Privacy Policy

1. Introduction

At Greece Goods, we respect your privacy and are committed to protecting your personal data with transparency, responsibility, and security.

This Policy explains how we collect, use, and protect your personal data when you:

• Visit our website
• Create an account
• Place an order, with or without an account
• Subscribe to our newsletter
• Contact us

Processing is carried out in accordance with:

• Regulation (EU) 2016/679 (GDPR)
• Greek data protection legislation
• Applicable laws governing international data transfers

2. Data Controller

Greece Goods
[Legal Entity Name]
[Registered Address]
Athens, Greece
Contact Email: privacy@greecegoods.com

3. What Data We Collect

We collect only the data strictly necessary for the lawful and proper operation of the business.

3.1 Order Data (Guest Checkout or Account)

• Full name
• Billing address
• Shipping address
• Email
• Phone number
• Order details
• Transaction confirmation

We do not store credit or debit card details.

3.2 Account Creation

• Login credentials
• Saved addresses
• Order history

3.3 Newsletter Subscription

• Email
• Optional name

You may unsubscribe at any time through the unsubscribe link included in each email.

3.4 Communication with the Company

• Name
• Email
• Message content

3.5 Automatically Collected Data

During browsing, the following may be collected:

• IP address
• Device and browser information
• Operating system
• Pages visited
• Cookies and tracking technologies

4. Legal Basis for Processing (Article 6 GDPR)

Processing is based on:

• Performance of a contract (order fulfillment)
• Legal obligation (tax and accounting compliance)
• Legitimate interest (security, fraud prevention, service improvement)
• Consent (newsletter and marketing cookies)

5. Marketing & Remarketing

We use tools such as:

• Google Ads
• Google Analytics
• Meta (Facebook / Instagram Pixel)
• Advertising remarketing tools

These tools may collect browsing behavior data for the purpose of:

• Performance measurement
• Improving advertising strategy
• Displaying personalized advertisements

Marketing cookies are activated only upon consent through the Cookie Banner.

Consent may be withdrawn at any time.

6. Fraud Prevention & Transaction Security

To protect the business and our customers, we may process data for:

• Transaction risk assessment
• Chargeback management
• Prevention of malicious use
• Investigation of suspicious activity

This processing is based on the legitimate interest of security.

7. Payments

Payments are processed through certified payment providers complying with the PCI-DSS standard.

We do not store card numbers or full payment details.

8. Data Sharing

Data is shared only where necessary with:

• Courier companies, for delivery purposes
• Payment providers
• Hosting and IT providers
• Accountants and tax advisors
• Public authorities, where required

All partners are bound by confidentiality obligations and GDPR compliance requirements.

We do not sell personal data.

9. International Transfers

Where shipping outside the EU is involved, international data transfers may be required for logistics purposes.

In such cases, the appropriate safeguards under Chapter V of the GDPR are applied.

10. Retention Period

Data is retained:

• For 5–10 years for tax compliance
• For as long as the account remains active
• Until marketing consent is withdrawn
• For as long as necessary for dispute resolution or legal defense

After the retention period expires, data is securely deleted or anonymized.

11. Your Rights

Under the GDPR, you have the right to:

• Access
• Rectification
• Erasure
• Restriction of processing
• Data portability
• Objection
• Withdrawal of consent
• Lodge a complaint with the Hellenic Data Protection Authority

Requests may be submitted to:
privacy@greecegoods.com

12. Cookies

We use cookies for:

• Basic website functionality
• Statistical analysis
• Advertising purposes, subject to consent

Further details are provided in the Cookies Policy.

13. Data Security

We implement:

• SSL encryption
• Secure hosting environment
• Restricted administrator access
• Regular system monitoring

Despite high security standards, no electronic transmission can be considered absolutely secure.

14. Minors

Our services are intended for adults aged 18+.

We do not knowingly collect data from minors.

15. Policy Updates

This Policy may be amended for legal or operational reasons.

The current version will always be available on our website.

Last updated: 15/03/2026