Authorising *****elent Debit Orders

I became one of the latest victims of *****elent transactions going off my Credit Card. I cannot understand how this could have happened. When you swipe your card you need to enter a pin. When you do online shopping you need to give your card details including the 3 digit csv number on the back in order to verify the transaction. The only other way I can think how this can be legal is if I agreed verbally that said amount can be deduted from my account, of which I am certain I didn't do. What is funny is that I also did not receive the notification SMS from the bank which I receive with each and every transaction I do. I handed in a Dispute form, and were told that if I were lucky the funds will be back in my account in 21 working days. I find this totally unacceptable as the Company that took money off my account, on numerous occasions have been identified as ********** if you look at their hellopeter.com complaints against them. Why doesn't the banks REDFLAG these **********??? and why do their loyal clients have to wait for a refund on something that could have been prevented???? And how long does 1 have to wait to have your submitted Dispute Form receival by the bank aknowledge