PRIVACY & COOKIE POLICY
CHRISTOPHER DiCAS HAUTE PARFUMERIE
Effective Date: 16 July 2026
At Christopher DiCas Haute Parfumerie, discretion is not a policy. It is a principle.
We safeguard your personal data with the same exactitude as we compose our creations. This Policy explains, in full transparency, how ChristopherDiCas.com processes personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), Greek Law 4624/2019, Directive 2002/58/EC (ePrivacy), as amended, Regulation (EU) 2023/988 on General Product Safety, and the EU Digital Services Act.
1. DATA CONTROLLER
Christopher DiCas Haute Parfumerie
Jurisdiction: European Union – Greece
Privacy Contact: info@christopherdicas.com
Website: www.christopherdicas.com
We are not legally required to appoint a Data Protection Officer under Article 37 GDPR. All privacy enquiries are handled directly by the Founder and Client Services under strict confidentiality.
2. OUR PRINCIPLES
We process only what is necessary, for as long as necessary, and never more.
We do not sell your personal data.
We do not trade in your identity.
We do not engage in intrusive profiling or automated decision-making within the meaning of Article 22 GDPR or Regulation (EU) 2024/1689 (AI Act).
3. PERSONAL DATA ENTRUSTED TO US
a. Information you entrust to us
-
Full name
-
Email address
-
Billing and shipping address
-
Telephone number
-
Order information
-
Correspondence with our Maison
b. Information collected automatically (with your consent)
-
Truncated IP address
-
Device and browser information
-
Approximate country-level location
-
Website usage statistics
-
Time spent on pages
Where possible, this information is pseudonymised.
c. Bespoke Clienteling (only with explicit consent)
-
Olfactory preferences
-
Communication preferences
These details are retained solely to provide a personalised Maison experience.
All online purchases are processed exclusively through PayPal’s secure payment infrastructure. Christopher DiCas Haute Parfumerie does not receive, access, process, or store your payment card or financial account details on its own systems.
You may browse our online atelier without identifying yourself.
4. PURPOSES AND LEGAL BASES
Every processing activity is based upon a lawful basis under Article 6 GDPR.
Performance of Contract — Article 6(1)(b)
To process orders, arrange delivery, manage returns, and provide Client Services.
Legal Obligation — Article 6(1)(c)
To comply with Greek accounting and tax legislation, together with traceability and safety obligations under Regulation (EU) 2023/988.
Legitimate Interest — Article 6(1)(f)
To ensure website security, prevent fraud, protect intellectual property, and preserve the exclusivity of the Maison.
Our legitimate interests never override your fundamental rights.
Consent — Article 6(1)(a)
For newsletters, invitations, non-essential cookies, and bespoke clienteling.
Consent may be withdrawn at any time.
5. COOKIES & CONSENT — 2026 STANDARD
ChristopherDiCas.com does not place non-essential cookies before your consent.
Upon your first visit, a consent interface provides four equally prominent choices in accordance with ePrivacy requirements and Google Consent Mode v2, without the use of dark patterns:
-
Accept All
-
Reject All
-
Strictly Necessary Only
-
Customize Preferences
Strictly Necessary
Required for website operation, security, checkout functionality, and load balancing.
These cookies do not require consent.
Functionality
To remember language, region, and user preferences.
Analytics
To measure website performance using anonymised or pseudonymised data.
Marketing
Used only with your consent to communicate new creations and private appointments.
We do not engage in cross-contextual behavioural advertising.
Consent may be reviewed, modified, or withdrawn at any time through the Cookie Settings link available in the website footer.
Session cookies expire when your browser closes.
Persistent cookies are retained for no longer than twelve (12) months.
6. CONFIDENTIALITY & DISCLOSURE
Personal data is disclosed only where strictly necessary and subject to Article 28 GDPR processing agreements.
Recipients may include:
-
hosting providers;
-
IT service providers;
-
insured logistics partners responsible for delivery;
-
PayPal, solely for the secure processing of your payment transaction; and
-
competent public authorities where legally required or necessary to protect the rights, safety, or intellectual property of the Maison.
We never disclose personal data for third-party marketing purposes.
Where data is transferred outside the European Economic Area, appropriate safeguards under Chapter V GDPR are applied, including adequacy decisions, the EU–U.S. Data Privacy Framework, or Standard Contractual Clauses.
7. RETENTION
Personal data is retained only for as long as required.
-
Orders, invoices, and accounting records: 10 years
-
Client Services correspondence: up to 5 years
-
Marketing consent records: until withdrawal plus 3 years
-
Analytical data: anonymised immediately or retained for a maximum of 24 months
Thereafter, data is securely deleted or irreversibly anonymised.
8. SECURITY
Appropriate technical and organisational safeguards are implemented pursuant to Article 32 GDPR.
These include:
-
TLS 1.3 encryption;
-
secure hosting infrastructure;
-
restricted personnel access;
-
confidentiality obligations; and
-
payment processing through PCI-DSS Level 1 compliant payment infrastructure operated by PayPal.
9. YOUR RIGHTS
Under Articles 15–22 GDPR, you have the right to:
-
access;
-
rectification;
-
erasure;
-
restriction of processing;
-
data portability;
-
objection; and
-
withdrawal of consent.
To exercise any right, contact:
We will respond within one month in accordance with Article 12 GDPR.
You also have the right to lodge a complaint with:
Hellenic Data Protection Authority (HDPA)
1–3 Kifissias Avenue
11523 Athens, Greece
www.dpa.gr
10. MINORS
Our website and products are intended exclusively for adults aged eighteen (18) years or older.
We do not knowingly collect or process personal data relating to minors.
11. AMENDMENTS
This Policy may be updated to reflect legal, regulatory, technical, or Maison developments.
The Effective Date will always indicate the latest version.
Continued use of the website following publication of an updated Policy constitutes acknowledgement of the revised version.
12. CONTACT
For all privacy, data protection, or cookie-related enquiries:
Christopher DiCas Haute Parfumerie
Email: info@christopherdicas.com
This Policy shall be governed by the laws of Greece together with the applicable mandatory provisions of European Union law.