Discount -50%
[[DRAFT for review by a lawyer. Fill in the blanks in double brackets and remove this line once the text is approved.]]
Last updated: [[date]]
This policy explains what personal data we collect when you use the CANVIA shop, why we use it, who we share it with and what your rights are, under the General Data Protection Regulation (EU) 2016/679 ("GDPR") and Greek Law 4624/2019.
When you place an order
We use them to fulfil your order, send you emails about its progress and handle returns and complaints. Legal basis: performance of the contract (Article 6(1)(b) GDPR). The details needed for invoices and receipts are kept because tax law requires it (Article 6(1)(c)).
Before payment, the checkout details are stored temporarily so the order can be completed, and are deleted automatically after 7 days.
If you create an account
Your email, name, phone number, saved addresses, wishlist and language. The account lets you see your orders and check out faster. Legal basis: the contract (Article 6(1)(b)). You sign in with a link sent to your email, with no password.
If you subscribe to our newsletter
Your email, language, and when and where you gave your consent. We use them to send you news and offers. Legal basis: your consent (Article 6(1)(a)), which you can withdraw at any time from your account or by writing to us. [[How newsletters are sent and how to unsubscribe from them.]]
If you ask to be told when a sold-out size is back
Your email, the product and the size, so we can let you know once when it is available again. Legal basis: your request (Article 6(1)(b)).
When you contact us
Whatever you write to us, so we can reply.
To keep the Shop secure
To prevent abuse (for example repeated form submissions), we keep an unreadable fingerprint (hash) of your IP address for about 10 minutes, not the address itself. Legal basis: our legitimate interest in protecting the Shop (Article 6(1)(f)). Our hosting provider may also log technical access data for the security of its service.
We do not sell your data, we use no advertising trackers, and we make no automated decisions about you. For cookies, see our Cookie policy.
Card, Apple Pay and Google Pay payments are processed by Stripe. You enter your card details in a Stripe form and Stripe handles them directly. We only receive a confirmation and a reference for the payment, never your card number. Your email is also sent to Stripe with the payment, for the payment receipt. More in Stripe's privacy policy.
We use trusted providers that process data on our behalf, only as far as needed for the service they provide:
We may also have to give data to public authorities when the law requires it.
Some providers (such as Netlify) or their partners are based in the USA. In those cases the transfer is made with the safeguards of the GDPR, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. [[Lawyer to review per provider.]]
You have the right:
To exercise a right, write to us at [[contact email]]. We reply within one month. Some data, such as invoice details, may have to be kept for as long as the law requires, even if you ask us to delete it.
If you believe the processing of your data breaks the law, you can complain to the Greek Data Protection Authority.
Your connection to the Shop is encrypted (HTTPS). Only authorised people can access the Shop's administration. We do not store card details.
The Shop is not aimed at children under [[age, e.g. 15]]. [[Lawyer to review.]]
We may update this policy. The date of the last update is shown at the top of this page.