OFFERS, BUY 2 GET -30% on 2nd NEW COLLECTION item SHOP NOW

Privacy Statement

PRIVACY STATEMENT

Version 1.0, Published in 18.12.218

This Privacy Statement describes – inter allia- the use, disclosure and protection of your Personal data, your available options regarding your Personal Data and of how you can contact us. 
Where in this statement a reference is made in the term “the Company”, it shall mean either separately or/and jointly the Société Anonyme company trading under the name “MIGATO S.A - IMPORTS – EXPORTS SOCIETE ANONYME COMPANY OF FOOTWEAR AND LEATHER GOODS” (with the trading name “MIGATO S.A”) with a Trade Register Number of 121892901000 and a Tax Identification Number (T.I.N.) 094333920 of the Public Tax Office of Piraeus, having its principal operating office at Agios Dimitrios Attikis, 8 Monemvasias Street, as well as it’s subsidiary/related separate Société Anonyme Company trading under the name “TSIAO SOCIETE ANONYME COMPANY OF FOOTWEAR CLOTHES AND RELATED GOODS” (with the trading name “TSIAO”), with a Trade Register Number of 122190499000 and a Tax Identification Number (T.I.N.) of 095430730 of the Public Tax Office of Piraeus, having it’s principal operating Office at Agios Dimitrios Attikis, 8 Monemvasias Street, as well as any other legal entity related to the aforementioned Companies, that may established in the future.


The protection of your Personal Data is very important to us. Recently, we conducted a series of changes, reflecting the growing demands of the General Data Protection Regulation (hereinafter referred to as “GDPR”) of the European Union. Our aim is to be as honest and transparent as possible regarding the personal data that we collect, as well as the means of processing of the said Data. Our Company understands and shares your concerns related to your personal data.

Our Company trades a significant variety of clothing, footwear and related products via our retail shops as much as in as well as our e-shop (www.migato.com). Additionally, we have developed, and it is expected to develop in the future, specific ways of “rewarding” our clients, e.g. “Membership Cards” and/or “Loyalty Cards”. Moreover, this Privacy Statement, describes the types of data which are subjected to Processing by our Company, the way the said data are processed, as well as the purpose of the said processing. Additionally, in this privacy statement, you can find information and details regarding your Personal Data processing related with specific offered services (e.g. Membership and Loyalty Cards) for which, additional and related information are offered. The current privacy statement, governs every interaction with the Company.

 

Personal Data We Collect

Personal data are described as the Data which can be used for the identification of a natural person.

You may be asked to provide personal data in the context of any contact, transaction and -generally- every interaction with our Company and/or with a related legal entity of our Company. Our Company, may exchange with it’s related legal entities your personal information and use them pursuant to the current Privacy Policy. They also may combine them with other information, in order to provide and improve our products and services as well as the content of the said services and/or the advertisement of our business activity. 

Our Company collects data from you, through your interaction with us. Our intention is to collect only the absolutely necessary Data, which are specific and appropriate for the intended purpose of the collection. 
The collection and -generally- the processing are conducted for different purposes which are described below. One of the said purposes is to conduct our business in an effective manner and to provide you the best experience with our products and services. Certain data are provided directly from you, for example when you create an account in our e-shop, or when you buy a product or contact us. 
We rely on various legal grounds and rights (“legal basis”) for the processing of your personal data, such as your consent, our legitimate interests, the necessity of concluding an agreement with you and/or performing our contract obligations to you, as well as our compliance with our legal duties for various purposes described below. 
Additionally, we may acquire data from third parties. We protect the data we receive from third parties in accordance with the described practices in this Notice, alongside with the possible additional restrictions enforced by the data provider. For instance, when you purchase our products through Amazon, it is possible that your data to be delivered to us. 
When you will be asked to provide your personal data, you can refuse. However, some of our Services and Products, require certain personal data, in order to respond and provide the product or the service. If you choose not to supply your Data which are necessary for the function and the provision of a product or service to you, you will not be able to use this specific product or service. Similarly, in case we are obliged to collect your personal data by law or for the purposes of concluding and performing a contract with you, and you do not provide your personal data, we will be unable to conclude and perform the contract. 
Among the data we collect, the following may be included:

Name and Contact Details. Your name and surname, email address, postal address, phone number and other similar contact details. In case you express your interest to work for the company we may collect the data of your curriculum vitae such as educational data, e.g. Academics, skills, knowledge of foreign languages, working experience etc.

Credentials. Passwords, suggestions of passwords as well as similar security information which are used for the authentication and access the account.

Payment Data. Data for handling payments, such as the number of your payment instrument (e.g. credit card number), as well as its security password which is correlated with the payment instrument. In case of payment on delivery, there is the possibility of forwarding your personal data to our collaborators e.g. couriers or/and the total amount of the transaction. When you choose to conduct payments through electronic cards and similar means of payments, we may notify your data to Financial and Banking Institutions. In case of reimbursement (e.g. for cancelled orders), especially when the cancelled ordered has been conducted through payment upon delivery, you may be required to disclose your personal data, such as your account details, in order to proceed to the reimbursement.

Interactions. Data related to the use of the Company’s Services from you. For instance, we collect notes from your discussions with us, details related to possible complaints or comments you submit, details related to purchase of our products, as well as products added to your basket or removed by it, list of products you may wish to buy (wish list), coupon redeem, websites you visit and how and when you contact us. Interests and buying preferences, which help us to recommend you specific products and services interested to you. Numbers of visits to our website or other websites you visited before ours. Information collected from the use of cookies in your browser. The username of your social network, if you interacted with us via these channels, to help us answer your comments, questions and/or queries.

Video or Records. Records of events, activities in buildings, retail stores and other locations of the Company. If you visit a location of the Company, such as our premises or/and retail shops or attend a company’s event which is monitored, your image and voice message may be recorded.

Comments and Reviews. Information you provide to us and the content of the messages you send us, such as comments, survey data and reviews you write for a product.


Collection and Processing of non – personal data

We also collect data in a format excluding the automated direct connection with specific person. We maintain the right to collect, use, transfer and communicate non – personal data for every purpose.

 

How we use your personal data

Our Company uses the collected personal data, for the purpose of providing our services and products to you. Our Company uses your personal data exclusively for the specific purposes of collection. In certain cases, and only after providing us your explicit consent, we use your contact details for sending promotional/campaign messages. We also use your data for the conduct of our business activities, which includes the analysis of our performance (benchmarking), the fulfillment of our legal obligations, the development of our workforce and the survey conduct. For the purposes above, we combine data collected from different environments. When we process personal data related to you, we do so, after obtaining your consent or/and as it is required in order to provide you the products you use, to conduct our business operations, to fulfill our contractual and legal obligations, to safeguard our system and client security or to serve Company’s other legal interests, as these are described in this section. 

Specifically, we use the data:

  • To provide our products, including to inform, ensure and address problems. It also includes the notification of data, when it is necessary for the provision of services or for the conduct of the requested agreements.
  • To improve and develop our products.
  • To personalize our products and make recommendations to you.
  • For commercial and promotional purposes, which includes newsletter delivery and providing related offers.

 

The following sections describe the data collection practices followed by our Company:

Create an Account. Users may create their personal account on www.migato.com. For the registration, the completion of a form with your personal details, full address, user’s contact details and a password, is required. 
Purchases via our online shop (e-shop). Our Company provides its clients the capability to purchase its products online through our e-shop. This specific capability is offered to registered users and non-registered website visitors. For the completion of an order requires the following: the entry of registered users, which requires the completion of an electronic mail address (email) and a personal password. The connection via Facebook, where our Company receives public profile information and user’s email addresses. Completion of a form with invoice, payment and delivery data. In these cases, our Company processes your data, with the purpose of fulfilling its contractual relationships, to handle products’ orders or/and services, to provide customer care services, to comply with legal obligations, to dispute, raise or exercise legal claims. If we do not collect your data upon competition of your order, either from our retail shops nor online shop, we will be unable to process your order and therefore, comply with our contractual and other obligations. 
It may be needed to transfer your data to third parties for the supply or delivery of the product or service you ordered. Furthermore, we may retain your data for a reasonable time period, in order to fulfill our contractual obligations, such as return of products, as the relevant legislation requires.

Contact us. Whereas the users of our website wish to contact us, they send their message through a form, filling additionally their full name, email and phone number. In these cases the Company uses your data to answer the submitted requests/questions, the reimbursement requests or/and your complaints. The information you share with us allow us to handle your requests and reply to you in the best possible way. We may also maintain record of your questions/requests in order to better respond in any future communication. We do this based on our contractual obligations towards you, our legal obligations and our legal interests aiming to provide the best possible service and be in a position to develop our services based on your personal experience.

Contests. In response to your wishes, the Company organizes regularly contests carried out mainly through our website, Facebook, and email. Respecting your rights, we ensure that we make available a personal data privacy statement which are collected in context of each contest.

Newsletters. The users wishing to be informed for the news and offers of the Company’s goods, may subscribe to our Newsletter providing us their email. In an effort of personalizing the related information, users may be requested to select categories of interest before completing their registration. Upon your consent, we will use your personal data, preferences and transaction data to inform you via email, internet, and phone and/or via social networks for related products and services, including individualized/ personalized offers, sales etc. Of course, you may revoke your consent at any time (opt-out). 
Participation in rewards program. The Company processes your data for needs of your participation in rewards programs, in particular the examination of your application as well as the collection and redemption of points and in general the enjoyment of client privileges, as these are further described in the terms and conditions of the rewarding program. As a result, we are able to provide you personalized offers that might be interesting specifically to you.

 

Additional information in relation to the processing purposes:

Protection of Rights. Protection of your account from fraud and other illegal activities: This includes the use of your data for the maintenance, update and protection of your account. We monitor the browser session with us in order to detect and resolve potential problems and protect the integrity of our websites. All the above comprise part(s) of our legal interest(s). For instance, we countercheck your password when you connect to your account and we use automated IP surveillance methods to detect possible false log-in from unexpected locations.

CCTV Operating System: To protect the security of our clients, areas, property and co-workers from criminal activities, we operate CCTV systems in our premises, that might record images. We do this based on our legitimate business interests. In case we discover any criminal activity or alleged criminal action via the use of CCTV, or in case of fraud and suspicious transactions, we will process these data for the purposes of prevention and detection of illegal actions. We want to protect our clients, employees and colleagues from criminal activities. 
Payment Process and Fraudulent Transactions: We do this based on our legitimate business interests. This also helps the protection of our clients from fraudulent activity.

Commercial Transactions. We use data for the purpose of executing transactions. For example, we process payment data in order to provide to our clients subscriptions to products and use contact details to deliver products they buy from our e-shop.

Reports and business activities. We use data to analyze our activities. This fact helps us to make well-informed decision-making and create reports for the efficiency of our business activities.

Legal compliance. We use data for the purpose of legal compliance. For example, we use the age of our clients, to ensure that we perform our obligations to protect children’s personal data. We also process contact details and credentials, to help our clients to exercise their data protection rights.

 

Why we share your personal data

We share your personal data upon your consent or as it is required, for the completion of any transaction or for the supply of any product you asked for or authorize us for. When you provide us with payment data for a purchase, we will share your payment data with Bank Institutions or other similar entities that process payment transactions or provide other financial services, and for the prevention of fraud and for credit risk mitigation. 
In addition, we share your personal data with our partners, affiliates and co-operators. We also share our data with our suppliers or colleagues working for us, for the purposes as described in the current statement. In this cases, our colleagues shall comply with our personal data protection policy and safety requirements, and they are not allowed to use the personal data received from us for any other purpose.

Finally, we will reserve, obtain access in, transfer, transmit and retain personal data, including their content, when we have reasons to believe in-good faith, that it is necessary for our compliance to valid legal procedure, which may also originate from national police forces or other state agencies.

Our Company jointly-process your data with: a) Companies of our Group for the purposes and within the context of the terms mentioned hereinto, b) Collaborating third party Shops or/ and commercial businesses of our Company for the sale of products/goods e.g. franchisees, c) third party service providers processing personal data on behalf of the Company, for example (non-exhaustive) for the process of credit cards and payments, transfers and deliveries, hosting, management and maintenance of our database, email distribution, research and analysis, promotion management of the brand and products, Google, Facebook, as well as the management of certain services and data. When we use third party providers we conclude agreements obliging them to apply all the necessary technical and organizational measures for the protection of your personal data, d) other third bodies to the extent needed for the following purposes: (i) compliance with a state request, court decision or applicable law, (ii) prevention of unlawful use of websites and apps or breach of the Terms and Conditions of our website and apps and policies, (iii) our protection from third party claims, (iv) contribution for the prevention or investigation of fraud (e.g. counterfeiting), (d) to other third parties when you have provided your consent.

To provide our Services and Products we use – inter allia – the following companies which will process your Personal Data as part of their agreements with us: 
• My Office • Asos • Geniki Taxidromiki (courier)
• Yuboto • Public • DHL
• Google • Moosend • Ergologic
• Facebook • BestPrice • My Company Projects
• Link-wise • Skroutz • Epsilon
• Amazon • Kronos • IqSolutions

To the companies above, as well as to any other third party with whom we share your data:

  • We provide only the necessary information for the performance of their specific services.
  • They may use your data only for the designated exact purposes laid down in our agreement with them.
  • We closely work with them in order to ensure that your confidentiality is respected at any time.
  • If we do not use their services any longer, all of your retaining data shall be deleted or anonymized.

Data controllers on our behalf have been contractually agreed and bind with the Company:

  • Treat your personal Data as strictly confidential;
  • Not to transfer personal data to third parties without the permission of our Company;
  • To impose and maintain appropriate safety measures;
  • To comply with the legal framework concerning the protection of personal data, and especially with the Regulation 979/2016/EU (GDPR)

 

Moreover, when using certain Social Media components on our website, you may create a public profile, which will include information such as, username, profile photo and city. You may also make join use of your content with your friends or the general public, including information for your interaction with the company.

 

Your Rights, Access and Control of your Personal Data

The General Data Protection Regulation provides a series of rights and choices, which we are bind to fulfill. Based on this, you may ask us:

  • To inform you regarding the data we keep in relation to you and how we process them. If you wish, we may provide you with a copy of your Data without any additional charge (Right to Access)
  • To rectify inaccuracies and/or mistakes, to complete incomplete data or to update your data (Right to Rectification)
  • To erase your data, as long as there are no legitimate grounds for the processing (Right to erasure or ‘right to be forgotten’)
  • To restrict the processing when a) the accuracy of the personal data is contested, b) you consider the processing as unlawful (but you do not wish the erasure of your data), c) when your data are no longer necessary for the purposes of the processing, d) for the time period pending the verification whether the legitimate grounds of the controller override those of the data subject.
  • To object at any time for your own personal reasons, to the processing of data, especially for direct marketing and profiling reasons. Your objection may relate to your compliance with a decision we made by automated means. In the latter case, you may ask us to allow you to intervene (Right to objection - Automated individual decision-making)
  • To provide your personal data in a structured, commonly used (usually machine-readable) format and have the right to transmit those data to another controller, if this is technically possible (Right to Data Portability)
  • To do not process any longer your personal data, providing you the possibility to freely revoke your consent, which has been given to us.

You may address your requests to our email address dpo@migato.com.
Our company will satisfy all of your requests within one (1) month. Only under extreme and rare circumstances, when the satisfaction of your rights is almost impossible for us, we will directly inform you, explaining to you the reasons of our relative inability.

 

 

Cookies and Similar Technologies

A cookie is a small piece of text stored on your device for data retention and they may be recalled from a web server from where it has been installed. We use cookies and similar technologies to save and fullfil your preferences and settings to help you sing up for our services, to prevent fraud, to analyze the competency of our products and other legitimate purposes, as it is described below. www.migato.com uses cookies as part of facilitation and function of our online services, making your next visit and browsing experience easier and more useful to you. Cookies are small pieces of text (text files) send and stored on the user’s computer allowing websites such as www.migato.com to function without any obstructs and technical failures, to collect multiple user’s preferences, to recognize regular users, to facilitate user’s log in and of course for statistical purposes, in order to determine the locations where our online shop services are useful, more popular for marketing reasons. We use cookies to provide you information and complete your orders. You shall keep in mind that cookies are absolutely necessary for the effective and unobstructed function of the website www.migato.com. Information stored in our website’s cookies are used exclusively from www.migato.com and partner businesses e.g. Google for statistical purposes. The user may further set up rules on its browser to do not store cookies, either generally or on a case by case basis, or to select automatic deletion of cookies after exiting the website.


Our Company uses cookies and similar technologies for different proposes depending the environment or product, such as:
Preferences and Settings. We use cookies to store your preferences and setting on your device and to improve your browsing experience. By storing your preferences in cookies, for example your preferred language, it is no longer necessary to set your settings regularly. If you select to be exempted from advertisements based on your interest, we will save your selection to be exempted from a cookie on your device.

Sign in and identification. We use cookies to check your identity. When you sign in from a browser using your personal MIGATO account, we store a unique identification number and the time of login in an encrypted cookie on your device. This cookie allows you to move from one web page to another, without requiring to login again in every web page.

Storage of provided information on a website. We use cookies, to store information you shared. When you provide information to the Company, such as when you add products to your shopping cart, we store that information on a cookie to remember that information.

Comments. The Company may use cookies in order to facilitate you to make a comment on a website.

Analysis (Performance Cookies). It is possible to use our own cookies and/or third party cookies, as well as other identifications, to collect and evaluate usage and performance data. For example, we use cookies to count the number of single users on a website or service and to develop further statistics in relation to our products.
In any case you retain the right to deactivate the use of cookies for efficiency purposes by selecting “Manage Cookies” on the pop-up window appeared during your web session on our websites. Under these circumstances it may be possible to experience delays. Furthermore, you may manage your browser settings, either completely or on a case by case basis or to select automatic deletion of cookies after exiting the website.

Advertisement. We may use our own and/or third-party cookies, as well as other identifications, to provide you personalized advertisements related to you, your preferences and interests. In any case you may deactivate the use of cookies for advertising purposes by selecting “Manage Cookies” on the pop-up window appeared on our websites during your web session. In this case, you will no longer receive advertisements related to your preferences.

Most browsers accept cookies automatically, but they provide you monitoring choices allowing you to block or delete them. It is recommended to consult the personal data privacy policy or help documentation of your browser software to find instructions concerning the blockage or deletion of cookies in other browsers.

Certain Company’s services depend on a cookie. If you select to block cookies, you will be unable to use these services.

 

Other important personal data information

Additional information concerning the protection of personal data are described below, for example, how do we ensure your data and the time period of data retention.

 

Personal Data Security

Our Company is obliged to safeguard your data. We use different technologies and security measures for the protection of your personal data from unauthorized access, use or disclosure. For example, we store your personal data you provide us with in computer systems in which the access is limited and there are located in controlled installations. We use various organizational and technical protective measures for your personal data. Our Company complies with the current personal data protection legal framework, including the legislation of data breach notification. The website www.migato.com uses TLS protocol and/or different payment security protocols of financial institutions or/and other similar legal entities (e.g. PayPal) for secure online commercial transactions. For example your credit card data, are encrypted to ensure that they cannot be deciphered or changed during their transfer through the internet. Additionally, for account identification we use two different data: Username and Password. Every time you fill your information, you may access your account. This specific procedure is safely achieved while transmitted to the internet and Company’s servers. To the same standards, you may change your password as frequent as you wish. After submitting the desirable password, the new password is coded and stored in our company’s systems and/or our partners’, such as the companies responsible for systems maintenance, systems. For this reason, you shall be the only one knowing your personal password and exclusively responsible for maintaining its secrecy from third persons. 
The measures mentioned above are examined and amended when it is necessary.

 

Where we store and process personal data

We do not transfer personal data outside of European Union.

 

Retention of your personal data

Our Company retains personal data for or as long as it is necessary for product supply and completion of your requested transactions or for other legitimate purposes, such as the compliance with legal obligations, dispute resolution and enforcement of its decisions. Due to the fact that those needs may vary for different types of data, in the context of interaction with you or the usage of our products from you, the actual retention period may importantly differentiate.

A few examples of clients’ personal data retention:

Orders. When you add an order, we will retain your given personal data for at least five years, in order to comply with our legal and contractual obligations.

Guarantees. If guarantee was included with your order, the relevant personal data will be retained until the end of guarantee period at least.

Newsletters. The statement of consent for sending newsletter is retained for the time is send to you by the Company and no more than six months after you have unsubscribed.

 

Collection of children’s personal data

We comply with the legislation and we do not allow children to registered to our website, when they have not reach the age defined by law. We will request parent’s consent for children participating to our Company’s experience and events. Even if parent’s consent is given, we will not willingly request from children under this age limit to provide more data than necessary for the product supply.

Parents may alternate or revoke previous selections of granted consent, as well as to process or delete children personal data for whom they granted their consent or approval.


Changes in the current personal data privacy statement

We will update this personal data privacy statement when necessary, to ensure transparency and respond to:

  • Clients’ comments, regulatory authorities, sector representatives.
  • Changes on our products.
  • Changes to the operations or personal data processing policies.

 

Contact us

If you have any considerations, complaints or questions concerning your personal data protection that you would like to address to the Data Protection Officer of the Company, please contact us by sending your message to dpo@migato.com. We will reply to your questions and considerations within 30 days. You may also report a consideration or submit a complaint to a data protection authority or other official and competent regulatory authorities.

This cookie policy has been created and updated by Cookie banner tool | CookieFirst.