PRIVACY POLICY
Last updated: 30/10/2026
1. Introduction
OFILIA’S respects your privacy and is committed to protecting your personal data in accordance with applicable data protection legislation, including Regulation (EU) 2016/679 (General Data Protection Regulation — GDPR) and applicable Greek legislation.
This Privacy Policy explains how we collect, use, disclose and protect personal data when you visit our website, place an order, contact us or interact with our services.
2. Data Controller
The data controller responsible for processing your personal data is
-
Legal business name: FILIO KORDONI
-
Trading name: OFILIA’S
-
Registered address: Georgiou Papandreou 87, Goudi, Zografou, Greece
-
VAT number: 070937873
-
GEMI number: 128819703000
-
Email: info@ofilias.com
-
Telephone: +30 2155051280
3. Personal Data We Collect
Depending on how you use our website, we may process the following categories of personal data:
Identification and contact data
-
Name and surname.
-
Email address and telephone number.
-
Delivery and billing addresses.
Order and transaction data
-
Products ordered, quantities and order history.
-
Delivery status, returns and refund information.
-
Billing and transaction records.
Payment data
Payments may be handled by third-party payment providers. The payment information we can access depends on the payment method and provider.
Account data
Where customer accounts are available, we may process account details, login-related information and saved preferences.
Customer communications
Information you provide when contacting us about products, orders, returns or other enquiries.
Technical and usage data
Where collected, this may include IP address, browser and device information, website interactions, cookie identifiers and information about how visitors use our website.
Marketing preferences
Newsletter subscription status, communication preferences and records of consent or opt-out requests, where applicable.
4. How and Why We Use Your Personal Data
We process personal data only where an applicable legal basis exists.
Order management and fulfilment
We use contact, order and delivery information to process purchases, arrange delivery, manage returns and refunds, and communicate with customers.
Legal basis: performance of a contract or taking steps at the customer’s request before entering into a contract.
Payments, invoicing and accounting
We process relevant transaction information to administer payments, issue invoices and comply with tax, accounting and other legal requirements.
Legal basis: performance of a contract and compliance with legal obligations.
Customer service
We use information provided by customers to respond to enquiries, resolve complaints and assist with orders.
Legal basis: performance of a contract, pre-contractual measures, legal obligations or legitimate interests, depending on the circumstances.
Website security and maintenance
We may process technical information to maintain website security, prevent fraud, troubleshoot errors and protect our services.
Legal basis: legitimate interests or compliance with legal obligations, where applicable.
Analytics and website improvement
Where implemented, analytics tools may help us understand website traffic, visitor interactions and performance.
Where consent is required, these technologies will be activated only in accordance with the applicable consent requirements and your choices.
Advertising and remarketing
Where implemented, advertising technologies such as Google Ads or Meta may be used to measure campaigns, create relevant audiences or deliver advertising.
Non-essential advertising tracking will be activated only where the required consent has been obtained. You can manage or withdraw consent through our cookie settings.
Newsletter and direct marketing
We may send promotional communications where permitted by applicable law and where any required consent or other legal conditions have been satisfied.
You may unsubscribe at any time using the unsubscribe link in the message or by contacting us.
Legal claims and compliance
We may process relevant information to establish, exercise or defend legal claims and comply with lawful requests.
Legal basis: legitimate interests or compliance with legal obligations, as applicable.
5. Whether You Must Provide Personal Data
Certain information is necessary to process an order, complete delivery, issue required documentation or respond to your request.
If you do not provide information necessary for these purposes, we may be unable to fulfil your order or provide the requested service.
Where information is optional, we will indicate this where appropriate.
6. Cookies and Similar Technologies
Our website may use cookies and similar technologies for essential functionality, preference management, analytics and advertising.
Non-essential technologies will be used in accordance with applicable consent requirements.
For further details, please read our Cookie Policy. You may change your preferences through the cookie settings available on our website.
7. Recipients of Personal Data
Depending on the services actually used, we may share relevant personal data with:
-
Website hosting and technical service providers.
-
E-commerce and website platform providers.
-
Payment processors and financial institutions.
-
Courier and delivery companies.
-
Accounting and professional advisers.
-
Customer support and order management providers.
-
Email and newsletter service providers.
-
Analytics and advertising providers, including Google and Meta, where these services are implemented.
-
Public authorities, courts or other recipients where disclosure is required by law.
Service providers receive only the information necessary for their relevant tasks, subject to applicable legal and contractual requirements.
We do not sell personal data.
8. International Data Transfers
Some service providers may process personal data outside the European Economic Area.
Where personal data is transferred internationally, we will ensure that the transfer complies with applicable data protection law and that appropriate safeguards are in place where required.
Further information about applicable safeguards may be requested using the contact details in Section 2.
9. Data Retention
We retain personal data only for as long as necessary for the relevant purposes and in accordance with applicable legal requirements.
-
Order and transaction records: for the periods required by applicable tax, accounting and other laws.
-
Customer account data: for as long as the account remains active and for any additional period required for legitimate or legal purposes.
-
Customer service communications: for the period necessary to resolve the enquiry and address related claims.
-
Newsletter data: until the user unsubscribes or consent is withdrawn, subject to applicable legal obligations and the need to retain minimal suppression records.
-
Cookie and consent records: for the period appropriate to the relevant technology, consent management and legal requirements.
10. Your Rights
Subject to the conditions and limitations set out in applicable law, you may have the right to:
-
Access your personal data.
-
Request correction of inaccurate or incomplete data.
-
Request erasure of personal data where the legal conditions are met.
-
Request restriction of processing.
-
Object to processing based on legitimate interests.
-
Request data portability where applicable.
-
Withdraw consent at any time where processing is based on consent.
-
Object to direct marketing at any time.
-
Lodge a complaint with a competent supervisory authority.
To exercise your rights, contact us at info@ofilias.com
We may need to verify your identity before responding. We will respond within the time limits prescribed by applicable law.
You may contact the Hellenic Data Protection Authority through its official website: https://www.dpa.gr
11. Security
We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, disclosure or destruction.
Access to personal data is restricted where appropriate to authorised persons and service providers.
No method of transmission or electronic storage can be guaranteed to be completely secure.
12. Children’s Privacy
Our online store is not specifically directed at children. We do not knowingly collect personal data from children in circumstances where such collection is prohibited by applicable law.
If you believe that personal data has been collected unlawfully from a child, please contact us so that we can assess the matter.
13. Third-Party Websites
Our website may contain links to third-party websites or services. Their privacy practices are governed by their own policies, and we encourage you to review those policies before providing personal data.
14. Changes to This Policy
We may update this Privacy Policy to reflect changes in our services, data processing activities or legal obligations.
The updated version will be published on this page with the relevant revision date.
15. Contact Us
For questions or requests concerning personal data, contact:
OFILIA’S
FILIO KORDONI
Georgiou Papandreou 87, Goudi, Zografou, Greece