Home • Privacy pOLICY

Privacy Policy

PRIVACY POLICY

At Christiana Kafa, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, make a purchase, contact us or otherwise interact with us.

1. DATA CONTROLLER

Christiana Kafa (hereinafter referred to as “we”, “us” or “our”), which operates the online shop www.christianakafa.com, is the trading name of CHRISTIANA KAFA L.P., a company registered in Greece under GEMI No. 194583803000.

Our VAT number is 803323299 (ΚΕΦΟΔΕ ΑΤΤΙΚΗΣ).

Registered Office: 5 Pindarou Street, 10761 Athens, Greece.

Showroom: 21 Perikleous Street, 10563 Athens, Greece.

Telephone: +30 210 9825301

Email: info@christianakafa.com

For any questions regarding this Privacy Policy or the processing of your personal data, you may contact us using the details above.

2. PERSONAL DATA WE COLLECT

Depending on how you interact with our website and services, we may collect and process the following categories of personal data:

  • Identity and contact details: First name, last name, email address, telephone number and other contact information.
  • Billing and delivery information: Billing address, shipping address, country, postal code and, where applicable, company name, business activity, VAT number and tax office details.
  • Order and transaction information: Products purchased, order history, payment status, invoices, returns, repairs and related correspondence.
  • Account information: Login details and information associated with your customer account and wishlist.
  • Communication information: Correspondence and communication history when you contact us by email, telephone, website forms or through our social media channels, including Facebook and Instagram.
  • Technical information: IP address, browser type, device information, website usage information and cookie-related data, where applicable.
  • Marketing preferences: Your newsletter subscription status, communication preferences and consent choices.
  • Recruitment information: Information included in CVs and applications submitted to us when applying for a position.

We only collect personal data that is relevant and necessary for the purposes described in this Policy.

3. HOW WE COLLECT YOUR PERSONAL DATA

We may collect personal data directly from you when you:

  • Place an order through our online shop.
  • Create or manage a customer account.
  • Subscribe to our newsletter.
  • Contact us by email, telephone or through our website.
  • Communicate with us through social media.
  • Request information about our products, services or repairs.
  • Visit and browse our website, through cookies and similar technologies where permitted.
  • Submit a CV or job application.

4. PURPOSES AND LEGAL BASES FOR PROCESSING

We process personal data only where we have a lawful basis under the General Data Protection Regulation (GDPR) and applicable data protection legislation.

Your personal data may be processed for the following purposes:

  • Processing and fulfilling orders: To verify, process and manage your purchases, arrange delivery, handle payments, issue invoices and provide customer support. The legal basis is the performance of a contract and compliance with legal obligations.
  • Customer account management: To create and maintain your account, manage your wishlist and provide access to website features. The legal basis is the performance of a contract or our legitimate interests, depending on the relevant service.
  • Customer service and communication: To respond to your questions, requests, complaints and enquiries, and to provide information about our products and services. The legal basis is the performance of a contract, taking steps at your request before entering into a contract, or our legitimate interests.
  • Repairs and after-sales services: To manage repair requests, assess products and communicate with you regarding the relevant service. The legal basis is the performance of a contract or our legitimate interests.
  • Marketing and newsletters: To send newsletters, updates and promotional communications where you have subscribed or otherwise provided the required consent. The legal basis is your consent. You may withdraw your consent at any time.
  • Website analysis and improvement: To understand how visitors use our website, measure website performance and improve our online services. Where required, analytics cookies and similar technologies are used only after your consent.
  • Advertising and campaign measurement: To measure the effectiveness of our advertising campaigns and, where permitted, support relevant advertising activities. The legal basis for non-essential tracking technologies is your consent.
  • Legal and accounting obligations: To comply with applicable tax, accounting, commercial and other legal requirements. The legal basis is compliance with a legal obligation.
  • Protection of our rights: To protect our business, prevent misuse, establish or defend legal claims and safeguard our legitimate interests.
  • Recruitment: To review applications and assess candidates for available positions. The legal basis is taking steps at the candidate’s request prior to entering into a contract and, where applicable, our legitimate interests.

5. NEWSLETTERS AND MARKETING COMMUNICATIONS

If you subscribe to our newsletter, we may use your name and email address to send you updates about our collections, products, services, news and promotional activities.

We use Mailchimp to manage our mailing list and distribute newsletters. Your relevant contact information may therefore be processed through Mailchimp for this purpose.

You can unsubscribe from our newsletter at any time by clicking the unsubscribe link included in each email or by contacting us at info@christianakafa.com.

Unsubscribing from marketing communications will not affect communications that are necessary for an order, service request or other existing business relationship.

6. COOKIES AND SIMILAR TECHNOLOGIES

Our website uses cookies and similar technologies to ensure its proper operation, improve functionality and understand how visitors interact with the website.

Cookies are small text files stored on your device when you visit a website. They may be used for different purposes, including:

  • Strictly necessary cookies: Required for the basic operation of the website, such as shopping cart functionality, checkout and security.
  • Analytics cookies: Help us understand website traffic and how visitors use our website.
  • Advertising and marketing cookies: Help measure advertising performance and support relevant advertising activities.
  • Preference cookies: Remember certain choices and preferences to improve your browsing experience.

We use Google Analytics to analyse website usage and performance. We also use Meta Pixel to measure advertising performance and support our advertising activities. Google Tag Manager is used to manage website tags and tracking technologies.

Non-essential cookies and tracking technologies are activated only after you provide your consent through the website’s cookie consent mechanism. You may change or withdraw your cookie preferences at any time through the available cookie settings on our website.

Please note that disabling certain cookies may affect some website features or functionality.

7. SHARING YOUR PERSONAL DATA

We do not sell or rent your personal data to third parties. However, we may share relevant personal information with trusted third parties where necessary for the purposes described in this Policy.

These may include:

  • Payment service providers: To securely process payments and related transactions.
  • Shipping and delivery companies: To arrange the delivery of your orders and manage shipments.
  • Mailchimp: To manage newsletter subscriptions and distribute marketing communications.
  • Google: Through Google Analytics and Google Tag Manager for website analytics and tag management.
  • Meta: Through Meta Pixel for advertising measurement and related activities.
  • Kinsta: Our website hosting provider, which provides hosting infrastructure and related technical services.
  • Professional advisers: Such as accountants, auditors and legal advisers, where necessary.
  • Public authorities: Where disclosure is required by law or necessary to comply with a lawful request.

These third parties may process personal data only to the extent necessary for the services they provide and in accordance with applicable data protection requirements.

8. INTERNATIONAL DATA TRANSFERS

Some of the third-party service providers we use may process personal data outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we take appropriate steps to ensure that the transfer complies with applicable data protection legislation. Depending on the circumstances, these safeguards may include an adequacy decision adopted by the European Commission or the use of Standard Contractual Clauses approved by the European Commission, together with any additional safeguards required by law.

9. DATA RETENTION

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including the fulfilment of legal, accounting and reporting obligations.

  • Customer and order records: Retained for the period required to fulfil the relevant transaction and comply with applicable legal, tax and accounting obligations.
  • Accounting and tax records: Retained for five (5) years, in accordance with the applicable retention requirements.
  • Newsletter information: Retained until you unsubscribe or withdraw your consent, unless a longer retention period is required for legal purposes.
  • Customer enquiries and correspondence: Retained for as long as necessary to respond to the request and manage any related matters.
  • Recruitment records: CVs and application information relating to unsuccessful candidates are generally retained for up to six (6) months following the completion of the recruitment process, unless a longer period is justified or permitted by law.
  • Technical and cookie-related information: Retained in accordance with the applicable cookie settings, consent choices and the retention periods of the relevant technologies.

When personal data is no longer necessary, it will be securely deleted or anonymised, where appropriate.

10. DATA SECURITY

We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

These measures may include:

  • Restricted access to personal data by authorised personnel.
  • Confidentiality obligations for employees and collaborators.
  • Appropriate password and access controls.
  • Firewall and antivirus protection.
  • Secure website hosting and technical maintenance.
  • Periodic review of our data protection and security practices.

Although we take reasonable steps to protect your information, no method of transmission over the internet or electronic storage is completely secure.

In the event of a personal data breach, we will take the necessary steps in accordance with applicable data protection legislation, including notifying the competent supervisory authority and affected individuals where legally required.

11. YOUR RIGHTS UNDER THE GDPR

Under the GDPR and applicable data protection legislation, you may have the following rights regarding your personal data:

  • Right of access: To request confirmation as to whether we process your personal data and obtain a copy of it.
  • Right to rectification: To request the correction of inaccurate or incomplete personal data.
  • Right to erasure: To request the deletion of your personal data, subject to applicable legal requirements.
  • Right to restriction: To request the restriction of processing in certain circumstances.
  • Right to data portability: To receive certain personal data in a structured, commonly used and machine-readable format and, where technically feasible, request its transfer to another controller.
  • Right to object: To object to processing based on our legitimate interests and to direct marketing at any time.
  • Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact us at info@christianakafa.com.

We will respond to your request within one (1) month of receipt. Where necessary, this period may be extended by a further two (2) months, taking into account the complexity and number of requests, in accordance with the GDPR. If an extension is required, we will inform you within the initial one-month period.

Please note that certain rights are not absolute and may be subject to legal exceptions or limitations.

12. RIGHT TO LODGE A COMPLAINT

If you believe that your personal data has been processed in a way that violates applicable data protection legislation, you have the right to lodge a complaint with the competent supervisory authority.

In Greece, the competent authority is the Hellenic Data Protection Authority (HDPA).

Website: www.dpa.gr

You may also contact us directly so that we can review and address your concerns.

13. THIRD-PARTY WEBSITES

Our website may contain links to third-party websites, social media platforms or other external services. These websites operate independently and have their own privacy policies and terms of use.

We are not responsible for the privacy practices, content or security of third-party websites. We encourage you to review their privacy policies before providing them with any personal information.

14. CHILDREN’S PRIVACY

Our website and online services are not intended to knowingly collect personal data from children without the involvement or consent of a parent or legal guardian where required by applicable law.

If you believe that a child has provided us with personal data in circumstances where this should not have occurred, please contact us so that we can take appropriate action.

15. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our business practices, website functionality or applicable legal requirements.

Any updates will be published on this page. We encourage you to review this Policy periodically to stay informed about how we protect your personal data.

16. CONTACT US

If you have any questions, requests or concerns regarding this Privacy Policy or the way we handle your personal data, please contact us:

CHRISTIANA KAFA L.P.
5 Pindarou Street, 10761 Athens, Greece
Showroom: 21 Perikleous Street, 10563 Athens, Greece
Telephone: +30 210 9825301
Email: info@christianakafa.com
Website: www.christianakafa.com