Privacy Policy and Personal Data Protection
Last updated: 18 August 2026
Protecting the personal data of Aristidou customers and website visitors is important to us.
This Privacy Policy explains what personal data we collect through the aristidou.gr online store, why we process it, who may receive it, how long it may be retained and the rights available to you in relation to your personal data.
Personal data is processed in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), Greek Law 4624/2019, Greek Law 3471/2006 where applicable and other applicable Greek and European data protection legislation.
1. Data Controller
The controller responsible for personal data processed through the online store is:
Legal name: ARISTEIDOU VIVLIOCHARTOPOLEIO KAI SIA L.P
Trading name: Aristidou
Address: 158 Korinthou Street, Patras 26223, Greece
Telephone: +30 2610 270 010
Email: aristidouprint@gmail.com
VAT Number:803119577
G.E.MI. Registration Number:190012316000
For any matter concerning the processing or protection of your personal data, you may contact us at aristidouprint@gmail.com.
2. Personal Data We Collect
Depending on how you use our online store, we may collect the following categories of personal data:
Identification data
Contact information
- email address
- telephone number
- shipping address
- billing address
Order and transaction information
- products ordered
- order number and date
- order value
- payment method
- shipping method
- order status
- return and refund information
Invoice information, where an invoice is requested, including information required under applicable tax legislation.
Customer account information, where you create an account with our online store.
Communications, including information you provide when contacting us by email, contact forms or available social media channels.
Technical information, which may include:
- IP address
- device type
- browser type and version
- operating system
- access date and time
- session information
- information concerning use of the online store
- cookies and similar identifiers
Marketing preferences, including your choice to receive or not receive promotional communications.
3. How We Collect Personal Data
We may collect personal data when you:
- place an order
- create a customer account
- contact us
- request information about a product or order
- request a return or refund
- subscribe to marketing communications or newsletters
- select your cookie preferences
- browse or use the online store
Certain technical information may be collected automatically through cookies and similar technologies when you visit the website.
4. Why We Process Personal Data
We process personal data only where an appropriate legal basis exists and for defined purposes.
Performance of a Contract
We process your information where necessary to:
- receive and process your order
- process payment
- prepare and dispatch products
- provide order status information
- manage returns and refunds
- provide customer support
- manage your customer account
This processing is necessary for the performance of our contract with you or in order to take steps at your request before entering into a contract.
Compliance With Legal Obligations
We may process information where necessary to comply with accounting, taxation or other legal obligations imposed on us.
Security and Legitimate Interests
Where permitted by law, personal data may be processed for our legitimate interests, including:
- protecting the online store
- preventing fraud and abusive transactions
- maintaining system security
- resolving technical problems
- providing customer service
- establishing, exercising or defending legal claims
- improving the operation and user experience of the online store
We rely on legitimate interests only where those interests are not overridden by your fundamental rights and freedoms.
Newsletters and Marketing
We may send news, offers, product updates or other promotional communications where we have obtained the required consent or where another lawful basis is available under applicable electronic communications legislation.
You may unsubscribe from promotional emails at any time through the unsubscribe option included in the relevant communication or by contacting us.
Unsubscribing from marketing communications does not prevent us from sending essential transactional communications concerning an active order, payment, shipment or request you have submitted.
5. Payments and Card Information
Electronic payments may be processed through independent payment service providers.
Full credit or debit card details are not stored by Aristidou through the online store system.
Payment information necessary to complete a card transaction is submitted to and processed by the applicable secure payment service provider in accordance with that provider's privacy practices and security requirements.
Aristidou receives only the information necessary to determine the status of the payment and fulfil the order.
6. Who May Receive Your Personal Data
We do not sell or rent our customers' personal data.
However, personal data may be disclosed where necessary for the operation of the online store, fulfilment of orders or compliance with legal obligations.
Recipients may include:
Ecwid / Lightspeed
Our online store uses the Ecwid/Lightspeed e-commerce platform for store operation and the processing of customer and order information.
Payment service providers
Where an electronic payment is made, necessary transaction information is processed by the applicable payment provider.
Courier and delivery companies
Necessary information such as your name, delivery address and telephone number may be provided for delivery purposes.
Accountants and professional advisers
Information may be made available where necessary for accounting, tax, legal or professional support.
Technology providers
We may use hosting, technical support, communications, email, analytics or other technology services necessary for the operation of the online store.
Public authorities
Information may be disclosed to tax authorities, courts, law enforcement bodies or other competent authorities where required by law or a binding lawful request.
Service providers receive only the information necessary for the relevant purpose.
7. Ecwid / Lightspeed
The Aristidou online store operates using the Ecwid by Lightspeed platform.
Through this platform, information relating to the following may be processed or stored:
- customers
- customer accounts
- shopping carts
- orders
- billing and shipping addresses
- technical information
- cookies and platform functionality
Ecwid/Lightspeed applies its own data protection terms and security measures in relation to the services it provides.
8. Cookies and Similar Technologies
Our online store uses cookies and similar technologies.
Cookies are small files or pieces of information stored on a user's device or browser and may be used for website functionality, preferences and other purposes.
The store may use several categories of cookies.
Strictly Necessary Cookies
These are necessary for fundamental functions of the online store, including:
- shopping cart functionality
- account login
- security
- checkout
- remembering essential user selections
Where provided by applicable law, consent is not required for cookies that are strictly necessary to provide the requested service.
Preference and Functionality Cookies
These cookies may remember certain choices and improve the functionality of the website.
Analytics Cookies
These may be used to measure website traffic and understand how the online store is used.
Marketing Cookies
Where relevant services are enabled and the required consent has been obtained, these cookies may be used to measure advertising activity or provide more relevant content.
Where consent is required, non-essential cookies are activated according to the user's choices.
You may review or change your choices at any time using the Cookie Settings function available on the online store.
9. Third-Party Services and Social Media
Our website may contain links or functionality connected to third-party services, including social media platforms.
If you contact us through a social media platform such as Instagram, we receive the information you choose to provide through that service.
The relevant platforms may also process personal data as independent data controllers in accordance with their own privacy policies.
10. International Data Transfers
Some technology providers or service partners may process personal data outside the European Economic Area.
Where such transfers take place, appropriate safeguards required by applicable data protection law are used, such as an adequacy decision of the European Commission, approved Standard Contractual Clauses or another lawful transfer mechanism.
11. Data Retention
We do not retain personal data for longer than is necessary for the purpose for which it was collected.
In particular:
Order and invoice information is retained for the period required under applicable tax, accounting and other legal requirements.
Customer account information may be retained while the account remains active and for any additional period required for legitimate or statutory purposes.
Customer communications are retained for as long as required to respond to the request and, where necessary, for a reasonable period afterwards for transaction support or legal claims.
Marketing information is retained until consent is withdrawn or an objection is made, except where certain information must be retained to record an unsubscribe request and prevent further marketing communications.
Cookies are retained for periods appropriate to the purpose and type of each cookie.
After the applicable retention period, information is deleted or anonymised unless further retention is required by law.
12. Data Security
We use appropriate technical and organisational measures designed to protect personal data against:
- unauthorised access
- unlawful use
- alteration
- loss
- destruction
- unauthorised disclosure
The online store uses secure connections and technology providers that implement security measures appropriate to the services they provide.
However, no information system or transmission of information over the internet can be guaranteed to be completely risk-free.
13. Your Data Protection Rights
Subject to the conditions set out in the GDPR and applicable law, you may have the following rights:
Right of access
You may request confirmation as to whether we process personal data concerning you and obtain access to that information.
Right to rectification
You may request correction of inaccurate information or completion of incomplete information.
Right to erasure
You may request deletion of your personal data where the applicable legal requirements are met.
Right to restriction of processing
You may request that the processing of your personal data be restricted in certain circumstances.
Right to data portability
Where the legal requirements apply, you may receive personal data you have provided to us in a structured, commonly used and machine-readable format or request its transfer to another controller.
Right to object
You may object to certain processing based on legitimate interests and you have the right to object to the processing of your personal data for direct marketing purposes.
Right to withdraw consent
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
These rights may be subject to limitations and exceptions under applicable law. For example, information that must be retained to comply with taxation or other legal requirements cannot always be deleted immediately.
14. Exercising Your Rights
To exercise any of your data protection rights, please contact us at:
Email: aristidouprint@gmail.com
Telephone: +30 2610 270 010
Address: 158 Korinthou Street, Patras 26223, Greece
To protect your information, we may request additional information solely to verify your identity before responding to a request.
Requests will be handled within the time limits and procedures required by applicable law.
15. Right to Lodge a Complaint
If you believe that your personal data has been processed in breach of applicable data protection law, you have the right to lodge a complaint with the:
Hellenic Data Protection Authority
Your right to submit a complaint does not prevent you from contacting Aristidou first so that we may investigate and attempt to resolve your concern.
16. Automated Decision-Making
Aristidou does not use customer personal data to make decisions based solely on automated processing that produce legal or similarly significant effects for customers.
Independent service providers, such as payment providers, may use automated security or fraud-prevention systems in accordance with their own privacy policies and applicable law.
17. Changes to This Privacy Policy
We may update this Privacy Policy where necessary as a result of changes to:
- applicable law
- online store services
- service providers
- technologies
- our personal data processing practices
The current version will always be published on this page together with the date on which it was last updated.
We recommend reviewing this page periodically for any changes.
18. Contact
For questions concerning this Privacy Policy or the processing of your personal data, please contact:
Aristidou
158 Korinthou Street
Patras 26223
Greece
Telephone: +302610270010
Email: aristidouprint@gmail.com