Privacy policy
LAST UPDATED: 25 JANUARY 2026
THIS PRIVACY POLICY DESCRIBES HOW CANDELINAS COLLECTS, USES AND PROTECTS YOUR PERSONAL DATA WHEN YOU VISIT OR MAKE PURCHASES FROM OUR ESHOP (https://www.candelinas.com).
1) DATA CONTROLLER
THE DATA CONTROLLER IS CANDELINAS (GREECE).
FOR PRIVACY MATTERS AND GDPR REQUESTS: support@candelinas.com.
2) WHAT DATA WE COLLECT
WE MAY COLLECT:
- IDENTIFICATION DATA: FULL NAME
- CONTACT DATA: EMAIL, PHONE
- ORDER DATA: PRODUCTS, QUANTITIES, ORDER VALUE, PURCHASE HISTORY
- SHIPPING/BILLING DATA: ADDRESS, POSTAL CODE, CITY, COUNTRY
- PAYMENT DATA: WE DO NOT STORE FULL CARD DETAILS ON THE ESHOP. PAYMENT IS PROCESSED THROUGH A PAYMENT PROVIDER.
- TECHNICAL/USAGE DATA: IP, DEVICE/BROWSER TYPE, VISIT STATISTICS, COOKIES (WHERE PERMITTED).
3) PURPOSES FOR WHICH WE USE YOUR DATA
WE USE YOUR DATA TO:
- FULFIL ORDERS, PROCESS PAYMENTS, ARRANGE SHIPMENTS AND PROVIDE CUSTOMER SERVICE
- COMMUNICATE WITH YOU ABOUT YOUR ORDER (STATUS, DELAYS, DELIVERY ISSUES)
- ISSUE INVOICES AND COMPLY WITH LEGAL/TAX OBLIGATIONS
- SECURE TRANSACTIONS AND PREVENT FRAUD
- SEND MARKETING/NEWSLETTERS ONLY WHEN YOU HAVE GIVEN CONSENT OR WHERE PERMITTED BY LAW (WITH THE OPTION TO UNSUBSCRIBE AT ANY TIME)
4) LEGAL BASES FOR PROCESSING
PROCESSING IS BASED ON:
- PERFORMANCE OF A CONTRACT (TO COMPLETE YOUR PURCHASE AND DELIVERY)
- LEGAL OBLIGATION (E.G. TAX/ACCOUNTING RECORDS)
- LEGITIMATE INTEREST (SECURITY, FRAUD PREVENTION, CORE ESHOP OPERATION)
- CONSENT (NEWSLETTERS, MARKETING COOKIES, WHERE REQUIRED)
5) WHO WE SHARE DATA WITH
WE SHARE ONLY THE DATA THAT IS NECESSARY WITH:
- OUR ESHOP/HOSTING PROVIDER (E.G. SHOPIFY)
- OUR PAYMENT PROVIDER (TO COMPLETE TRANSACTIONS)
- SHIPPING/COURIER COMPANIES (TO DELIVER YOUR ORDERS)
- EMAIL/SMS PLATFORMS (FOR ORDER COMMUNICATION AND, IF YOU HAVE CONSENTED, NEWSLETTERS)
- ANALYTICS/ADVERTISING SERVICES (ONLY VIA COOKIES AND, WHERE REQUIRED, WITH YOUR CONSENT)
WE DO NOT SELL YOUR PERSONAL DATA.
6) COOKIES
WE USE COOKIES:
- STRICTLY NECESSARY (FOR ESHOP OPERATION, CART, SECURITY)
- PREFERENCES (E.G. LANGUAGE)
- STATISTICS/ANALYTICS (WHERE REQUIRED, ONLY WITH CONSENT)
- MARKETING/ADVERTISING (WHERE REQUIRED, ONLY WITH CONSENT)
YOU CAN MANAGE YOUR PREFERENCES VIA THE COOKIE BANNER AND/OR YOUR BROWSER SETTINGS.
7) TRANSFERS OUTSIDE THE EEA
SOME SERVICE PROVIDERS MAY BE LOCATED OUTSIDE THE EUROPEAN ECONOMIC AREA. IN SUCH CASES, THE TRANSFER IS CARRIED OUT WITH APPROPRIATE SAFEGUARDS UNDER THE GDPR (E.G. STANDARD CONTRACTUAL CLAUSES – SCCs).
8) HOW LONG WE KEEP YOUR DATA
WE RETAIN DATA ONLY FOR AS LONG AS NEEDED:
- ORDER/INVOICING RECORDS: FOR AS LONG AS THE LAW REQUIRES
- SUPPORT COMMUNICATIONS: FOR A REASONABLE PERIOD FOR SERVICE AND RECORD-KEEPING
- MARKETING LISTS: UNTIL YOU UNSUBSCRIBE OR WITHDRAW CONSENT
9) YOUR RIGHTS
YOU HAVE THE RIGHT TO:
- ACCESS
- RECTIFICATION
- ERASURE (WHERE PERMITTED)
- RESTRICTION OF PROCESSING
- DATA PORTABILITY
- OBJECTION
- WITHDRAWAL OF CONSENT (WHERE APPLICABLE)
TO SUBMIT A GDPR REQUEST (ACCESS, RECTIFICATION, PORTABILITY OR ERASURE OF DATA), VISIT OUR GDPR CENTRE OR EMAIL support@candelinas.com. YOU ALSO HAVE THE RIGHT TO LODGE A COMPLAINT WITH THE HELLENIC DATA PROTECTION AUTHORITY (HDPA) IF YOU CONSIDER THAT THE PROCESSING OF YOUR DATA INFRINGES THE GDPR.
10) CONTACT
FOR ANY QUESTION REGARDING THIS POLICY: support@candelinas.com.