The privacy of our customers' personal data and their protection is a priority for us. We want all our customers to feel safe when visiting our website wishesonline.gr with Marina Raptaki as the legal owner with a VAT number of 125588474 and Tax Office of Heraklion and to consider the implementation of data protection as a commitment of our company.

Please read this privacy policy carefully because it informs you of your rights and the way and scope of processing of personal data by our website wishesonline.gr, which has complied with the General Data Protection Regulation (GDPR 4624/2019  – General Data Protection Regulation).

You can access the text of the regulation by clicking on the link https://www.e-nomothesia.gr/kat-dedomena-prosopikou-kharaktera/nomos-4624-2019-phek-137a-29-8-2019.html . In order to meet the requirements of the Regulation regarding data and their processing, we have provided for the following:

Our website concerns the sale of gift products, children's shoes and wedding – baptism items as well as seasonal items. Transactions and browsing on our website are done with a secure server with SSL encryption protocol.  Users of the wishesonline.gr may be minors who have access to its services solely with the consent of their parents and / or guardians. Otherwise they must refrain from using the services. In case we find use of the website and the online store by minors, the personal data of minors will be deleted immediately and the sale will be considered invalid.

Provided Information & Products

The wishesonline.gr is committed to the accuracy, truth and completeness of the information provided in the online store, regarding the identity of our company and the transactions provided through the online store. Our company, in the context of good faith and business ethics, is not bound and is not responsible for electronic data entries made by error or by mistake during common use and is entitled to correct them whenever it becomes aware of their existence.

What is personal data and which of them do we collect?

"Personal data" means any information relating to an identified or identifiable natural person ("data subject"). Anonymous information is not understood as such.

Our website collects personal data a) when you subscribe to it, b) when you register to receive our newsletter, c) when you use / order our products and / or services, d) when you visit its pages and / or enter its promotional / advertising programs, e) when you participate in competitions. The personal information collected is the minimum mandatory for the completion of the above actions, which are identity data, contact data with you and / or your financial data. 
It is possible to collect and process the following types of personal data, such as information about your computer, your visits to our website and your activity, for the purpose of properly establishing the connection, the comfortable use of our website and the security of the system (eg IP address , date and time of access, type and version of its browser, operating system, pages you preferred, etc.), information you provide when completing its profile on the website or related applications such as social media and any other personal information it chooses to send to our website. Of course, they will only be used if the Law allows us to do so. 

We do not collect special categories of your personal data, i.e. data "revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, as well as genetic data, biometric data for the purpose of uniquely identifying a person, data concerning health or data concerning a natural person's sex life or sexual orientation". If you do not allow us to collect your personal data for the purposes stated here, we may not be able to provide you with our services in the best possible way.

How and why do we use your personal data?

When their use is necessary for the general performance of a contract to which you are a party, ie when you make a purchase from our online or physical store (sale, invoicing, shipping products, complaint management) and when their use is necessary to comply with our legal obligation, ie we archive them for accounting and tax purposes. We also use your personal data to administer our website, to provide third parties with statistical information about you, but without the recipients of this information being able to identify you, and  to keep the website and related applications secure and to avoid fraud.

Advertising - marketing

If you have given us your explicit consent and depending on the personal data you have provided us, we create your usage profile according to your personal interests and will send you advertising messages related to our activity (or for the activities of carefully selected third parties) via e-mail, SMS, Viber and so on. .   At any time you can stop receiving updates from us, either by using the corresponding unsubscribe link at the end of the message, or by contacting customer service at the call center, or by sending an e-mail to info@ wishesonline.gr

Newsletters

If you have given us your explicit consent and depending on the personal data you have provided us, we create your usage profile according to your personal interests and we will send you newsletters that will provide information about products, offers, competitions, etc. At any time you may stop receiving updates from us;  either by using  the corresponding unsubscribe link at the end of the newsletter, or by  contacting customer service at the call center, or by sending an e-mail to info@wishesonline.gr

Participation in competitions

You have the opportunity through our website or our newsletter or through our social media page to participate in competitions. The personal data you provide to us in the context of participating in a competition will be used exclusively for the purpose of carrying out the competition (e.g. announcing winners, notifying winners, sending a prize) and we will only process it for this purpose if you have given us your consent, which you can at any time with effect for the future;  either by contacting customer service at the call center, or by sending an e-mail to. The transfer to third parties  takes place only if this is required for the processing of the competition (e.g. sending the prize through a cooperating transport company). As a rule, further transmission to third parties is excluded. After the end of the competition and the announcement of the winners, the winners' data are kept for the duration of legal existence  warranty claims, to enable subsequent restoration or exchange in the event of a defect.

Use of cookies

Cookies are simply small pieces of code that record your movements while navigating our website and are divided into:

"Cookies" that are necessary for the recognition and/or retention of content entered by the subscriber or user during a connection to a website throughout the duration of that connection, e.g. when filling out an online form by the user or for registering the user's purchases in an online store (e.g. by selecting the "add to cart" button). The same category includes 'persistent' ( persistent) "cookies" that are installed for the same purpose and last for a few hours.
"Cookies" that are necessary for  the authentication  of the subscriber or user in services that require authentication (e.g. when making a banking transaction over the internet).
"Cookies" installed for the purpose of securing the subscriber or user, such as "cookies" that detect repeated failed attempts to log in to a user's account on a particular website.
"Cookies" with multimedia content, such as flash player "cookies", during a connection (session) to a website. Such are, for example, "cookies" that are installed by viewing a video on the website visited by the user. 
"Cookies" that are necessary to perform the technique of load balancing on a connection to an internet site.
"Cookies" that "remember" the choices of the subscriber or user regarding the presentation of the website (e.g. "cookies" concerning the choice of language or the presentation of search results on a website).
"Cookies" installed through plug-ins on social network websites and concern the sharing of content between certified members who have already logged in.
"Cookies" installed for advertising purposes and installed by the provider of the website  visited by the user (first party cookies), as well as for "cookies" installed by others (eg advertising networks) through the  provider of the website (third party   cookies). 
"Cookies" installed by others (e.g. advertising networks) through the provider of  the website (third party cookies) and are necessary for other purposes (e.g. market research and analysis, improvement of advertised products, etc.) and are not directly related to user identification.
Cookies" installed for the purpose of statistical analysis (web analytics)

By using our website, you must agree to what kind  of cookies you  allow us to place. By entering the main page of our website you are aware of a relevant note on the use  of cookies and the possibilities of disabling them or not.

 As a rule, the transmission of your data to third parties  is excluded

Exceptionally, data is processed by processors on our behalf. These are carefully selected each time, checked by us and contractually bound in accordance with Article 28 GDPR. In addition, we may be required to transmit extracts of your request to our counterparties (e.g. suppliers, for product requests) for the purpose of processing your request. These may be auditors and professional consultants (lawyers, accountants, bank) and/or companies involved in the transport of products;  professional  service providers,  such as marketing, advertising and web support, optimization and hosting companies, payment control services, the Cybercrime Prosecution, Consumer Protection services and online fraud prevention services, for cases of malicious use, social media if you choose to link your account to them with our website. If required on a standalone basis  In the event of the transmission of your personal data, we will inform you accordingly in order to obtain your consent. We do NOT transfer your personal data to recipients outside the European Union.

Payment information

Our website does not see your credit card number, if you choose this payment method, it keeps only the data necessary to certify each transaction with the following systems. We accept all Visa, Mastercard, American Express  and Diners credit cards.  If you have chosen credit card as a payment method, the process will be carried out and completed through our trusted partner – banking institution that provides all the security guarantees of electronic transactions. Credit card clearance is carried out through two different banking systems a) the Bank  ALPHA BANK and b) Masterpass electronic wallet  with  the redirect method  which ensures maximum transaction security.All  stages of the card charging process are PCI-DSS certified, the globally recognized – but now mandatory – standard for certification of electronic transactions. Ensuring the Confidentiality of Data Transfer. To ensure its confidentiality  Alpha e-Commerce uses the 128-bit encryption protocol (Secure Sockets Layer - SSL). According to this protocol, confidential data is stored only in encrypted form in its systems, without direct connection to the internet and is transferred encrypted to the cooperating Banks.
Access to Alpha Bank  and Masterpass systems  are controlled by Firewalls, which prohibit access to systems and databases with confidential data.

Security of your personal data

We have effectively implemented, both at the time of determining the means of processing and at the time of processing, appropriate technical and organizational measures, designed to implement data protection principles and incorporate the necessary safeguards into the processing in such a way as to meet the requirements of the GDPR  and protect your rights. We have also implemented appropriate technical and organisational measures to ensure that, by default, only personal data necessary for the respective purpose of processing are processed. We have active procedures in place to control a possible personal data breach and in such a case we will immediately inform you as well as the competent supervisory authority. 

How long do we keep your personal data?

The computers and programs used by our company are created in such a way as to minimize the use of personal and identification data. These data are processed only to the extent necessary to achieve the purposes mentioned in this Policy and will be stored for as long as is strictly necessary to achieve the specific purposes pursued. In any case, the criterion used to determine the storage period is based on compliance with the deadlines allowed by law and the principles of data minimization, storage limitation or rational management of our records.

Find out your rights under the GDPR

If you are a resident of the European Union, you have the following rights:
1. The right to information about how we use your personal data.
2. The right of access, i.e. you can request a copy of the personal data we hold about you.
3. The right to rectification, i.e. to correct your personal data, which may be incomplete or inaccurate. 4. The right to
erasure (right to "be forgotten"), i.e. in specific cases to ask us to delete your personal data we hold (unless there is a legal reason prohibiting it)
5.     The right to restrict processing of your personal data.
6. The right  to data portability, i.e. to request a copy of your personal data in a common file format and to transmit said data to another company.
7. The right to object to the processing of your personal data, e.g. for direct marketing purposes.
8. The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. 
9. The right to complain to the competent data protection supervisory authority in the Member State where you have your habitual residence or place of work.

The above rights are subject to specific regulations regarding when you can exercise them. You do not have to pay to access your personal data (or to exercise any of your rights), unless your request is unfounded, repetitive or excessive, in which case we may refuse to comply. Please note that we may ask for some additional information to confirm your identity when you request access to your rights or to exercise any of your other rights and this as a security measure that your personal data will not be disclosed to others. We will respond to each of your requests within one (1) month, if we need more time due to complexity or number of requests, we will inform you.

Intellectual Property

The entire website of this website, including photographs, images, texts, graphics, source code, databases, designs, news, illustrations, software,
applications,  services provided and all kinds of files and content, is the intellectual property of the company and / or  its licensors,
after the necessary permission it has received from them to be posted  on the website, and is governed by Greek, European and international provisions on intellectual property. 
Therefore, it is expressly forbidden to reproduce, republish, copy, store, sell, transmit, distribute, publish, execute, translate, modify in any way, in whole, in part or in summary without the prior written permission of the beneficiary / holder.  Exceptionally, the case of individual storage of a
single copy of part of the content of the website on a simple personal computer, only for personal and in no case for public or commercial use,
without affecting in any way the relevant intellectual and industrial property rights, is permitted. In this case, it is expressly forbidden to delete the indication of their origin. Also,  Any images or logos and distinctive features representing third parties, as
well as their products or services, are proprietary trademarks, protected by the relevant trademark laws. Their appearance should in no way be construed as a transfer and/or assignment of a license and/or right to use them.

This privacy policy was updated on December 08, 2022

Please check regularly for any modifications.

All payments made using the card are processed through the electronic payment platform "Nexi e-Commerce" and uses TLS 1.2 encryption protocol encryption with 128-bit encryption protocol (Secure Sockets Layer - SSL ). Encryption is a way of encoding information until it reaches its intended recipient, who will be able to decode it using the appropriate key.