Privacy Policy

  1. General Provisions
  • This Privacy Policy outlines the rules for collecting, processing and protecting personal data obtained through the website giftbubbles-eshop.com (hereinafter referred to as the “Website”).
  • Any personal data collected through the Website is processed in strict accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation or GDPR).
  • As the Data Controller, we take exceptional care to respect, safeguard and prioritise the privacy of all visitors and customers browsing or shopping on our Website.
  1. Types of Data Collected, Purposes, and Legal Basis

We collect and process personal information belonging to our users and shoppers (collectively referred to as “Clients”), which includes:

  • Individual Consumers: Everyday people purchasing party favours, school gifts or handmade items.
  • Sole Traders & Professionals: Individuals ordering gifts or supplies on behalf of their own business or professional activity.
  • Corporate Representatives: Individuals acting or placing orders on behalf of companies, schools or legal entities.
  1. Purposes, Data Types and Legal Bases for Processing
  • Purpose: To respond to your questions, custom gift requests or messages sent via our Website’s contact form.
  • Legal Basis: Article 6(1)(b) of the GDPR (processing is necessary to take steps at the request of the data subject prior to entering into a contract).
  • Data Collected: E-mail address, full name and phone number.
  1. Order Fulfillment and E-Commerce Purchases
  • Purpose: To process transactions, prepare your curated gift packs and ship physical orders to a location of your choice using courier services.
  • Legal Basis: Article 6(1)(b) of the GDPR (processing is necessary for the performance of a purchase contract).
  • Data Collected: Full name, billing address, shipping address, e-mail address and phone number.
  1. Website Administration, Security and Analytics
  • Purpose: To maintain IT security, prevent fraudulent activity, manage website traffic and continuously improve our e-shop layout and functionality.
  • Legal Basis: Article 6(1)(f) of the GDPR (processing is necessary for the purposes of the legitimate interests pursued by the Controller).
  • Data Collected: IP address (assigned computer or external internet service provider), domain name, web browser type, operating system type, access times and clickstream navigation data (links and references clicked on the Website).
  1. Recipients of Personal Data

6.1 Third-Party Service Providers: To run our e-shop effectively, we share necessary Client data with trusted external partners who operate under two categories:

  • Data Processors (Acting on our strict instructions): Hosting providers, accounting services, email marketing platforms and website traffic analytics tools.
  • Independent Controllers (Determining their own processing rules): Banks and electronic payment gateways (such as our payment partner, Alpha Bank) to securely process your transactions.

6.2 Data Location: Our service providers are based within Greece, Poland, and other countries of the European Economic Area (EEA), ensuring full compliance with European data protection standards.

6.3 Legal & State Authorities: We will disclose personal data to authorised public bodies (such as the Police, the Prosecutor’s Office or Hellenic Data Protection Authorities) only if required to do so by a binding legal obligation or court order.

  1. How Long We Keep Your Data

We only keep your personal information for as long as we genuinely need it to serve you and meet our legal duties:

  • Orders & Invoices: We keep your purchase details for as long as required by tax laws to maintain accurate business records.
  • Contact Messages: We keep your name and e-mail just long enough to fully resolve your inquiry or custom gift request.
  • Newsletters: We keep your e-mail address on our list only until you choose to click “unsubscribe.”
  1. Cookies and Technical Data

8.1 What are Cookies?

Our Website uses cookies, small text files saved on your device, to make your shopping experience smooth and seamless. They help us remember your shopping cart, let you log into your account and help us understand how visitors use our store.

8.2 Types of Cookies We Use:

  • Essential & Session Cookies: These are strictly necessary for the store to function (like keeping items in your basket) and are automatically deleted when you close your browser.
  • Analytical Cookies (First-Party): These help us gather anonymous statistics to see which pages are popular so we can improve our shop’s layout and content.
  • Third-Party Cookies: We embed a third-party Google Map on our contact page to help you find us, which may place cookies on your device managed by Google Inc.

8.3 Your Control

Cookies are perfectly safe for your device. You can easily restrict, block or delete cookies at any time through your web browser’s settings, though doing so may prevent certain parts of our shopping cart from working correctly.

 

  1. IP Addresses & Security

We may log your IP address dynamically when you visit. This data is used strictly for diagnostic server purposes, technical administration and to protect our e-shop from security threats or automated cyber-attacks.

  1. Your GDPR Rights & How to Exercise Them

10.1 Under European data protection laws, you hold complete control over your personal information. You can exercise any of the following rights at any time:

  • Right to Access & Copy: You can request a clear confirmation of whether we hold your data, along with a digital copy of your personal information (provided in a standard, machine-readable format like a CSV file).
  • Right to Rectification: You can ask us to quickly correct or complete any inaccurate personal details on your account.
  • Right to Erasure (“Right to Be Forgotten”): You can request that we permanently delete your data when it is no longer needed for your orders or if you withdraw your consent. (Note: We are legally required to retain basic invoicing and tax records to comply with national tax laws).
  • Right to Restrict or Object: You can object to our processing of your data, instantly opt out of any marketing e-mails or request that we temporarily freeze the use of your data while we investigate a concern.
  • Right to Withdraw Consent: If you gave us permission to use your e-mail (like subscribing to our newsletter), you can cancel that consent instantly at any time with no negative consequences.

10.2 How to make a request: To exercise your rights, simply email  info@giftbubbles-eshop.com. We will process and reply to your request completely free of charge within one month. If a request is exceptionally complex, we may extend this by up to two additional months, but we will always notify you within the first month to explain why.

10.3 Right to Lodge a Complaint: If you feel your data rights have been violated, you have the right to lodge an official complaint with the local supervisory authority. For Greece, this is the Hellenic Data Protection Authority (HDPA) at www.dpa.gr.

11. Changes to the Privacy Policy & Contact Info

  • Updates to this Policy: We may periodically update this Privacy Policy to reflect operational, legal or regulatory changes. When changes are made, we will update the “Last Modified” date at the bottom of this page. For significant modifications that alter how we handle your personal data, we will provide a prominent notice on our Website or notify you directly.
  • Contact Information: If you have any questions, concerns or requests regarding this Privacy Policy or how your data is handled, please reach out to us at info@giftbubbles-eshop.com

 

Date of Last Modification: 26 October 2026

Shopping Basket
Scroll to Top