Privacy Policy
Last Updated: 11 December 2025
This Privacy Policy aims to inform you about the procedures we follow to maintain and process your personal data. This follows the content of the provisions of the General Data Protection Regulation (GDPR 2016/679), any more specific national and European legislation for certain sectors, the currently applicable Greek legislation for the protection of personal data, as well as for the protection of personal data and privacy in the field of electronic communications (Law 3471/2006, as applicable) and the decisions of the Personal Data Protection Authority (PDPA).
Who we are?
The website “www.maravelspili.gr” is an online store selling products via the Internet created by the company “STEFANOS GEOR. MARAVELAKIS” based in Spili, Municipality of Agios Vasilios, P.C. 74053, Rethymno, Crete, with VAT number 113603602, Tax Office of Rethymno and AR GEMI: 022115050000, contact email address info@maravelspili.gr.
The user can contact the controller of personal data via the contact form or by email info@maravelspili.gr.
What is personal data?
Personal data is information relating to an identified or identifiable individual. Different information which, if collected together, can lead to the identification of a specific individual, also constitutes personal data.
What personal data do we collect and why?
As you visit our website, we collect data for the following purposes:
- Products you have viewed: We will use this to show you the products you have recently viewed or added to your wishlist.
- Location, IP address and browser type: We will use this for purposes such as calculating VAT and shipping costs.
- Shipping address: We will ask you to enter this address so that we can, for example, estimate shipping costs before you place an order and also to ship your order to you!
When you make a purchase from our online store, we will ask you to provide information such as your name, billing address, shipping address, email address, phone number, credit card/payment details via redirection to a secure Eurobank site as well as optional account information such as username and password. We will use this information for purposes such as:
- Send you information about your account and order.
- Respond to your requests, including returns and complaints.
- Process payments.
- Set up your account for our store.
- Comply with our legal obligations, such as issuing tax invoices.
- Improve our store offerings.
- Send you promotional messages, if you choose to receive them.
- If you create an account, we will store your name, address, email, and phone number, which will be used for your future orders.
Cookies
If you have an account and log in to the website, we will create a temporary cookie to determine whether your browser accepts cookies. The cookie does not contain personal information and will be deleted once you close your browser. When you log in, we will also create various cookies to store your login information and screen options. Login cookies last for two days and screen options cookies last for one year. If you select “Remember me”, your login will remain for two weeks. If you log out of your account, the login cookies will be removed.
For more information about the Cookie policy, please refer to the Cookie Policy on our page or click HERE.
Contact forms
When filling out a contact form on the website https://www. maravelspili.gr, the visitor states his email and the message he wants to send. After submission, the above information can be viewed / modified at any time and free of charge upon communication of a relevant request to the company.
Who on our team has access
Both platform administrators and our online store employees have access to:
- Order details such as what was purchased, when it was purchased and where it should be shipped, as well as
- Customer information such as name, email address, and billing and shipping information.
- Our team members have access to this information to help fulfill orders, process returns, and support you.
Any supporting documentation and documents certifying and declaring the customer’s identity remain strictly confidential and are only checked by the responsible employee. The voluntary provision of personal data means that there is a voluntary element of processing by the responsible employee and for the purposes mentioned above.
Who do we share your data with?
The company maravelspili.gr shares the strictly necessary personal data (order recipient details, shipping address and contact phone number) with the cooperating courier companies Taxydema and UPS in order to carry out the storage and shipping process chosen by the customer.
The company maravelspili.gr does not share personal data with any third party without your consent except in cases imposed by Greek and European legislation.
How long do we keep your data
For users who register on our website, we also store the personal data they enter in their user profile. All users can view, edit or delete their personal data at any time (except for being able to change their username). The administrators of this website may also view and edit this information.
Personal data is retained for as long as necessary to serve the purposes for which it was collected, subject to specific provisions of law requiring data retention for a longer period.
Unsubscribing from the newsletter list will not result in the deletion of all personal data.
What rights do you have over your data?
In brief, these rights are as follows (further explained in the relevant sections):
- Right to information and transparency (Articles 12-14 GDPR): This is the right to know who is processing your data, what it is and why. Organisations processing your data must provide you with clear information in plain language.
- Right of access of the data subject (Article 15 GDPR): You have the right to request free access to your personal data held by an organisation.
- Right to rectification (Article 16 GDPR): You have the right to request the rectification of inaccurate personal data and the completion of incomplete data.
- Right to erasure (‘right to be forgotten’) (Article 17 GDPR): You have the right to request the erasure of your personal data, under certain conditions, such as when the data is no longer necessary, you have withdrawn your consent, the data has been unlawfully processed, etc. Under this right, you have the possibility, under certain conditions, to request the erasure of your personal data from a search engine results list.
- Right to restriction of processing (Article 18 GDPR): You have the right to request the restriction of the processing of your personal data when their accuracy is contested, the processing is unlawful, the data are no longer needed by the controller, you object to automated processing.
- Right to data portability (Article 20 GDPR): You have the right to request the transfer of your data to another controller.
- Right to object (Article 21 GDPR): You have the right to object to the processing of your personal data by an organisation, provided that the public interest is not affected.
- Right to non-automated individual decision-making, including profiling (Article 22 GDPR): You have the right to object when a decision concerning you is based solely on automated processing, including profiling, and this decision produces legal effects or significantly affects you.
- Right to lodge a complaint with the Personal Data Protection Authority.
Children's data
The processing of personal data concerning minors is carried out under the strict condition of the prior consent of the parents or those exercising parental responsibility, in accordance with the specific provisions of the applicable legislation.
Special categories of data
The Company does not process personal data of its customers that reveal racial or ethnic origin, political opinions, religious or philosophical beliefs or membership in a trade union, nor genetic or biometric data for the purpose of identifying the customer or data concerning the customer’s health or sex life or sexual orientation.
How we protect your data?
The Company has taken appropriate technical and organizational measures to ensure confidentiality and for the lawful maintenance, processing, protection and safekeeping of its customers’ personal data from any unlawful or unlawful processing, accidental or unlawful destruction, loss, alteration, prohibited dissemination or access, as specifically provided for in applicable legislation. As part of this effort, strong cryptography is used when transmitting the information you provide to us.
The server that hosts our website is located in a secure location in Greece. In collaboration with the website hosting company, we have 24-hour monitoring for any problem that may arise.
The above measures are reviewed and updated whenever necessary in order to ensure that the personal data of website users is not compromised.
What procedures have we adopted for data breaches?
In the event of a breach, all data relating to the malicious act is initially collected and then handed over to the competent authorities. At the same time, the breach is stopped by technical means, the data subjects affected by the breach are informed and the size and scope of the breach is checked so that it is properly recorded. All facilities are also provided to the competent authorities under the Law for the investigation of incidents of breach of the confidentiality of communications and personal data.
Our company is not obliged to appoint a Data Protection Officer (DPO) under articles 37-40 of the GDPR.
Revision of the privacy policy
In the context of improving the services and products provided, the company maravelspili.gr updates and improves its website and will therefore also renew this privacy policy. Therefore, it is necessary for users of the website to read this regularly in order to be informed of the changes that have occurred regarding the protection of personal data.
This policy will be modified whenever necessary without prior notice to users.
Acceptance of the Privacy Policy
The user of the website maravelspili.gr accepts and consents to this Privacy Statement, the Cookies Policy as well as the Terms of Use of the website that have been announced through it.
