FREE SHIPPING ON ORDERS OVER 70€

Privacy Policy

Privacy policy from 1 March 2022

The processor of personal data is MA FASHION HOLDING OÜ (address Türi tn 10c Tallinn Harjumaa 11313, e-mail: eshopeu@marcandandre.com).

1. We follow Estonian and European Union legislation when processing personal data.

2. MA Fashion Holding collects personal data from those who wish to register as loyal customers (hereinafter the Client) when they submit their application with which they agree to the conditions of the registration in the MARC&ANDRÉ shops and online shop www.marcandandre.eu (hereinafter Online Shop).

3. Data will be collected and processed by the data processor. The data processor shall not disclose any data that has become known to them to third parties.

3. The data processor collects the following personal data: name, gender, birthdate, identification code, phone number, e-mail, delivery address and purchase history. All the personal data that has become known to the data processor shall be treated as confidential information.

4. The data processor also collects personal data from customers who have not registered as loyal customers to the extent that is needed for fulfilling the contract. The data processor forwards the personal data to the transport service companies to deliver products.

5. Personal data is collected and processed for the following purposes: to fulfil the contract, to deliver products to the Client, to conduct purchase analyses, to serve the loyal customers programme, including giving discounts and marketing messages. 

6. The controller of personal data shall not disclose any data that has become known to them to third parties, except to employees who are authorised on the condition that they have signed an agreement that states that the employee must keep the processed personal data confidential and ensure the protection of personal data in accordance with the requirements set in the law. These authorised employees include contractual partners, such as providers of cash register software, payment solutions, transport services, text messaging services, e-mail services and server hosting services, including but not limited to: Erply- Majandustarkvara OÜ, Maksekeskus AS, Eesti Post AS, Itella Estonia OÜ, DPD Eesti AS, SendSmaily OÜ.

7. The data processor shall apply appropriate physical, organisational and information technological security measures to avoid the accidental or illegal destruction, loss, amendments, unauthorised access or disclosure of personal data. Only authorised persons can access and process the data.

8. The data processor can send newsletters or offers via e-mail or text message to the Client only if the Client has previously agreed to it. The Client has the right to withdraw their consent at any time by unsubscribing from newsletter offers via a corresponding link that is displayed in every newsletter and text message.

9. Personal data shall be retained for five years from the last transaction. Purchase history shall be anonymised with the deletion of the personal data. Personal data that is required for accounting shall be retained for seven years.

10. The Client has the right to withdraw their consent to processing their personal data in the loyal customer programme and ask for the deletion of their data. The data processor cannot offer the Client discounts attached to the membership in the sales points and online shop managed by the processor from the moment of data deletion. In case of disputes concerning the payments or clients, the data processor has the right to retain the personal data until the compliance of requirements or the end of the limitation period.

11. The Client can submit requests for the disclosure, amendments, transfer or deletion of data in written form and digitally signed to the e-mail address  eshopeu@marcandandre.com or on paper and signed to MA FASHION HOLDING OÜ (address Türi tn 10c Tallinn Harjumaa 11313).

12. If the Client finds that their rights have been violated during the processing of their personal data, the Client has the right to turn to the Data Protection Inspectorate or the court.