Privacy Policy
Privacy Policy & Security
Mallouppas & Papacostas Group (The Group) operates in the field of high street fashion representing international fashion franchises such as MANGO, STRADIVARIUS, CALZEDONIA, INTIMISSIMI, TEZENIS, BAGATT, KIPLING and PRIMADONNA. The Group also operates the FOUR DAY CLEARANCE, a retail activity run up to seven (7) times every year, offering a wide variety of household goods, indoor and outdoor furniture, electrical appliances, sports equipment, gifts, toys and many more products. The Group also operates MPSAT, a company wholesaling Satellite and Electronics equipment through a network of resellers throughout Cyprus.
As a Group, we have a commitment to safeguard your privacy and to handle your data in an open and transparent manner. We respect your right to privacy and are committed to maintaining it. We only collect, store and process your personal information in accordance with the relevant laws and regulations.
This Privacy Policy explains how we use any personal information you provide to the Group when you use our services in our Stores, our Website and any contact you have with our Customer Contact Centre.
Group Privacy Policy. What this covers
The Group Privacy Policy, (“Policy”) explains what personal information is collected and for what purpose as well as when and why personal data may be shared within the Group and with 3rd parties. Finally the Policy outlines your rights and choices you have when it comes to your personal data.
This Policy applies to you if you are in contact with our Group or we contact you about our products and services.
What types of personal data do we collect and for what purpose?
Customer Personal Data is collected solely for marketing purposes and may be used (in accordance with any preferences you have expressed) to send you marketing messages by email, post, phone and social media to keep you updated in relation to the brands you have signed up for.
Anytime you contact us about our services either by phone, email or post or when you speak with us through social media, we may also collect personal data you provide about yourself.
We may also contact you in order to manage promotions and competitions you participate in.
The Group collects the minimum required personal data that would allow the Group to perform the service for which the customer has signed up.
Data is collected primarily when customers visit the stores of the Group brands and complete a customer registration from.
Personal data may include:
- First & Last Name
- Company Name (optional) (aplies to MPSAT)
- City of Residence
- Full postal address is only required in the case of catalogue mailing (applies to the brands Bagatt, Calzedonia and Intimissimi)
- Email address
- Mobile phone data
- Birthday (optional)
We may process your personal data, provided that you have given us your specific consent for processing (other than for the reasons set out hereinabove) then the lawfulness of such processing is based on that consent. You have the right to revoke consent at any time. However, any processing of personal data prior to the receipt of your revocation will not be affected.
As part of running our business, we have a legitimate interest to promote our brands using marketing messages to existing customers of the Group unless you have asked us not to.
This includes the management and dispatch of information on exclusive promotions, latest news and events in store via email, SMS or ordinary mail.
When we collect your personal data, we give you the opportunity to opt-out of receiving those marketing messages so you may stop receiving messages from us at any time.
- For email marketing, the best way to do this is to click on the 'unsubscribe' link in any email you receive.
- For SMS marketing, you may call the toll-free number provided on the SMS and your number will automatically be added to an opt-out list.
- For direct mail, you may send an email or call as follows :
- Bagatt : This email address is being protected from spambots. You need JavaScript enabled to view it. 22550400
- Calzedonia & Intimissimi : This email address is being protected from spambots. You need JavaScript enabled to view it. 22550500
- MPSAT : This email address is being protected from spambots. You need JavaScript enabled to view it. 22446744
We do what is possible to process customer requests within 48 hours of receiving them. We continuously work on improving our customer experience to allow you to opt-out easily of our communications.
When and why our Group may share personal data within the Mallouppas & Papacostas Group and with other organizations
The personal data collected may be transferred/ communicated to data processing companies that carry out certain functions on our behalf. Our Group works with carefully selected Service Providers that help us with technology services. We assure you that we only share personal data that enable our Service Providers to provide their services.
Some of the Service Providers we work with operate online media channels, and they place relevant online advertising for our products and services on those online media channels on our behalf. For example, you may see an advert for our products and services as you use particular social media sites.
The personal data may be transferred / communicated to our franchise partners or may be processed by 3rd parties who work for our franchise partners. We would like to reassure you that we have in place appropriate protection measures to make sure that your personal data remains adequately protected and is treated in line with this Policy.
We may share personal data with other organizations if the law or a public authority says we must share personal data, if we need to share personal data in order to establish exercise or defend our legal rights.
Other than the disclosures referred to in this policy, we will not disclose any personal information without your consent unless we are legally entitled or obliged to do so (for example, if required to do so by Court Order or for the purposes of prevention of fraud or other crime).
Our Group does not, under any circumstance, sell customer data to third parties.
How we protect your personal data
The Management of Mallouppas & Papacostas Group, we are committed to respect, protect and maintain your privacy. We have put in place a number of measures to ensure this is implemented.
For example we use computer safeguards such as firewalls and data encryption. We only authorize access to employees who need it to carry out their job responsibilities.
As part of our policies, we enforce physical, electronic and procedural safeguards in connection with the collection, storage and disclosure of personal data. We may occasionally ask for proof of identity before we share your personal data with you.
The personal data that we collect from you may be transferred to our franchise partners or may be processed by 3rd parties who work for us or for one of our franchise partners. We would like to reassure you that we have in place appropriate protection measures to make sure that your personal data remains adequately protected and is treated in line with this Policy.
You should be aware that the internet is an insecure environment. Whilst we take appropriate technical and organizational measures to safeguard your personal data, please note that we cannot guarantee the security of any personal data that you transfer over the internet to us. However, we will continue to update these measures, as appropriate, when new technology becomes available.
How long we keep your personal information for
We will keep your personal data for as long as you would like us to and you are a customer to our shops.
Our Group general retention policy is to retain information for 6 years.
In some circumstances, such as to meet our legal or regulatory obligations, resolve disputes, prevent fraud and abuse, or enforce our terms and conditions, we may hold on to your personal information after we’ve finished providing services to you, or for longer than our general retention policy.
Your rights over your information
Under the General Data Protection Regulation (EU) 2018/679 which is applicable from 25 May 2018 you have various rights with regards to the personal data we hold about you and how it is used.
These are:
- Right to be informed about what we do with your information
This Privacy Policy and any details you provide when we capture your personal data will keep you informed about how we will use your information. - Right to receive access to your personal data.
This enables you to e.g. receive a copy of the personal data we hold about you and to check that we are lawfully processing it. - Right to request correction (rectification) of the personal data we hold about you.
This enables you to have any incomplete or inaccurate data we hold about you corrected. - Right to request erasure of your personal information.
This enables you to ask us to erase your personal data (this is known as the ‘right to be forgotten’) where there is no good reason for us continuing to process it. If we need to hold on to your information, we will tell you why we need to do this when we respond.
- Right to withdraw consent
This enables you to withdraw your consent regarding the processing of your personal data for marketing purposes at any time. You may withdraw your consent given to us either by opting out of SMS messages, unsubscribing to email newsletters or change preferences via a link in the footer of all non-transactional email messages. These options are made available when you sign-up for our email lists and in email messages delivered from us. Note that any withdrawal of consent shall not affect the lawfulness of processing based on consent before it was withdrawn or revoked by you.
- Right to object to or restrict the processing of your personal data
This enables you to ask us to stop processing your information or to ask us to limit the ways in which we process the information. If you lodge an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms. - Right to portability of your information
Request to receive a copy of the personal data concerning you in a format that is structured and commonly used and transmit such data to other organizations. You also have the right to have your personal data transmitted directly by ourselves to other organizations you will name.
- Right to lodge a complaint
If you have exercised any or all of your data protection rights and still feel that your concerns about how we use your personal data have not been adequately addressed by us, you have the right to file a complaint with the Cyprus Commissioner for the Protection of Personal Data.
Changes to our privacy policy
We are committed to offer you with the best possible shopping experience; consequently, additional functions and features may in the future be incorporated into our website.
This may result in periodic changes to this Privacy Policy to reflect how we are processing your personal information. We do encourage you to review our Privacy Policy periodically so as to be always informed about how we are processing and protecting your personal information.
This Privacy Policy was last updated on 22nd May 2018.
Contacting us
Your concerns are very important to us and we endeavour to address all of your requests promptly.
If, at any time, you believe that you have received an unsolicited commercial email from Mallouppas & Papacostas Group, on behalf of somebody else, you may report it to us.
To exercise any of your rights, or if you have any other questions about our use of your personal data, please contact us by sending an email to
- This email address is being protected from spambots. You need JavaScript enabled to view it. / 22550 488 with regards to
- FASHION : Mango, Stradivarius, Tezenis, Bagatt, Kipling, Primadonna
- LIFESTYLE & TECHNOLOGY : FOUR DAY CLEARANCE, MP SAT,
- This email address is being protected from spambots. You need JavaScript enabled to view it. / 22550534 with regards to
- Calzedonia, Intimissimi
Note:
The General Data Protection Regulation (EU) 2016/679 shall apply from 25 May 2018. Until then, the Processing of Personal Data (Protection of Individuals) Laws 2001 till 2012 remain in force.