Privacy policy

PRIVACY POLICY

CHRISTODOULOU OE, operating under the trade name HOLYICON.GR (“HOLYICON.GR”, “we”, “us” or “our”), respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store and disclose personal data when you visit, use or make a purchase through our online store and website, including when you contact us regarding our products, services, reproductions, commissions or exhibition.

Our online store is powered by Shopify.

1. DATA CONTROLLER

For the purposes of applicable data protection legislation, including Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), the data controller is:

CHRISTODOULOU OE
Trade name: HOLYICON.GR
Thessalonikis 129
Oraiokastro, 570 13 Thessaloniki, Greece
Telephone: +30 2310 269935
Email: holyicon.dp@gmail.com
G.E.MI. No.: 141342905000
VAT ID: 800801260

2. PERSONAL DATA WE COLLECT

Depending on how you interact with our Services, we may collect the following categories of personal data:

Contact information

This may include your name, postal address, billing address, shipping address, telephone number and email address.

Order and transaction information

This may include information relating to products you purchase, order history, returns, refunds, delivery information, payment status and transaction details.

Payment information

Payments may be processed by Shopify and/or third-party payment providers. We may receive information necessary to confirm and administer a payment, but payment card information may be processed directly by the relevant payment provider in accordance with its own privacy policy and security procedures.

Communications

When you contact us by email, telephone, contact form or other available means, we may process the information you provide, including the content of your communication and relevant contact details.

Device and technical information

When you visit our website, certain technical information may be collected automatically, including IP address, browser type, device information, network information and information regarding how you interact with the website.

Usage information

We may collect information about how you use and navigate the website, including pages viewed, products viewed, interactions with the website and other technical or usage information.

3. HOW WE COLLECT PERSONAL DATA

We may collect personal data:

  • directly from you when you place an order, create an account, contact us or otherwise provide information to us;

  • automatically when you use the website, including through cookies and similar technologies;

  • through Shopify and service providers that support the operation of our store;

  • from payment, shipping, delivery and other service providers where necessary to complete a transaction or provide the Services.

4. WHY WE USE YOUR PERSONAL DATA

We may use your personal data for the following purposes:

Processing and fulfilling orders

We use personal data to process purchases, confirm orders, process payments, arrange shipping and delivery, communicate with you about your order and handle returns, refunds and customer support.

Providing customer service

We may use personal data to respond to your questions, requests, complaints and enquiries.

Operating and improving our website

We may use technical and usage information to operate, maintain, secure and improve our website and Services.

Security and fraud prevention

We may process personal data where necessary to protect our website, systems, business and customers against fraud, abuse, unauthorised activity and other security risks.

Legal and regulatory compliance

We may process personal data where necessary to comply with legal obligations, accounting and tax requirements, respond to lawful requests from authorities, establish or defend legal claims, or protect our legal rights.

Marketing

Where permitted by applicable law, we may use your contact information to send marketing communications about our products, services or news. Where consent is required, we will request your consent before sending such communications.

You may withdraw your consent to marketing communications at any time.

5. LEGAL BASES FOR PROCESSING

Depending on the circumstances, we process personal data on one or more of the following legal bases under the GDPR:

Performance of a contract: for processing orders, payments, delivery, returns, refunds and customer support.

Legal obligation: where processing is necessary to comply with legal, accounting, tax or other regulatory obligations.

Legitimate interests: where processing is necessary for purposes such as website security, fraud prevention, administration, protection of our rights and the improvement of our Services, provided that such interests are not overridden by your rights and freedoms.

Consent: where applicable, including certain marketing or cookie-related activities where consent is legally required.

We do not rely on consent where another lawful basis is applicable and appropriate.

6. WHO MAY RECEIVE PERSONAL DATA

We may disclose personal data to third parties where necessary for the purposes described in this Privacy Policy.

These may include:

  • Shopify, as the platform hosting and supporting our online store;

  • payment providers and financial service providers;

  • shipping, courier and delivery providers;

  • technology, hosting, IT, security and technical service providers;

  • professional advisers, accountants, legal advisers or other service providers where necessary;

  • public authorities, courts or regulators where disclosure is required by law.

We require service providers that process personal data on our behalf to handle such data in accordance with applicable law and appropriate contractual safeguards.

7. SHOPIFY

Our online store is hosted on Shopify.

Shopify may collect and process personal data relating to your access to and use of our store, including information necessary to provide its platform services, maintain security, process transactions and support store functionality.

Shopify may also process data in accordance with its own privacy policies and legal obligations.

Certain information may therefore be processed by Shopify outside Greece and, where applicable, outside the European Economic Area.

8. INTERNATIONAL DATA TRANSFERS

Some of our service providers, including technology providers, payment providers, shipping providers or Shopify, may process personal data in countries outside the European Economic Area.

Where personal data is transferred outside the EEA, we will take appropriate measures required by applicable data protection law, including where applicable the use of adequacy decisions, standard contractual clauses or other legally recognised safeguards.

9. COOKIES AND SIMILAR TECHNOLOGIES

Our website may use cookies and similar technologies to provide essential functionality, remember preferences, improve website performance, understand how visitors use the website and, where applicable, support marketing or personalised features.

Some cookies may be placed by Shopify or third-party service providers.

Where required by applicable law, we will request your consent before using non-essential cookies or similar technologies.

You may also control certain cookies through your browser settings and any cookie-management tools made available on the website.

10. HOW LONG WE KEEP PERSONAL DATA

We retain personal data for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

  • provide the Services;

  • complete and document transactions;

  • comply with legal, accounting and tax obligations;

  • resolve disputes;

  • establish, exercise or defend legal claims;

  • maintain the security of our Services.

Where information is no longer required for these purposes, it will be deleted or anonymised where reasonably possible, subject to applicable legal obligations.

Marketing data processed on the basis of consent will be retained until you withdraw your consent or the information is no longer required for the relevant purpose, subject to applicable law.

11. YOUR RIGHTS

Subject to the conditions and limitations provided by applicable law, you may have the following rights in relation to your personal data:

Right of access: to obtain confirmation as to whether we process your personal data and, where applicable, access to that data.

Right to rectification: to request correction of inaccurate or incomplete personal data.

Right to erasure: to request deletion of personal data in circumstances provided by law.

Right to restriction: to request restriction of processing in circumstances provided by law.

Right to data portability: where applicable, to receive certain personal data in a structured, commonly used and machine-readable format.

Right to object: to object to certain processing, including processing based on legitimate interests and, where applicable, direct marketing.

Right to withdraw consent: where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

These rights are subject to the conditions and exceptions provided by the GDPR and applicable national law.

12. HOW TO EXERCISE YOUR RIGHTS

To exercise your privacy rights or ask questions about the processing of your personal data, contact us at:

holyicon.dp@gmail.com

We may need to verify your identity before processing certain requests.

We will respond to valid requests within the time period required by applicable law.

13. COMPLAINTS

If you believe that your personal data has been processed unlawfully or that your privacy rights have not been respected, you may first contact us so that we can investigate and respond to your concern.

You also have the right to lodge a complaint with the competent data protection supervisory authority.

In Greece, the competent supervisory authority is the:

Hellenic Data Protection Authority (HDPA)

14. CHILDREN

Our online store and Services are not directed specifically at children.

We do not knowingly collect personal data from children where such collection would be unlawful.

If you believe that a child has provided us with personal data unlawfully, please contact us so that we can investigate the matter.

15. THIRD-PARTY WEBSITES

Our website may contain links to third-party websites or services.

We are not responsible for the privacy practices, security or content of third-party websites.

We encourage you to review the privacy policies of any third-party websites you access.

16. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our business, Services, technology or applicable law.

The updated version will be published on this page and the “Last updated” date will be revised accordingly.

17. CONTACT

For any questions regarding this Privacy Policy or our processing of personal data, please contact:

CHRISTODOULOU OE
Trade name: HOLYICON.GR
Thessalonikis 129
Oraiokastro, 570 13 Thessaloniki, Greece
Telephone: +30 2310 269935
Email: holyicon.dp@gmail.com
G.E.MI. No.: 141342905000
VAT ID: 800801260