Privacy policy
Last updated: 8 October 2026
1. Who is responsible
AWATARA IKE, G.E.MI. 142793958000, VAT EL800844794 ("we"), is the controller of the personal data processed through www.awatara.gr. For any privacy matter, contact us at info@awatara.gr.
2. What data we process, why, and on what legal basis
| Purpose | Data | Legal basis |
|---|---|---|
| Processing and delivering your order, payments, returns, withdrawals and the legal guarantee | Name, delivery and billing address, email, phone, order details, payment status (card details are processed by the payment provider, not stored by us) | Performance of a contract (Art. 6(1)(b) GDPR) |
| Customer service (email, contact form, WhatsApp) | Your messages and contact details | Performance of a contract or our legitimate interest in answering you (Art. 6(1)(b) and (f) GDPR) |
| Invoicing and accounting | Invoice and transaction data | Legal obligation (Art. 6(1)(c) GDPR) |
| Security of the website and of payments, fraud prevention | Order, device and payment data | Legitimate interest (Art. 6(1)(f) GDPR) |
| Marketing emails, if you sign up (for example at checkout or in the footer) | Email, name | Consent (Art. 6(1)(a) GDPR; Art. 11 of Law 3471/2006). You can unsubscribe at any time with the link in each email. |
| Analytics and advertising cookies and pixels | Device, browsing and purchase events | Consent (Art. 4(5) of Law 3471/2006 and Art. 6(1)(a) GDPR). See our Cookie Policy. |
| Product reviews, if you submit one | Name as you provide it, review content, order reference | Consent (Art. 6(1)(a) GDPR) |
3. Who receives your data
- Shopify, our e-commerce platform, including Shopify Payments;
- PayPal and the wallet providers you choose (Shop Pay, Apple Pay, Google Pay);
- the couriers that deliver your order (BOX NOW, ACS, FedEx, depending on your destination);
- our accounting office and public authorities, where required by law;
- only if you consent to the relevant cookies: Google (Google Analytics and Google advertising services), Meta Platforms (Facebook/Instagram pixel and Conversions API), Pinterest, and Judge.me (review analytics);
- Judge.me, which we use to collect and display product reviews;
- WhatsApp (Meta), if you choose to contact us there;
- Instafeed, which displays our Instagram posts on the website and receives your IP address when the images load.
Some of these recipients act as our processors. Others, such as payment providers, Google, Meta and Pinterest for their own purposes, act as independent or joint controllers, and their own privacy policies also apply. Shopify may also use store data in its own capacity, including through its Shopify Network Intelligence service, as described in Shopify's privacy policy.
4. Transfers outside the EEA
Some of the providers above (for example Shopify, PayPal, Google, Meta and Pinterest) may process personal data outside the European Economic Area, including in the United States. Depending on the provider, such transfers are based on an adequacy decision of the European Commission (such as the EU–US Data Privacy Framework for certified recipients), on Binding Corporate Rules (Shopify uses Binding Corporate Rules for transfers within its group), or on the European Commission's Standard Contractual Clauses. You can ask us for information on the safeguards used, and a copy of them, at info@awatara.gr.
5. How long we keep your data
- Invoices and accounting records: for the period required by Greek accounting and tax law (at least 5 years from the end of the relevant financial year).
- Order data: for as long as needed to perform the contract, to handle returns, withdrawals and the 2-year legal guarantee, and to defend or bring legal claims within the applicable limitation periods.
- Customer account: until you delete it or ask us to delete it, subject to the periods above.
- Customer service messages: for as long as needed to handle your request and any related claim.
- Marketing emails: until you unsubscribe or withdraw your consent.
- Cookies and pixels: as stated in our Cookie Policy.
6. Your rights
You have the right to access, rectify and erase your data, to restrict or object to processing, to data portability, and to withdraw your consent at any time without affecting processing carried out before the withdrawal. To exercise your rights, write to info@awatara.gr. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (Kifisias 1–3, 115 23 Athens, www.dpa.gr) or with the data protection authority of your country of residence.
7. Children
Our website is not directed at children under 16.
8. Changes
We will publish any changes to this policy on this page with a new date.