Privacy Policy

Protecting the personal information of Novissimi visitors and customers is important to us.

This Privacy Policy explains what personal information we collect, why we use it, with whom it may be shared and the rights available to you under Regulation (EU) 2016/679, the General Data Protection Regulation ("GDPR"), and applicable Greek law.

1. Personal Data We May Collect

Depending on how you use our online store, we may process:

• full name,
• delivery and billing address,
• telephone number,
• email address,
• VAT number and invoicing information where an invoice is requested,
• order and purchase information,
• payment-related information communicated to us by payment providers,
• customer-service communications,
• information relating to returns, repairs or warranty claims,
• IP address,
• technical information relating to your device and browser,
• cookie and similar-technology information where permitted,
• other information voluntarily provided by you.

We do not store full bank-card details where those details are submitted directly to an independent payment-service provider.

2. Why We Process Personal Data

We process personal data only where there is an appropriate legal basis.

Performance of a Contract

We process your information for purposes including:

• receiving and processing orders,
• payment processing,
• shipping and delivery,
• order-related communications,
• returns,
• repairs,
• warranty-related services,
• customer support.

Legal Obligations

We may process and retain personal information where required by:

• tax and accounting legislation,
• consumer-protection legislation,
• obligations toward public authorities,
• other mandatory legal requirements.

Legitimate Interests

Where permitted, personal information may be processed for:

• security of the online store,
• fraud prevention,
• protection of our rights and property,
• management and improvement of the store,
• establishment, exercise or defence of legal claims.

Where we rely on legitimate interests, those interests are balanced against your rights and freedoms.

Consent

Where consent is legally required, including for certain cookies, analytics services or forms of electronic marketing, processing will take place only after the required consent has been obtained.

Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

3. Payments

Electronic payments may be handled through independent banks or payment-service providers.

Depending on the service, the relevant payment provider may process payment information as an independent controller or as a processor.

Novissimi receives only the information reasonably necessary to confirm and manage the transaction.

4. Couriers and Delivery

To fulfil an order, we may provide the relevant courier or transport provider with information strictly necessary for delivery, including:

• name,
• delivery address,
• telephone number,
• information necessary to complete the delivery.

Such providers process the information for the purpose of managing and completing delivery in accordance with their own legal obligations.

5. Service Providers

We may use third-party providers for services including:

• hosting and operation of the online store,
• payment processing,
• product delivery,
• accounting support,
• email and communications,
• technical support,
• security and fraud prevention,
• statistics and analytics,
• advertising services where the required consent has been obtained.

Only information reasonably necessary for the relevant service is made available to such providers.

6. Transfers Outside the EEA

Certain technology providers may process personal information outside the European Economic Area.

Where such a transfer takes place, appropriate safeguards required by the GDPR are used, such as an adequacy decision of the European Commission, approved Standard Contractual Clauses or another lawful transfer mechanism.

7. Data Retention

We do not retain personal information for longer than reasonably necessary for the purpose for which it was collected.

Information relating to orders, invoices and financial transactions is retained for the periods required by applicable tax, accounting and other legislation.

Information required in connection with warranties, returns or legal claims may be retained for the applicable legal period.

Where processing is based solely on consent, the relevant information will cease to be processed for that purpose following withdrawal of consent unless another lawful basis permits continued retention.

8. Cookies

The online store uses cookies and similar technologies.

Strictly Necessary Cookies

These may be used for functionality including:

• shopping cart operation,
• user login,
• security,
• checkout,
• storage of necessary preferences.

Consent is not required for cookies that are strictly necessary to provide a service requested by the user to the extent permitted by applicable law.

Analytics, Advertising and Other Non-Essential Cookies

Cookies or similar technologies used for analytics, personalisation, marketing or tracking are activated only in accordance with applicable legal requirements and, where required, after the user's consent has been obtained.

Users may modify their preferences through the website's cookie-management tool.

9. Marketing Communications

We may send updates or marketing communications only where permitted by applicable law.

Where consent is required, users may withdraw that consent at any time through the relevant unsubscribe link or by contacting us.

Opting out of marketing communications does not prevent communications necessary to process an order or another transaction.

10. Security

We implement appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, alteration or destruction.

However, no method of internet transmission or electronic storage can be considered completely secure, and absolute security against every possible incident cannot be guaranteed.

11. Personal Information on Returned Devices

Where a device is returned for repair, replacement, warranty service or other technical support, the customer should, where possible:

• create a backup,
• remove SIM cards and memory cards,
• sign out of personal accounts,
• remove personal information not required for technical inspection.

Where technical access to the device is necessary for repair, access will be limited to what is reasonably required for that purpose.

12. Your Rights

Subject to the conditions and limitations established by the GDPR and applicable legislation, you may have the right to:

• access your personal information,
• correct inaccurate information,
• request erasure,
• request restriction of processing,
• object to processing,
• receive certain information in a portable format,
• withdraw consent,
• not be subject to certain decisions based solely on automated processing where the applicable legal requirements are met.

To exercise your rights, you may contact Novissimi using the contact details made available on the website.

We may request reasonable information to verify the identity of the person making the request before fulfilling it.

13. Complaints to the Supervisory Authority

If you believe that the processing of your personal information breaches applicable data-protection legislation, you have the right to lodge a complaint with the Hellenic Data Protection Authority, without prejudice to any other administrative or judicial remedy available to you.

14. Minors

The online store is not specifically directed toward children, and we do not knowingly seek to collect personal information from minors without an appropriate legal basis or the required consent where applicable.

15. Changes to This Privacy Policy

This Privacy Policy may be updated to reflect changes in Novissimi's operations, the services we use or applicable legislation.

The current version will always be published on the website together with its latest revision date.

16. Contact

For questions concerning this Privacy Policy or the processing of personal information, you may contact Novissimi through the contact information made available on the website.