.) when we advertise on these platforms. The personal data we process for this include your participation and membership on particular topics and/or groups, your profile settings and preference and your behaviour on different platforms owned by the same company.
• The legal basis for this is GDPR art. 6(1) f) our legitimate interests, namely in understanding customer behaviour and interests, ensuring effective marketing and advertisement of ECCO product and services and to provide a great service to our customers.

When we use your user generated content in marketing of our products

• From time to time we invite you to provide your images to us via social media platforms by following specific instructions on the use of hashtags. We will be using the images you provide for our campaign communications. We will obtain rights to your image through a licence agreement in the form of our terms and conditions.
• By submitting your images via social media platforms to us, you will agree for us to use your images as described in the licence agreement. The personal data we process for this include information about your social media handle, images, videos, comments, sound recordings and other files provided through the social media platform promoting ECCO and social media interaction and activity.
• The legal basis for this is GDPR art. 6(1) a) namely the consent you provide when you accept our use of your user generated content.

Advertisement via social media

We use third-party advertising platforms, such as Facebook, TikTok, Google, YouTube, Instagram, etc. to send you messages that are targeted at you, based on your behaviour and browsing pattern, at specific times and locations of these platforms to increase the efficiency of our advertising campaigns.

In order to do this, we share your personal data with our advertising agency partners as well as social media platforms. We use third-party solutions such as Google Analytics and Facebook Business Manager tools to help us do a better job at targeting our campaigns and messages for our consumers.

Social media platforms will attempt to match your profile in their database to determine the optimal time and place (the page you are browsing) to show you an advertisement from ECCO. We also need to analyse necessary information to understand the impact of our campaigns.

If you don’t accept that we track you for this purpose, you will still see ECCO advertisements on social media platforms and other third-party platforms at random. Please also read the privacy notice on the social media platforms to understand how your personal data is used by them for this purpose.

You can learn more about how our advertising partners and social media platforms help us achieve this purpose by visiting their sites:

Google Personalised Advertising: https://support.google.com/adspolicy/answer/143465?hl=en

Google Advertising Policies: https://support.google.com/adspolicy/answer/6020956

Facebook Lookalike Audiences: https://www.facebook.com/business/help/164749007013531

Facebook Custom Audience Terms: https://www.facebook.com/legal/terms/customaudience

TikTok Advanced Matching Terms: https://ads.tiktok.com/i18n/official/policy/business-products-terms

Pinterest Analytics term: https://help.pinterest.com/en/business/article/pinterest-analytics

• The legal basis for this is GDPR art. 6(1) f) our legitimate interests, namely in understanding customer behaviour and interests and ensuring effective marketing and advertisement of ECCO product and services.

Meta as a joint controller

Meta is a Joint Controller of the Joint Processing and information required by Article 13(1)(a) and (b) GDPR can be found in Meta’s Data Policy at https://www.facebook.com/about/privacy.

The information that you use Applicable Products as well as the purposes for which the collection and transmission of Personal Data that constitutes the Joint Processing takes place as set out in the Applicable Product Terms.

Further information on how Meta processes Personal Data, including the legal basis Facebook Ireland relies on and the ways to exercise Data Subject rights against Facebook Ireland, can be found in Meta’s Data Policy at https://www.facebook.com/about/privacy.

Meta and ECCO has entered into a Controller Addendum to determine the respective responsibilities for compliance with the obligations under the GDPR with regard to the activities for which we are joint controllers.

Meta and ECCO has agreed that ECCO are responsible for providing Data Subjects as a minimum with the information required under the GDPR and which is set out in this Privacy Policy.

Meta and ECCO has also agreed that between Meta and ECCO, Meta is responsible for enabling Data Subjects’ rights under Articles 15-20 of the GDPR with regard to the Personal Data stored by Meta after the Joint Processing.

Tik Tok as a joint controller

We use the TikTok Pixel, provided by TikTok, to collect information about your use of our Website in order to serve targeted advertising and to measure the performance of our advertising campaigns.

The TikTok Pixel enables us to retarget you with products and services you have viewed on our Digital Property on TikTok and to measure when you have clicked through to our Digital Property after seeing one of our advertisements on TikTok.

Information about how TikTok collects, uses and protects information collected using the TikTok Pixel is available in TikTok's user privacy policy at https://www.tiktok.com/legal/privacy-policy-eea?lang=en.

Pinterest as a joint controller

Pinterest Europe is a Joint Controller of the Joint Processing and information required by Article 13(1)(a) and (b) GDPR can be found in Pinterest Europe’s Privacy Policy at: https://policy.pinterest.com/en/privacy-policy  

Criteo as a joint controller

We use the Criteo tag, provided by Criteo, to collect information about the users and their activity on our Website to target advertising to the user across different channels and devices.

Information about how Criteo collects, uses and protects information collected using the Criteo Pixel is available in Criteo’s privacy policy at https://www.criteo.com/privacy/

Awin as a joint controller

We use the Awin tag, provided by Awin, to identifying conversions to attribute sales and commission to relevant publishers, to identify purchased products to attribute sale and commission based on product types to relevant publishers and to collect information about user activities on the website to improve partnerships with publishers.

Information about how Awin collects, uses and protects information collected using the Awin Pixel is available in Awin's privacy policy at https://www.awin.com/gb/privacy

General marketing research, profiling and to tailor or improve our Websites, Apps and our service offerings

• For the purposes of performing general marketing research, we use all information collected about you, as described in this section. We may also use information collected about you through other channels as described in section 2.9 (Profiling for marketing purposes).
• For the purposes of being able to personalize your store, website and/or app experiences, adapt the content of future Newsletters and membership account to better suit to your interests and to provide you with personalized offerings, we may also build profiles and inferences based on the personal data described above in this section and information collected about you through other channels as described in section 2.9 (Profiling for marketing purposes).

2.11. Online Marketing and re-targeting

When entering the ECCO Website and App and to the extent you have given us your consent to place cookies on your device, we will be using cookies and similar technologies to track your activities on our Website and use your information to target advertising to you across different channels and devices (also known as “cross-context behavioural advertising”).

Beside cookie technology and information processed by use hereof, we might also process other personal data we have about you for online marketing and re-targeting purposes.

If you have identified yourself to us, for example by making a purchase, creating an account or by giving us your name, e-mail address or phone number, then we may also use the personal data we have collected about you as per above sections.

If you disagree and want to object to this, please contact us in accordance with the section 1 (OUR CONTACT DETAILS), and we will then cease to use your personal data for profiling for marketing purposes.

Below you can read more about the types of personal data and the legal basis for the different purposes that we use for online marketing and re-targeting:

Online marketing and re-targeting

• The personal data we process for this is:
  • E-mail address
  • Data collected through the use of our Websites and Apps
  • Newsletter-tracking data
  • Membership information, including tier, points and available rewards
  • information from you concerning demographics, interests and preferences (e.g. gender, date of birth, shoe size, family situation, product preferences etc.)
  • Online and Offline Transactional Data incl. abandoned shopping baskets, returns and Customer Care interactions
  • Your profile inferred through this information cf. section 2.9 (Profiling for marketing purposes)
• The legal basis for this is GDPR art. 6(1) a) namely the consent you provide when you accept our use of marketing cookies.

3. HOW WE SHARE YOUR PERSONAL DATA WITH OTHERS

In order to make our services available to you, provide you with requested services and support and in general to operate our business, we will have to disclose and transfer your personal data to other ECCO Affiliates and third parties, such as IT suppliers, marketing agencies, logistics service providers, payment service providers etc.

When using service providers and contractors to process your personal data on our behalf (also referred to as “data processors”) we require, that they only process your personal data in accordance with our instructions. We also require that the data processors signs relevant contracts providing sufficient guarantees to implement appropriate technical and organisational measures in such a manner that the data processing will meet the requirements of the applicable data protection regulation and ensures an appropriate protection of your rights.

In case we disclose your personal data to third parties, who will not be acting as a data processor under our instructions, but as independent data controllers, then we do our best to ensure that they are trustworthy and have implemented appropriate technical and organisational measure to protect your data.

Unfold below sections to read more about how we share your personal data.

3.1.Categories of Recipients

The main categories of potential recipients of your personal data are:

1. Service Providers acting as data processors

We may share your personal data with our trusted third party service providers, who, on our behalf, operate, maintain, and/or support our IT systems and IT infrastructure, our Websites, manage our payment solutions, perform statistical analysis, sending Newsletters, provide customer support and perform other important services for us.

2. Service Providers acting as independent controllers

We may also share your personal data with our trusted third party service providers, who will use your personal data for their own purpose and thus will act as independent data controllers. These third party service providers include logistic service providers, payment service providers and our external auditors.

3. Third party advertising partners like Facebook, Google and TikTok

We use third party advertising partners to collect information about your use of our Website in order to serve targeted advertising and to measure the performance of our advertising campaigns. The third party partners we use may collect this information using tracking technologies, such as pixels, cookies, APIs and SDKs.

Facebook (Meta): You can read more about how Facebook Ireland processes your personal data in their Data Policy at https://www.facebook.com/about/privacy.

Google: You can read more about how Google uses information shared with them here: https://policies.google.com/technologies/partner-sites

TikTok: You can read more about how TikTok uses information shared with them here:  https://www.tiktok.com/legal/privacy-policy-eea?lang=en.

Instagram: You can read more about how Instagram uses information shared with them here:  https://privacycenter.instagram.com/policy.

Pinterest: You can read more about how Pinterest uses information shared with them here:  https://policy.pinterest.com/en/privacy-policy.

Criteo: You can read more about how Criteo uses information shared with them here:  https://www.criteo.com/privacy/.

Awin: You can read more about how Awin uses information shared with them here:  https://www.awin.com/gb/privacy.

4. ECCO Sko A/S

We may disclose your personal data to ECCO Sko A/S with its registered address at Industrivej 5, 6261 Bredebro, Denmark and other companies, which are owned or controlled by ECCO Sko A/S or owns or controls ECCO Sko A/S (“ECCO Affiliates”) in order for them to provide us with relevant services

5. Other ECCO Affiliates

If you have created an account with us, then we may disclose your personal data to other companies which are owned or controlled by us in order for the operation of the MY ECCO account cf. section 2.4 (WHEN HAVING A MY ECCO ACCOUNT).

If you have made a purchase from one of our ECCO Affiliates through our online shop, then transactional data will be disclosed in order for the ECCO Affiliate to comply with relevant accounting and tax regulation etc.  

We may also disclose your personal data to other ECCO Affiliates in other situations in order for them to provide us with relevant services.

6. Legal Successors

A transfer of your personal data to another legal entity may occur as part of a transfer of our business or parts thereof in form of a reorganization, sale of assets, consolidation, merger or similar.

7. Other disclosures

In addition to where you have consented to a disclosure of the personal data or where disclosure is necessary to achieve the purpose(s) for which it was collected, personal data may also be disclosed in special situations, where we have reason to believe that doing so is necessary to identify, contact or bring legal action against anyone damaging, injuring, or interfering (intentionally or unintentionally) with our rights or property, users, or anyone else who could be harmed by such activities, or otherwise where necessary for the establishment, exercise or defence of legal claims. 

3.2. Transfer of data to third countries

The use of service providers and disclosure of your personal data to other ECCO Affiliates and other recipients might imply a transfer of your personal data to countries, which might not have data protection regulation as protective as in your jurisdiction and might not be considered ensuring an adequate level of protection of personal data by the EU Commission or a national data protection authority (so called “unsafe Third Countries”). Such countries include, but is not limited to, countries in the European Union, the United Kingdom, the United States, Canada, China, Hong Kong, Macau, Taiwan, Vietnam, Singapore, Thailand, Malaysia, Japan, South Korea, Russia, UAE, Turkey, Indonesia, Australia and New Zealand.

We require that all recipients of your personal data provide appropriate safeguards to protect your personal data, when it is transferred to “unsafe Third Countries”. This is among other lawful means ensured through the adherence to standard data protection clauses as applicable under the EU GDPR article 46(2) or the EU-U.S Data Protection Framework if data is transferred to the USA. Please refer to the following link to obtain more information about the standard data protection clauses we in general use visit http://ec.europa.eu/justice/data-protection/international-transfers/transfer/index_en.htm.

We may also share your personal data with other third parties in other countries if you have given your consent to do so, if we are required to do so by law, if it is necessary for an association dissolution or a merger with another association or another similar event, or if it is necessary in connection with legal proceedings or to assert or defend claims.

If you have any questions, please contact our Customer Care representatives in accordance with section 1 (Our Contact Details).

4. HOW WE RETAIN AND DELETE YOUR DATA

Your personal data will be held by us and kept in a form, which permits identification of you for no longer than is necessary for the purposes for which the personal data is collected and legitimately processed.

This implies that we will keep and process your personal data as long as we are providing services to you and also keep it afterwards for as long as would be needed for:

1. the establishment, exercise or defence of potential legal claims and disputes.
2. compliance with tax, VAT, accounting and other mandatory regulation.

We will delete any information, which according to our reasonable assessment seems to be inaccurate or out of date by reason of the time elapsed since it was collected or by reason of any other information in our possession.

If you provide us with a written request, we will also erase or anonymize your personal data without undue delay, unless we have a valid legal ground to continue to keep your personal data. Please also refer to section 5 (Your rights and how to withdraw consents and unsubscribe).

5. YOUR RIGHTS AND HOW TO WITHDRAW CONSENTS AND UNSUBSCRIBE

You have certain rights according to the applicable data protection regulation. Some of the rights are rather complex and include exemptions, accordingly you are recommended to read relevant laws and guidance from the regulatory authorities for full explanation of these rights. However, you can find a summary of your rights, if you unfold below sections.

5.1. The right to access

You have a right to obtain the confirmation as to whether or not your personal data are being processed by us. In addition, you have a right to obtain more detailed information about the personal data kept and the processing undertaken by us and under certain circumstances the right to receive a copy of this personal data.

5.2. The right to rectification

You have the right to have inaccurate personal data about you rectified, and, taking into account the purpose of the processing, to have incomplete personal data completed.

5.3. The right to erasure

In some cases, you have the right to erasure of your personal data without undue delay. Those circumstances include; i) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; ii) you withdraw consent to consent-based processing; iii) the processing is for direct marketing purposes and/or iv) the personal data has been unlawfully processed. However, there are certain general exclusions of the right to erasure. Those general exclusions include where processing is necessary; i) for the exercising the right of freedom of expression and information; ii) for compliance with legal obligation; or iii) for the establishment, exercise or defence of legal claims.

5.4. The right to restriction of processing

In some cases, you have the right to restrict the processing of your personal data. Where processing has been restricted, we may continue to store your personal data. However, we will only otherwise process it i) with your consent; ii) for the establishment, exercise or defence of legal claims; iii) for the protection of the rights of another natural or legal person; or iv) for reasons of important public interest.

5.5. The right to data portability

To the extent the legal basis for the processing is your consent, and such processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used and machine-readable format. However, this right does not apply where it would adversely affect the rights and freedoms of others.

5.6. The right to object

You have the right to object to the processing of your personal data on grounds relating to your particular situation, but only to the extent that the legal basis for the processing is that the processing is necessary for i) the performance of a task carried out in the public interest or in the exercise of any official authority vested in ECCO; or ii) the purpose of legitimate interests pursued by us or a third party. In such case we will cease processing the personal data, unless we can demonstrate compelling legitimate grounds for the processing, which override your interests, rights and freedoms or the processing is for the establishment, exercise or defence of legal claims.

You also have the right to object to our processing of your personal data for direct marketing purposes (including profiling for direct marketing purposes). If you make such an objection, we will cease to process your personal data for this purpose.

5.7. The right to withdraw consent

To the extent that the legal basis for the processing is your consent, you have the right to withdraw from that consent at any time.

In case you withdraw from a consent given, then we will cease to process your personal data, unless and to the extent the continued processing is permitted or required according to the applicable personal data regulation or other applicable laws and regulations. The withdrawal from your consent will in no event effect the lawfulness of processing based on consent before its withdrawal.

If you refrain from providing required consents, or later on withdraw from the consents, it might have as a consequence that you may not be able to benefit from some of the service offerings provided by us.

5.8. The right to complaint to data protection supervisory authority

You may always lodge a complaint with your local data protection supervisory authority. The data protection supervisory authority in Cyprus is

The Office of the Commissioner for Personal Data Protection]

1 Iasonos Street, 2nd Floor, 1082 Nicosia, Cyprus]

Tel. +35722 818456

Email: commissioner@dataprotection.gov.cy

Commissioner’s website can be found here in English and here in Greek

We do our best to ensure that we protect your personal data, keep you informed about how we process your personal data and comply with the applicable data protection regulation. In case you are not satisfied with the processing and protection of your personal data or the information you have received from us, then we urge you to inform us in order for us to improve. Please also do not hesitate to contact us if you want to make use of your rights.

Please contact us through the points of contact listed in section 1 (Our Contact Details). Please also provide us with relevant information to take care of your request, including your full name and email address so that we can identify you. We will respond to your request without undue delay.

You can always withdraw from a consent to receive Newsletters etc. and unsubscribe from an e-mail list by following the instructions in any e-mail or other communication you receive from us.

If you have created an account with us, then you can also manage your account by logging into the account.

6. LINKS TO OTHER WEBSITES

We may provide links to third party websites. These linked websites are not under our control, and we therefore cannot accept responsibility or liability for the conduct of third parties linked to our Websites. Before disclosing your personal data on any other website, we advise you to examine the terms and conditions of using that website and its privacy policies.

7.CHANGES TO THIS PRIVACY POLICY

We reserve the right, at our discretion, to add, modify or remove portions of this Privacy Policy in the future to ensure that the information herein provides relevant and adequate information about our collecting and processing of your personal data.

This Privacy Policy may be supplemented by other information received from us or another ECCO Affiliates and other terms and conditions applicable to this Website or which you have agreed to as part of interacting with us or another ECCO Affiliate.

You can always find the updated version of our Privacy Policy at cy.ecco.com.    

If you have consented to receive Newsletters and other information from us, we will also inform you directly about any updates to this Privacy Policy through e-mail.

Version [10/2024]