Last updated: [May 15, 2026]
Version: 2.0
1. Data Controller
This Privacy Policy describes how the company JEWELS WORLD O.E. (hereinafter referred to as “JewelsWorld”, “we”, or “the Company”) collects, processes, and protects your personal data, in accordance with the General Data Protection Regulation (EU Regulation 2016/679 – “GDPR”) and Law No. 4624/2019.
Data Controller Contact Details:
- Company Name: JEWELS WORLD O.E.
- Headquarters: Athinon–Lavriou Avenue 8-10, Lavrio 19500, Greece
- VAT No.: 802565278 / Tax Office: KEFODE Attikis
- GEMI No.: 178697903000
- Phone: 211 222 5024
- Email: info@jewelsworld.gr
- Website: https://jewelsworld.gr
For any personal data protection matter, you can contact us at info@jewelsworld.gr with the subject line “Personal Data”.
JewelsWorld is not obliged to appoint a Data Protection Officer (DPO) according to Article 37 GDPR. The company’s legal representative coordinates data protection matters.
2. Scope of Application
This Policy applies to all personal data collected through the jewelsworld.gr website, as well as during any other communication or transaction you have with JewelsWorld (by phone, email, social media, at trade fairs, etc.).
Our online store is aimed exclusively at professional buyers (B2B) — retailers, wholesalers, and businesses. For this reason, we collect and process data concerning both the natural persons representing businesses and data of the businesses themselves.
3. What Data We Collect
3.1 Account Registration Data
- Name of business contact person
- Company name
- Contact phone number
- VAT No. and Tax Office (where applicable)
- Business address
- Field of activity / industry
- Social media details (in cases of alternative verification process for buyers without VAT No.)
- Password (stored as an encrypted hash)
3.2 Order Data
- Shipping and billing addresses
- Order and product history
- Shipping details (voucher number, delivery status)
- Order notes
3.3 Payment Data
Payment card details are not stored on our servers. Their processing is carried out directly by the certified payment service provider (Viva Wallet). We only collect the indications returned to us by the provider: transaction status, transaction ID, amount, date.
3.4 Communication Data
- Content of emails and messages you send us
- Conversations via live chat / chatbot
- Documents you send us for professional activity verification (e.g., business registration)
3.5 Technical Data
- IP address
- Browser type and version
- Operating system
- Pages visited and time spent
- Referrer URL
- Data from cookies (detailed in the Cookie Policy)
3.6 Marketing Data
- Communication preferences
- Consent for newsletters
- Interaction statistics with newsletters (opens, clicks)
4. Legal Bases for Processing
According to Article 6 GDPR, we process your personal data based on the following legal bases:
| Purpose of Processing | Legal Basis |
|---|---|
| Account creation and B2B suitability check | Performance of a contract / pre-contractual measures (Article 6.1.b) |
| Order processing and shipping | Performance of a contract (Article 6.1.b) |
| Issuance of documents and tax compliance | Legal obligation (Article 6.1.c) |
| Accounting obligations and record keeping | Legal obligation (Article 6.1.c) |
| Sending newsletters | Consent (Article 6.1.a) |
| Retargeted advertising / custom audiences | Consent (Article 6.1.a) |
| Website analytics statistics | Consent (Article 6.1.a) |
| Fraud prevention and website security | Legitimate interest (Article 6.1.f) |
| Improvement of services and products | Legitimate interest (Article 6.1.f) |
| Complaint management and legal claims | Legitimate interest / Legal obligation |
5. Recipients of Your Data
We never sell your personal data. We only transfer your data to the following categories of recipients, exclusively for the purposes described:
5.1 Payment Service Providers
- Viva Services S.A. (Viva Wallet / Viva.com) — card payment processing
5.2 Courier Companies
- Partner courier companies (ACS, Geniki Taxydromiki, ELTA Courier, etc.) — only the data required for delivery
5.3 IT and Marketing Service Providers
- Brevo (Sendinblue SAS, France) — sending email marketing and transactional emails
- Meta Platforms Ireland Ltd. — advertising, custom audiences, conversion tracking
- Google Ireland Ltd. — Google Analytics, Google Ads
- Cloudflare Inc. — website protection, anti-bot (Cloudflare Turnstile), CDN
- Tawk.to Ltd. — live chat and chatbot
- Website hosting provider
5.4 Accounting Services
- Partner external accounting firm for issuing and maintaining documents
5.5 Public Authorities
- AADE, law enforcement authorities, and competent supervisory authorities, where required by law
All the above partners are bound by a Data Processing Agreement and are obliged to implement appropriate technical and organizational security measures in accordance with Article 28 GDPR.
6. Data Transfer Outside the EEA
Some of our partners (Meta, Google, Cloudflare, Tawk.to) have infrastructure outside the European Economic Area (mainly in the USA). For these transfers, we rely on the following safeguards in accordance with Articles 45–46 GDPR:
- EU–US Data Privacy Framework for certified recipients in the USA
- Standard Contractual Clauses of the European Commission (Decision 2021/914)
- Additional technical and organizational measures (encryption, pseudonymization, minimum data scope)
You can request a copy of the relevant safeguards via email at info@jewelsworld.gr.
7. Retention Period
We retain your personal data only for as long as necessary for the purposes for which it was collected:
| Data Category | Retention Period |
|---|---|
| Active customer account data | As long as the account remains active |
| Inactive account data | Deletion after 3 years of inactivity |
| Order documents (invoices) | 10 years (Law 4308/2014, Tax Procedure Code) |
| Accounting records | 10 years (tax legislation) |
| Marketing / newsletter data | Until consent is withdrawn |
| Cookies | According to the Cookie Policy (session up to 2 years) |
| Abandoned cart data | 30 days |
| Email/chat communication | 2 years |
| Security / access logs | 12 months |
| Data for legal claims | Up to 5 years after the end of the relationship (prescription of Civil Code 250) |
After the expiry of the above periods, the data is securely deleted or anonymized.
8. Your Rights
In accordance with Articles 15–22 GDPR, you have the following rights:
- Right to information and access (Article 15) — To know what data we hold about you and to receive a copy.
- Right to rectification (Article 16) — To request the correction of inaccurate or incomplete data.
- Right to erasure (“right to be forgotten”) (Article 17) — To request the deletion of your data, subject to legal limitations (e.g., tax obligations).
- Right to restriction of processing (Article 18) — To request the restriction of processing in certain cases.
- Right to data portability (Article 20) — To receive your data in a structured, commonly used, and machine-readable format.
- Right to object (Article 21) — To object to processing based on legitimate interest or direct marketing.
- Right to withdraw consent (Article 7.3) — Where processing is based on consent, you can withdraw it at any time, without affecting the lawfulness of processing before withdrawal.
- Right not to be subject to automated decision-making (Article 22) — We do not make decisions that affect you solely through automated processing.
9. How to Exercise Your Rights
Send an email to info@jewelsworld.gr with the subject line “GDPR rights exercise”.
- Response time: We will respond within 30 calendar days of receipt. In exceptionally complex cases, the deadline may be extended by another 2 months, with prior notification to you.
- Fee: Exercising your rights is free of charge. For requests that are manifestly unfounded or excessive, we may impose a reasonable fee or refuse to act.
- Identification: For security reasons, we may ask you for identification details before fulfilling your request.
10. Right to Lodge a Complaint with the Supervisory Authority
If you believe that the processing of your data violates the GDPR, you have the right to lodge a complaint:
Hellenic Data Protection Authority (HDPA)
- Address: Kifisias Avenue 1-3, 11523 Athens
- Phone: +30 210 6475600
- Email: contact@dpa.gr
- Website: www.dpa.gr
11. Cookies and Similar Technologies
Our website uses cookies and similar technologies for operation, analysis, and advertising. Detailed information, the full list of cookies, and management options can be found in the separate Cookie Policy.
You can change your preferences at any time via the “Cookie Settings” link in the website footer.
12. Marketing and Newsletters
Newsletters are sent only after explicit consent (double opt-in process). You can withdraw your consent at any time:
- By clicking the “Unsubscribe” link at the end of each email
- By sending an email to info@jewelsworld.gr
13. Automated Decision-Making
We do not make decisions that affect you solely through automated processing (including profiling) within the meaning of Article 22 GDPR.
14. Minors
The website is intended exclusively for adult professionals. We do not knowingly collect personal data from minors. If we become aware that we have received data from a minor without parental/guardian consent, we will delete it immediately.
15. Data Security
We implement appropriate technical and organizational measures to protect your personal data:
- SSL/TLS encryption for all communication (HTTPS)
- Encrypted password storage (hashing)
- Role-based access control in the administrative system
- Regular backups
- Anti-bot protection (Cloudflare Turnstile)
- Staff training on data protection issues
- Regular review and management of security risks
In the event of a data breach that may pose a high risk to you, we will inform you without undue delay, in accordance with Article 34 GDPR.
16. Policy Amendments
We reserve the right to amend this Policy. Any amendment will be announced via the website, and the last updated date will be revised at the beginning of the document. In case of material changes, we will inform you by email where possible.
17. Contact
For any questions regarding this Policy or the processing of your data:
JEWELS WORLD O.E.
- Email: info@jewelsworld.gr (subject: “Personal Data”)
- Phone: 211 222 5024
- Address: Athinon–Lavriou Avenue 8-10, Lavrio 19500