This is Our Commitment To Your Privacy

Text in english only for legal purposes. Effective from 25 May 2018.

At Donna Flor we are committed to protecting and respecting the privacy of our clients. We take responsibility for complying with the Data Protection Act 1998 (DPA), the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR), and the more recent General Data Protection Regulation (GDPR) which applies from 25 May 2018.

The Privacy Policy details what personal data we collect, how we will use that data and how we will protect it. Please also read our Cookie Policy further down this page, and refer to our Terms & Conditions for additional information regarding our services.

For any questions that may not be answered here, you can contact us at any time by emailing cs.portugal@donnaflor.com or writing to the Legal Team at Alcor Brands (UK) Limited, 60 Windsor Avenue, London, SW19 2RR, United Kingdom.

In this Privacy Policy we will cover:

  1. The data controller
  2. What personal data we collect
  3. How we use your personal data and our legal basis for processing your personal data
  4. Who will process your data
  5. Transferring your personal data outside of the EU
  6. How long do we keep your personal data
  7. Your rights
  8. Security measures
  9. Complaints
  10. Changes to this notice
  11. Legislative reference and useful links

What personal data we collect and why

We collect your personal data when you place an order, return an order, call our Customer Care team, sign up for our marketing communications, sign up to create an account, browse our website or use the other services offered by our website (www.donnaflor.com). The data we collect includes details you provide to us, such as your given name and surname and your shipping and billing addresses. We also collect data regarding your shopping habits and the pages and products you have viewed from your use of the website.

We use this data to:

  • Take your orders, process your payments and deliver the items you have purchased;
  • Process an exchange, return or reclamation of an order;
  • Provide any additional services you have requested, such as our marketing communications;
  • Give you access to services reserved for registered users, such as wish lists;
  • Provide you with help and assistance via our Customer Care team, including contacting you about the delivery/collection of your order/return;
  • Personalise your visit to the website and ensure that content from our site is presented in the most effective manner for you and the device you are viewing from.

Under the law, we must have a valid legal basis to process your data. In most instances, we will process your data because we have a contract with you e.g. to deliver your purchases or to provide you with other services you have requested. We will also use your personal data to send you sales and marketing communications that we believe may be of interest to you if we have your explicit consent for this activity, or if you are an existing customer where we have a legitimate interest in communicating with you. You can opt out of sales and marketing communications from us at any time.

This Privacy Policy applies to all Donna Flor websites:

  • www.donnaflor.com (for residents of countries not mentioned below);
  • www.donnaflor.com.br (for residents in Brazil);
  • www.donnaflor.pt (for residents in Portugal);
  • www.donnaflor.es (for residents in Spain);
  • www.donnaflor.co.uk (for residents in The United Kingdom of Great Britain and Northern Ireland, including the Channel Islands).

Who will process your data

Your personal data will be processed by Alcor Brands. When we mention Alcor Brands (referred to here as "we", "our", "us"), we are mentioning any of the companies below:

(a) Alcor Brands, Inc. a Corporation formed under the laws of the State of Delaware (USA), for people using www.donnaflor.com and residents in the United States of America and in the countries not mentioned below;

(b) Alcor Brands (UK) Limited, a company organised and existing under the laws of United Kingdom, having its registered office at 60 Windsor Avenue, London SW19 2RR, UK, registered in England and Wales, Company Number 09142833, VAT nº GB192841584, for residents in The United Kingdom of Great Britain and Northern Ireland, including the Channel Islands, using www.donnaflor.co.uk;

(c) Alcor Brands (Spain) S.L., a company organised and existing under the laws of the Kingdom of Spain, registered number 121, Registro Mercantil de Málaga, tomo 5484, folio 222, incription 1 and sheet MA-132486, VAT nº ESB93459394, for residents in Portugal, using www.donnaflor.pt

(d) Alcor Brands (Spain) S.L., a company organised and existing under the laws of the Kingdom of Spain, registered number 121, Registro Mercantil de Málaga, tomo 5484, folio 222, incription 1 and sheet MA-132486, VAT nº ESB93459394, for residents in the Kingdom of Spain, including the Baleares Islands and all territories, using www.donnaflor.es.

(e) Alcor Brands, Inc. a Corporation formed under the laws of the State of Delaware (USA), registered in Brazil CNPJ nº 14.445.471/0001-18, for people using www.donnaflor.com.br and residents of the Federative Republic of Brazil, using www.donnaflor.com.br

We may also retain the services of external suppliers to help meet our business needs and may share your data with these suppliers. These suppliers have been selected after a rigorous evaluation process and chosen for their security, reliability and competence. They will process your data only under our instructions. Some of these suppliers may be based in non-EU countries. Where this is the case, the transfer of your personal data to these countries is carried out in compliance with the guarantees provided by law.

How long we keep your data

We will not retain your personal data for longer than is necessary to fulfil the purposes for which you provided that personal data, unless the law permits or requires that we retain it for longer. The retention period varies depending on the purpose of the processing.

Your rights regarding your personal data

Under the Law, you have the right to:

  • Know what personal data of yours we are processing, where that data came from and how we are using that data;
  • Ask us to update, correct or supplement the data we hold about you;
  • Withdraw consent for processing for a specified purpose;
  • Ask us to delete or erase your data from our systems;
  • Limit or oppose our processing of your data;
  • Ask us to supply the personal data we hold about you in an easy readable electronic format, or transfer that data direct to a third party nominated by you.


You can exercise these rights at any time by emailing by emailing cs.portugal@donnaflor.com or writing to the Legal Team at Alcor Brands (UK) Limited, 60 Windsor Avenue, London, SW19 2RR, United Kingdom.

This Privacy Policy may undergo changes and additions from time to time. Where possible we will inform you of any changes, but please check the contents periodically. The date of issue and version number are shown at the beginning of the notice.

1. THE DATA CONTROLLER

Under the data protection law, the data controller is responsible for ensuring that your data is held securely, that you are given accurate information about how your data is used, and that your rights regarding your data are respected. For the purpose of the UK Data Protection Act 2018 and the General Data Protection Regulation 2016 (the Law), the data controllers for any personal information we hold about you are Alcor Brands.

Your personal information will be held and managed by Alcor Brands. By visiting and using Donna Flor website or mobile site (www.donnaflor.com) or any Alcor Brands application that we make available for interacting with our content and/or services or by contacting our Customer Services Team, you acknowledge that you have read this Privacy Policy.

The Donna Flor website is owned and run by Alcor Brands (referred to here as "we", "our", "us"). The term "our online services" refers to donnaflor.com, donnaflor.co.uk, donnaflor.es, donnaflor.pt, donnaflor.com.br our pages on third party social media platforms such as Instagram, Facebook, Twitter, Pinterest and Google+ and any other websites we may run from time to time. The term "our services" refers to our online services and any of our other products and services offered from time to time. If you use any of our services, we will refer to you using the terms "user", "visitor", "you", "your", "yours" in this policy.

2. WHAT PERSONAL DATA WE COLLECT

We collect and process only the data that is required to allow us to provide our services to you. We collect the following data when you browse or shop at www.donnaflor.com:

a) We process the personal data required to complete and ship your purchase, including your name, billing address, delivery address, payment details, mobile number, telephone number and email address. We collect your email address in order to send you confirmation of your order; we collect your telephone number so that we can contact you if there are any issues with the order.

b) We collect your email address when you sign up to receive our newsletter/marketing communications.

c) If you register for a Donna Flor account, we collect your name, email address, password, country and additional data regarding your marketing preferences.

d) When you contact our Customer Care team, we may collect additional data to help us resolve any queries relating to your order, delivery, payments, marketing, the website or any other queries.

e) We collect and process data about your browsing on www.donnaflor.com, including the pages you visit and how you interact with these pages.

f) If you are a customer of www.donnaflor.com, or if you have given us your consent, we collect and process your personal data for direct marketing activities.

g) If you provide us with someone else's data - for example, if you purchase a product to be delivered to a friend or as a gift, we will collect and process the personal data required to complete the transaction such as the name, delivery address and other contact details for your friend.

If you are receiving an item as a gift, we will process your data only to fulfil the gift request and our contractual obligations.

3. HOW WE USE PERSONAL DATA WE COLLECT AND THE LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA

Under the law we must have a valid reason for using your personal data and we may not collect, store or use data about you that is not compatible with that reason. The legal basis for each of the ways in which we use your personal data is as follows:

a) When you purchase a product from www.donnaflor.com we ask you for the personal data necessary to allow us to fulfil our contract with you including taking payment, any related anti-fraud checks if you choose to pay by credit/debit card, billing, shipping and delivery of the product and possible handling of the return.

Legal Basis: The provision of your personal data for these activities is a contractual obligation. You are free to communicate your data or not, but in the absence of the requested data it will not be possible to finalise or execute the contract and your requests. This means that while you will continue to be able to browse www.donnaflor.com, you will not be able to purchase products and you will not be able to use the services of our website such as the Wish List.

When you make a purchase at www.donnaflor.com, we are required to process your personal data to meet our legal obligations in accordance with the tax provisions and other statutory rules which apply.

You are free to decide whether or not to purchase from us, but if you do make a purchase this use of your data will be necessary to meet our legal obligations.

When you make a purchase at www.donnaflor.com, we will use some of your personal data to carry out anti-fraud activities: we have a legitimate interest in carrying out this activity to prevent and prosecute any fraudulent activity.

b) When you visit www.donnaflor.com, we will collect the minimum personal data necessary to allow us to provide you with the services of the website, such as placing and holding items in your shopping bag.

Legal Basis: Our use of your data is necessary for our legitimate interest in ensuring that the service we provide to you is managed correctly.

c) When you visit www.donnaflor.com, we may use data about your use of the website to help us improve the website and our promotion of the website. This will include data about how you came to the website; the date and time of your visit; products you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction data (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page. Most of this data will not be connected to you as an individual.

Legal Basis: Our use of your data is necessary for our legitimate interest in ensuring that the service we provide to you is managed correctly.

d) We also collect data about your use of www.donnaflor.com by using cookies. More information about how we use cookies and how you can, if you wish, turn off cookies is included in our Cookie Policy further down the page.

Legal Basis: You have given your consent to our use of cookies via the cookie banner that appears on the website when you enter. You can choose which cookies to accept via our Cookie Policy. Some cookies are necessary for our legitimate interest in ensuring that the service we provide to you is administered correctly e.g. retaining items in your shopping basket.

e) When you register an account on www.donnaflor.com, we will collect the data necessary to ensure that we can recognise you on return visits and provide you with the services registration offers, such as creating a wish list or subscribing to our newsletter. If you would prefer not to continue receiving these emails, you can unsubscribe at any time using the link on the bottom of the email or update your contact preferences in the account section on www.donnaflor.com.

Legal Basis: The provision of your personal data for these activities is a contractual obligation. You are free to communicate your data or not, but in the absence of the requested data it will not be possible to finalise or execute the contract and your requests. This means that while you will continue to be able to browse www.donnaflor.com, you will not be able to use the services of our website such as the wish list or alerts about deliveries from your favourite designers.

f) When you sign up for our marketing communications, we will ask you for your email address. If you would prefer not to receive these emails, you can unsubscribe at any time using the link on the bottom of the email.

Legal Basis: You have given your consent and asked us to send you our marketing communications.

g) If you have purchased from www.donnaflor.com, we will use the personal data we hold about you, including your purchase history, to contact you regarding products and services that may be of interest to you. This contact will normally be via email, but in certain circumstances we may contact you via other methods e.g. we may call you if an item we know you have been eager to purchase comes back into stock. If you would prefer not to be contacted in this way, you can unsubscribe from emails at any time using the link on the bottom of the email, or update your contact preferences in the account section on donnaflor.com if you are a registered user.

Legal Basis: Our use of your data is necessary for our legitimate interest in ensuring that you receive information about goods and services that may be of interest to you.

h) We analyse contact data, purchase history, web browsing data and lifestyle data to tailor our marketing communications, web site presentation and internet advertising to meet your preferences. For example, if you have been browsing or have previously purchased a particular bra style, we may send you an email to tell you that these are now on sale or display similar products to you as part of our internet advertising.

Legal Basis: Our use of your data is necessary for our legitimate interest in ensuring that you receive information about goods and services that may be of interest to you.

i) When you contact our Customer Care team, we will use the personal data you provide and that we have collected to respond to your requests for help or information.

Legal Basis: The provision of your personal data for these activities is a contractual obligation. You are free to communicate your data or not, but in the absence of the requested data it will not be possible to finalise or execute the contract and your requests.

4. WHO WILL PROCESS YOUR DATA

Your personal data will be processed by the internal staff of Alcor Brands who are authorised for this processing. In carrying out the processing, the data may also be transmitted to companies belonging to Alcor Brands. Your personal data will also be transmitted to third parties that we use to provide our services; these parties have been rigorously assessed and offer a guarantee of compliance with the legislation on the processing of personal data. These parties have been designated as data processors and carry out their activities according to the instructions given by Alcor Brands under our control.

The third parties in question belong to the following categories: payment processors, banking operators, internet providers, ecommerce hosting maintainers, companies specialising in IT and telematics services; logistic partners; companies that execute marketing activities such as email marketing services; companies specialising in market research and data processing; companies providing publishing and distribution services.

Under some circumstances we may be required to disclose or share your data without your consent, for example if we are required by the police, the courts or for other legal reasons. Your data may be transmitted to the police, judicial and administrative authorities, in accordance with the law, for the investigation and prosecution of crimes, the prevention of and protection from threats to public security, to allow Alcor Brands to ascertain, exercise or defend a right in court, as well as for other reasons related to the protection of the rights and freedoms of others.

We may also transfer your personal data to a buyer or potential buyer in the event that our assets are acquired by another organisation. The purchaser will be required by law to use your personal data only as described in this Privacy Policy.

5. WHO WILL PROCESS YOUR DATA

Some of the third parties listed in the previous paragraph 'Who will process your data' may be located in countries outside the European Union that nevertheless offer an adequate level of data protection, as established by specific decisions of the European Commission. (https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/adequacy-protection-personal-data-non-eu-countries_en)

6. HOW LONG WE KEEP YOUR DATA

We keep your personal data for a limited period of time. The specific retention period will vary according to the reason for processing your personal data. After this period, your data will be permanently erased or otherwise irreversibly rendered anonymous.

Your personal data are retained in accordance with the following criteria: When you have purchased goods from www.donnaflor.com, we will retain the billing data until the end of the relevant accounting period. When you make a payment, we will retain your payment details up to the certification of the payment and the completion of the relevant administrative-accounting formalities regarding your right of withdrawal and the terms applied for the disputing of the payment;

When you provide us with personal data in order to use the services of www.donnaflor.com, such as marketing communications, we will keep your data for this purpose until the termination of the service or until you cancel your subscription to the service;

When you give us your consent to send you marketing communications, you can withdraw your consent at any time. We will consider your consent to be current for five years from your last interaction with any email that we send you, with www.donnaflor.com. In any case, we will reduce the number of marketing contacts after six months if you don't interact with us;

When we use your personal data and browsing history to analyse your behaviour in order to customise the website and to show you personalised sales offers, we will keep the data for analytical purposes until you ask us to delete it;

When we use personal data for market research and satisfaction surveys, we will keep the data until you ask us to stop.

7. YOUR RIGHTS

You have the right to request a copy of the data that we hold about you (and we will provide this to you free of charge once we have confirmed your identity).

If you would like a copy of some or all of your personal data, please email or write to us using the contact details in this policy.

If we do hold data about you we will:

  • give you a description of it
  • tell you why we are holding it
  • tell you who it could be shared with
  • tell you how long we will keep the data
  • if the data was not provided by you, we will give you any available information such as the source of the data
  • tell you if the data has been used for automated decision making
  • tell you if the data is stored outside of the European Economic Area, and if so what safeguards are in place to protect your personal data
  • let you have a concise and clear copy of the data

You have the right to ask us to correct any inaccuracies in the personal data we hold about you and to stop us using your data until it has been corrected. We want to make sure that your personal data is accurate and up to date and we will be happy to correct or remove data you think is inaccurate.

If you have given us your consent to use your personal data for marketing, you have the right to withdraw your consent at any time by calling our Customer Care team, clicking "unsubscribe" on a marketing email. Alternatively, you can sign into your account on www.donnaflor.com and update your email preferences You may receive a small number of further communications immediately after unsubscribing but we will implement your request as quickly as possible.

You have the right at any time to oppose our processing of your personal data on the basis of our legitimate interest. You will need to explain the reasons behind your request and allow us to consider your request and respond.

You have the right to request the deletion of your personal data. After receiving and reviewing your request, if legitimate it will be our responsibility to promptly cease processing and to delete your personal data, to request deletion please contact cs@donnaflor.com.

You have the right to receive a copy of your data that we process based on your consent or on the basis of a contract with you in a standard format. If you wish, where technically possible, we can transfer your data directly to a third party indicated by you.

To ensure that the data of our users are not subject to breaches or illegitimate use by third parties, we will ask you to confirm your identity before carrying out your request.

8. SECURITY

We protect your personal data with specific technical and organisational security measures aimed at preventing your personal data from being used illegitimately or fraudulently.

In particular, our infrastructure has been designed with high security and privacy standards including disk encryption, identity provider, personal credentials, etc. We additionally use security measures that guarantee: pseudonymisation or encryption of your data; the confidentiality, integrity, and availability of your data as well as the resilience of the systems and services that process them; the ability to restore data in the event of a data breach. Furthermore, Alcor Brands undertakes to test, verify and regularly evaluate the effectiveness of technical and organizational measures in order to guarantee continuous improvement in the safety of processing.

9. COMPLAINTS

If you believe that Alcor Brands is processing your personal data in contravention of the law, you can file a complaint with the supervisory authority responsible for compliance with the rules on personal data protection.

In the UK, the complaint can be presented to the ICO. More information on how to complain is available on the ICO's website at https://ico.org.uk/ According to the Law to which the Alcor Brands is subject.

10. CHANGES TO THIS NOTICE

We keep our Privacy Policy under regular review in order to reflect changes in our services and in privacy regulation. This Privacy Policy was last updated 24 May 2018.

11. LEGISLATIVE REFERENCES AND USEFUL LINKS.

The processing of your personal data is carried out by Alcor Brands in compliance with the Regulation (EU) 2016/679 general regulation on data protection, UK Data Protection Act 2018 and rules on the processing of personal data. (https://ico.org.uk/)

COOKIE POLICY

This website is owned and run by Alcor Brands ("we", "our", "us"). If we use the term "our Group", this means us and our subsidiaries, our ultimate holding company and its subsidiaries (or any of them). The term "our online services" refers to www.donnaflor.com. If you use any of our online services, we will refer to you using the terms "user", "visitor", "you", "your", "yours" in this policy.

This cookie policy explains:

  • The cookies used on our online services
  • Advertising cookies used on our business partners' websites
  • How to reject or opt out of receiving cookies
  • Third-party cookies

THE COOKIES USED ON OUR ONLINE SERVICES

The cookies we and our business partners use on our online services can be grouped into the following categories:

Essential cookies: Some of the cookies on our online services are essential for us to be able to provide you with a service you have requested. An example of this would be a cookie that enables you to log into your account on the website, or one which allows communication between your browser and the website. Our cookie-preference cookie, described in the section 'How to reject or opt out of receiving cookies', is also an essential cookie. Your experience will be affected and some features unavailable when cookies are disabled.

Website functionality cookies: Strictly necessary cookies are cookies are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website, use a shopping cart or make use of e-billing services.

Website analytics cookies: We use these cookies to measure and analyse how our customers use our online services. An example is counting the number of different people visiting our website or using a particular feature, rather than the total number of times the site or feature is used. This allows us to continuously improve our online services and your shopping experience.

Customer preference cookies: When browsing or shopping online, our online services will remember preferences you make (for example your user name, language or location). This improves your experience and makes your browsing simpler, easier and more personal to you.

Social sharing cookies: We use cookies to allow you to share content directly on social networking/sharing sites like Instagram, Facebook and Twitter. Examples would be if you wanted to 'like' or 'tweet' about a product advertised on our online services.

Interest-based advertising cookies: You will have noticed, when visiting other websites, that you are shown adverts for products and services you may wish to buy. The money made by website owners for showing third-party adverts on their websites often pays for the cost of running the website, and therefore often allows you to use the website without having to pay a registration or usage fee. Like many businesses, we place adverts for our services on a range of our partners' websites. However, to try and ensure that the adverts you see are relevant to you, we use cookies to collect information about the types of things that interest you, for example websites you visit and your geographic location. Having these cookies does not increase the number of adverts you will be shown, but simply makes the adverts you see more relevant. In addition, they limit the number of times you see an advertisement, as well as helping us measure the effectiveness of our advertising campaigns.

ADVERTISING COOKIES USED ON OTHER WEBSITES

We place adverts on a number of third-party websites. We use cookies to control how often you are shown a particular advert on those websites, so you do not see the same advert too frequently. We do not collect any personal data within these cookies.

Information on deleting or controlling cookies is also available at www.AboutCookies.org. Please note that by deleting our cookies or disabling future cookies you may not be able to access certain areas or features of our site.

If you want to delete any cookies that are already on your computer, please refer to the help and support section on your internet browser for instructions on how to locate the file or directory that stores cookies.

Please note that our online services cannot always control third-party cookies stored on your machine from our online services and that setting your cookie preferences with us will not stop those third-party cookies from being stored on your machine. Therefore you must manage these cookies directly with the relevant third party. Please see our 'Third party cookies' section below for more information.

Information on deleting or controlling cookies is available at www.AboutCookies.org. Please note that by deleting our cookies or disabling future cookies you may not be able to access certain areas or features of our site.

THIRD-PARTY COOKIES

Some of the cookies described above are stored on your machine by third parties when you use our online services. We have no control over these cookies or how the third parties use them. They are used to allow third parties to provide a service to us, for example analytics. For more information on these cookies and how to disable them, please see the individual third party's privacy policy listed below.

If you want to know more about how cookies work and how to manage or delete them, visit the World Wide Web Consortium's website. (or, for third party cookies, visit http://www.youronlinechoices.com/)

Attraqt

This cookie provides anonymized data to allow us to understand user behaviour to better merchandise products.

https://www.attraqt.com/gdpr/

AWS

AWS Elastic load balancer

Cookie ensures that all requests from the user during the session are sent to the same instance.

https://docs.aws.amazon.com/elasticloadbalancing/latest/classic/elb-sticky-sessions.html

PayPal

Cookie for ab testing user journeys with payment processor .

https://www.paypal.com/es/webapps/mpp/ua/privacy-full?locale.x=en_US

e-Target

This cookie provides details on user interaction from email service provider.

Facebook

Facebook Atlas

This cookie executes, delivers and tracks the performance of brand media (display and video) campaigns for internet-based advertising.

Facebook Custom Audience

This cookie executes, delivers and tracks the performance of brand media (display and video) campaigns for internet-based advertising.

http://www.aboutads.info/choices/#completed

http://www.facebook.com/about/privacy/

Flashtalking

This cookie tracks the performance of product feed channels (for example, Google Shopping) and marketing activities for internet-based advertising.

Google

Adwords Remarketing

This cookie facilitates post-visit messaging to drive return visits.

Google Analytics

This cookie provides anonymized data to allow us to understand user behaviour and marketing performance across our Group.

Double-Click DPA

This is a management solution used to track the effectiveness of different advertising campaigns which are delivered to different audiences for internet-based advertising.

Double-Click Floodlight

This cookie allows us to target the advertising we do on third party websites more effectively for internet-based advertising.

https://www.google.com/settings/u/0/ads/authenticated?hl=en

https://tools.google.com/dlpage/gaoptout

https://www.google.com/settings/u/0/ads/authenticated?hl=en

https://www.google.com/settings/u/0/ads/authenticated?hl=en