Πολιτική Απορρήτου (GDPR)

Privacy Policy — Silk Tales

Data Controller: Silk Tales — Didymoteicho, Evros 683 00, Greece · Email: silkfairytales@gmail.com · Phone: +30 6*****5056.

1. What data we collect

  • Contact & identity details: name, shipping/billing address, email, phone number.
  • Financial data: payment details. Card numbers are handled exclusively by licensed payment providers (PCI-DSS) and are not stored on our servers.
  • Technical data & cookies: IP, device type, browser, cookies, browsing data.

2. Purposes & Legal Basis (Article 6 GDPR)

  • Order fulfillment & shipping — Contract performance, Article 6(1)(b).
  • Issuance of tax documents — Legal obligation, Article 6(1)(c).
  • Newsletter / promotional activities — Explicit consent, Article 6(1)(a).
  • Tracking / advertising pixels — Explicit consent, Article 6(1)(a) (Consent Mode v2).
  • Site security, fraud prevention, customer service — Legitimate interest, Article 6(1)(f).

3. Data recipients

Shopify Inc., payment providers (Shopify Payments/Stripe/PayPal), courier companies (ACS/ELTA/Geniki Taxydromiki), review tool (Judge.me), marketing/analytics platforms (Google, Meta) when activated, and our accountant/tax advisor.

4. International transfers

Certain providers (Shopify, Google, Meta) may process data outside the EU (e.g. USA), based on the EU-US Data Privacy Framework or Standard Contractual Clauses (SCCs).

5. Retention period

  • Tax documents: 5–10 years (Tax Procedures Code).
  • Email marketing: until consent is withdrawn (unsubscribe).
  • Analytical cookies: 2–14 months.

6. Your rights (DSAR)

You have the right to access, rectification, erasure ("right to be forgotten"), restriction, data portability and withdrawal of consent. We respond within 30 days at silkfairytales@gmail.com. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA) — www.dpa.gr. (Tax documents are legally exempt from deletion.)

7. Cookies

We use technical cookies (necessary) and, with your consent, analytical/marketing cookies. The cookie banner allows you to accept or reject equally. No advertising/analytical processing is carried out before explicit acceptance.

8. Security

SSL/HTTPS, Shopify encryption, 2FA in management. In case of a breach, we inform the HDPA within 72 hours.

Last updated: August 2026.