Evangelisse Information to Customers on the Processing of Personal Data

This Privacy Notice explains how EVANGELIA DESPOTOPOULOU TOU PANAGIOTI (trading as Evangelisse) (“Company”) processes your personal data in accordance with the General Data Protection Regulation (EU 2016/679) (“GDPR”) and applicable Greek data protection law.

A. Controller’s Details

  • Name: EVANGELIA DESPOTOPOULOU TOU PANAGIOTI (distinctive title: Evangelisse)

  • Registered Seat: Athens, Greece

  • Contact (privacy): info@evangelisse.com | Tel.: +30 6974046666

  • Tax Identification No.: 169001978
  • General Commercial Registry No.: 184122501000

B. Types of Data Collected

  1. Identification & invoicing data: name, billing details, Tax Identification Number, tax office.

  2. Contact details: email address, telephone number, shipping information (city, postal code, country).

  3. Payment details: method of payment, transaction confirmation (we do not store full card numbers).

  4. Transaction data: orders, returns, transaction history.

  5. Loyalty programme data (if you participate): transaction points, rewards, redemption history.

  6. Personalisation data (if requested): embroidery/monogram text, placement, font and thread colour.

  7. Account data (if you create an account): login email, hashed password, preferences.

  8. Communications with customer service.

  9. Technical and usage data (IP, device, browser, cookies/analytics).

  10. Marketing preferences (newsletter, SMS).

The above personal data under points (1), (2), and (3) are provided directly by you and are required for the conclusion and performance of the contract between us (e.g. ordering and sending products). Refusal to provide them will prevent us from fulfilling your order.
Data relating to the loyalty programme is optional; refusal to provide it results only in non-participation in the programme.
Technical data may be collected automatically through cookies. Payment confirmations come from our payment provider; delivery updates may come from our couriers.

C. Purposes and Legal Basis

  1. Provision of products and services – to process and deliver your orders, provide support.
    Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

  2. Billing and tax compliance – issuing receipts/invoices and fulfilling tax obligations.
    Legal basis: legal obligation (Art. 6(1)(c) GDPR).

  3. Loyalty programme (optional) – managing participation and rewards.
    Legal basis: consent (Art. 6(1)(a) GDPR).

  4. Direct promotion by electronic means – email/SMS promotions after purchase, or where you consent to newsletters.
    Legal basis: legitimate interest (Art. 6(1)(f) GDPR and Law 3471/2006), or consent where required.

  5. Analytics, improvement and security – using technical/usage data to improve services and prevent fraud.
    Legal basis: legitimate interests (Art. 6(1)(f)); consent for non-essential cookies.

D. Recipients

We share personal data only when necessary and with safeguards. Categories include:

  • Service providers acting on our behalf (accounting, IT, hosting, payments, couriers, marketing).

  • Financial institutions for transaction execution.

  • Tax and public authorities as required by law.

  • Professional advisers (lawyers, auditors).

  • Judicial, prosecutorial, police and supervisory authorities where legally required.

E. Data Retention

Your data as a customer is retained for ten (10) years after the completion of the transaction.

Retention may be extended if legal proceedings are ongoing. Afterwards, data is securely deleted.

F. International Transfers

We do not transfer personal data outside the EU/EEA. If a transfer is required in the future, we will ensure adequate safeguards (e.g. EU adequacy decision, Standard Contractual Clauses, or your explicit consent).

G. Your Rights

Under Articles 15–22 GDPR you have the right to:

  • Access your data.

  • Rectify inaccurate or incomplete data.

  • Request erasure (“right to be forgotten”).

  • Request restriction of processing.

  • Data portability (for data you provided and processed by automated means).

  • Object to processing (including direct marketing).

  • Withdraw consent at any time (e.g. newsletters, loyalty programme, cookies).

  • Request human intervention where automated decisions apply (we do not use such profiling).

It is noted that we have the right in any event to partially or fully refuse to comply with your request to restrict the processing or erasure of your data, if the processing or retention of your personal data is necessary for the establishment, exercise or support of its legitimate rights or the fulfilment of its legal obligations.

How to exercise your rights:
Send a request to info@evangelisse.com or call +30 6974046666. We may request additional information to verify your identity.

We respond within one month; this may be extended by up to two months if necessary (you will be informed of the reasons). If we must refuse your request partly or fully due to legal obligations or legitimate interests, we will explain why.

H. Right to Complain

You may file a complaint with the Hellenic Data Protection Authority (www.dpa.gr, Tel. +30 210 6475600).

I. Updates

We may update this Notice from time to time. Any significant changes will be posted here.

Last updated: September 2025