Privacy Policy

Why we collect data?

1. To provide and operate the Services;


2. To provide our Users with ongoing customer assistance and technical support;

3. To be able to contact our Visitors and Users with general or personalized service-related notices and promotional messages;

4. To create aggregated statistical data and other aggregated and/or inferred Non-personal Information, which we may use to provide and improve our respective services;

5. To comply with any applicable laws and regulations.

How do we collect data?

When you conduct a transaction on our website, as part of the process, we collect personal information you give us such as your name, address and email address. Your personal information will be used for the specific reasons stated above only.

How we store, use, share and disclose your personal information

Our website is hosted on the Wix.com platform. Wix.com provides us with the online platform that allows us to sell our products and services to you. Your data may be stored through Wix.com's data storage, databases and the general Wix.com applications. They store your data on secure servers behind a firewall. All direct payment gateways offered by Wix.com and used by our company adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers. For more information on how Wix handles data visit: https://www.wix.com/about/privacy.

We also share necessary information with trusted third-party service providers such as FedEx for order delivery, and Stripe/PayPal for payment processing, strictly for the purpose of fulfilling our services to you.

Lawful basis

Pursuant to the General Data Protection Regulation ("GDPR"), if you are a resident of the European Economic Area ("EEA"), we process your personal information under the following lawful bases:

Your consent;

1. The performance of the contract between you and the Site;

2. Compliance with our legal obligations;


3. To protect your vital interests;

4. To perform a task carried out in the public interest;


5. For our legitimate interests, which do not override your fundamental rights and freedoms.

Retention

When you place an order through the Site, we will retain your Personal Information for our records unless and until you ask us to erase this information. However, to comply with Greek tax and accounting laws, we are legally required to retain transaction and invoicing data for a period of up to 10 years. Marketing data will be retained until you withdraw your consent. For more information on your right of erasure, please see the 'Your rights' section below.

Automatic decision-making

If you are a resident of the EEA, you have the right to object to processing based solely on automated decision-making (which includes profiling), when that decision-making has a legal effect on you or otherwise significantly affects you. We do not engage in fully automated decision-making that has a legal or otherwise significant effect using customer data.

Our processor, Wix, may use limited automated decision-making to prevent fraud that does not have a legal or otherwise significant effect on you. Services that include elements of automated decision-making include: (i) Temporary denylist of IP addresses associated with repeated failed transactions. This denylist persists for a small number of hours.
(ii) Temporary denylist of credit cards associated with denylisted IP addresses. This denylist persists for a small number of days.

Your data rights

GDPR

If you are a resident of the EEA, you have the right to access the Personal Information we hold about you, to port it to a new service, and to ask that your Personal Information be corrected, updated, or erased. If you would like to exercise these rights, please contact us through the contact information below.

You also have the right to lodge a complaint with a supervisory authority, such as the Hellenic Data Protection Authority (HDPA), if you believe your data privacy rights have been violated.

Your Personal Information will be initially processed in Ireland and then will be transferred outside of Europe for storage and further processing, including to Canada and the United States. For more information on how data transfers comply with the GDPR, see Wix's GDPR Whitepaper.

CCPA

If you are a resident of California, you have the right to access the Personal Information we hold about you (also known as the 'Right to Know'), to port it to a new service, and to ask that your Personal Information be corrected, updated, or erased. If you would like to exercise these rights, please contact us through the contact information below. If you would like to designate an authorized agent to submit these requests on your behalf, please contact us at: Vakchou 19, Athens, Greece, 141 22.