Privacy Policy - Personal Data Protection Policy

Last updated: 20-3-2026

Our sole proprietorship, fully complying with the General Data Protection Regulation (EU) 2016/679 and Law 4624/2019, has formulated this privacy policy / personal data protection policy in a manner compatible and compliant with both the aforementioned EU legislation and Greek law.

The protection of the personal data of visitors and customers of the Kefi Skin website is a key priority for our business. This Privacy Policy describes how personal data is collected, used, and protected during visits to and use of the website.

Kefi Skin complies with the decisions of the Hellenic Data Protection Authority and commits to adhering to them in their entirety.

The processing of personal data is carried out in accordance with the General Data Protection Regulation (GDPR) as well as the applicable Greek and European legislation on personal data protection.

In order to provide you with the best possible and high-quality services, Kefi Skin may collect and process personal data, only upon your explicit consent and after you have been fully informed about your rights, as provided by Regulation (EU) 2016/679 (GDPR) and the applicable Greek legislation on personal data protection (Law 4624/2019).

The primary concern of Kefi Skin is to provide high-level services with absolute respect for the rights and fundamental freedoms of users, their privacy, as well as the confidentiality of their communications. For this purpose, all necessary technical and organizational security measures are taken, in accordance with the applicable legal framework, utilizing modern technological procedures, advanced technical equipment, and appropriate software.

By using the website, the user accepts the terms of this Privacy Policy.

1. Data Controller

The sole proprietorship under the trade name Kefi Skin, complying with the provisions of the General Data Protection Regulation and the respective applicable Greek legislation as the Data Controller, prioritizes the security of your personal data through our compliance with National and European Legislation and with Regulation (EU) No. 679/2016 (GDPR). Through our privacy policy, we inform you, on the one hand, about our business practices regarding the processing of your personal data and, on the other hand, about the rights you have as data subjects. In this way, you will be able to provide us with your explicit consent for the collection and processing of your personal data whenever requested, which you can revoke or modify at any time.

The Kefi Skin website operates as an online store (e-shop) for the sale of dermocosmetic care products belonging to the sole proprietorship under the trade name Kefi Skin.

The Data Controller for the personal data is:

Kefi Skin

Address: 3 Mavili Str.

Contact Email: info.kefiskin@gmail.com

Telephone: 6977431717

For issues related to the protection of personal data, you may communicate via email at: info.kefiskin@gmail.com

2. Method of Personal Data Collection

According to Regulation (EU) No. 679/2016 (GDPR), personal data consists of information that can be used to identify an individual's identity. The collection of your personal data aims to provide you with better service. The methods of collecting your personal data consist of the following:

1. Cookies,
2. Order form,
3. Account creation form,
4. Contact form,
5. Communication by any means.

We are not entitled to, and we do not engage in, any collection and management of your personal data that is not linked to the fulfillment of our electronic website's operation regarding the provision of services to you. Your personal data is retained only for the period required to fulfill the processing purpose for which it was collected, unless you revoke your relevant consent earlier.

3. Personal Data Collected

Through one of the aforementioned methods, we collect information that is necessary for the proper functioning and improvement of our website. In particular, we collect information such as your full name, your Tax Registration Number (AFM), your e-mail, your IP Address, your postal address, your telephone number, your age, your preferences, etc. The above information, as well as other data related to it, is necessary as it helps us identify you as a customer (profiling), process and implement your order, inform you about our offers, manage your payments, process your purchasing profile to identify what interests you and how we can improve our products and services, send you newsletters, conduct statistical analyses, etc.

Profiling is the process of collecting and processing your personal data, based on which your profile is prepared in order to offer you products related to your interests and preferences. Your consent is required to start the profiling process.

4. Storage Duration of Your Personal Data

Our business stores your personal data for the period permitted by law and only for as long as required for the purposes of processing the personal data, and in any case for a period not exceeding one year from the moment you give your consent for its collection. Finally, in the event of a legal dispute, your personal data may remain stored until the pending litigation is fully concluded.

5. Processing of Your Personal Data

The processing of your personal data is based on entering into a contract with you, on our compliance with our legal obligations, on defending our legitimate interests, on fulfilling our obligations toward the public interest, or finally on your prior consent. In the latter case, you can revoke your consent, whereupon the processing of your personal data will cease for the future, without, of course, affecting the lawfulness of the processing up to that point. Your revocation of consent must be sent to us via electronic mail (e-mail).

Our business collects, retains, and processes your personal data only when you yourself voluntarily provide it to us, for the following purposes:

1. For managing you as a registered customer and offering a personalized experience on our websites, in the event that you have created an Account.
2. For completing orders and product sales contracts through our online store.
3. For Customer Service regarding orders.
4. For communicating with users and resolving any disputes.
5. For providing customer services, such as providing offers and informational e-mails, and updating users on promotional activities and new products, in the event of your subscription to our business's newsletter.
6. For gathering information on how visitors use our website, with the aim of continuously improving it.
7. For research and statistical purposes concerning the operation of our website.

6. Security of Your Personal Data

Within the framework of personal data protection, our business regularly reviews the necessity of retaining your personal data and deletes data that it considers no longer useful or absolutely necessary for processing purposes. Our business is committed to ensuring the security and integrity of the data it collects regarding the users of its website, and for this reason, it takes the necessary measures to protect the personal data that you, the users, provide in any manner. These measures protect user data from any unauthorized access or disclosure, loss or misuse, and alteration or destruction. Specifically, we protect the security of your information using software that encrypts and anonymizes the information you enter.

7. Transmission of Personal Data

We commit not to disclose information about our customers to third parties, except where required. This will occur when it is necessary for processing your order, namely during the sale and delivery of our products to you, when conducting credit and security checks, during payment processing, when creating customer account files upon your consent, and finally where required by law. The disclosure of personal data aims at the security and protection of our business, as well as your own. Furthermore, no third party is allowed to use the said personal data for purposes other than those necessary for the execution of their work.

8. Rights of the Data Subjects

Under EU Regulation 2016/679, you have the right of confirmation, which can be exercised at any time, as to whether or not your personal data is being processed; extraction, where we provide you with the personal data you provided to us; information (Articles 12-13-14); withdrawal of your consent (Article 7); access (Article 15); rectification (Article 16); erasure (Article 17); restriction of processing (Article 18); notification regarding rectification or erasure of personal data or restriction of processing (Article 19); the right to object to the processing of personal data concerning you (Article 6 par. 1 points e, f, and Article 89 par. 1); data portability (Article 20); and lodging a complaint with a supervisory authority (Article 77).

Finally, decisions taken solely on the basis of automated processing, including profiling, which produce legal effects concerning you or significantly affect you in a similar way, are not binding upon you unless they are necessary for entering into or executing a contract, are permitted by EU or national law, or are based on your explicit consent. In any case, our business takes appropriate measures to safeguard your rights.

In the event that you exercise any of your aforementioned rights, the business will take every possible measure to promptly satisfy your request, as specifically defined and under the conditions of the Personal Data Legislation, informing you in writing about the satisfaction of your request, or the reasons preventing your exercise or satisfaction of one or more of the aforementioned rights under the Personal Data Legislation.

You can exercise your aforementioned rights via a request sent to our business's email address info.kefiskin@gmail.com. The period for completing each request is 30 days, and an extension may occur following relevant notification to you.

9. E-SHOP

You have the option to choose to place an online order as a simple guest-customer. In this case, your personal data will be kept in the archive of our online store until the completion of your order, with the sole exception of transaction data which will be retained for as long as provided for by the applicable tax legislation and for as long as required for the execution of the sales contract.

10. Links, Hyperlinks & Banners

We inform you that the website may contain links to other websites. This Policy does not apply to data collected through any other website or to the practices of businesses that we do not control. We are not responsible for the personal data management terms of third-party websites and recommend that you read the Privacy Policy of every website you visit.

11. Children's Privacy

We do not knowingly process any information from any person under the age of 18 without consent from a guardian. Our website is addressed exclusively to individuals who are over 18 years old. If you are under 18, do not use or provide any information on this website. If we discover that we have collected or received personal data from a child under 18 without explicit consent or authorization from the child's guardian, we will delete this information.

12. Security Statement

Although we follow the necessary procedures to ensure the security of your personal data, we cannot overlook the fact that transmission over the internet is not entirely secure. Therefore, we commit to the best possible protection of your data, the transmission of which takes place at your own risk. The processor may ask you to provide additional data to identify you and may refuse to perform the requested action if they cannot identify you in a reliable manner.

By providing your personal data in any of the aforementioned ways, you consent to its processing by our business, by our third-party partners (where required and as mentioned above), or by whomever we designate as the data controller.

The privacy policy / personal data protection policy may be modified, in which case it will be posted in its modified form on our website. For this reason, we encourage you to monitor the website accordingly to become aware of any potential modifications.

For everything regulated by the privacy policy / personal data protection policy of our website, as well as for anything not regulated herein, Reg. (EU) 2016/679 and Law 4624/2019 shall apply. The courts of Thessaloniki shall have exclusive jurisdiction.

13. Right to Lodge a Complaint

According to Regulation No. 679/2016, you have the right, if you consider that your rights regarding the protection of your personal data are being violated, to lodge a relevant complaint with the Hellenic Data Protection Authority.

If you have any questions regarding the protection of your personal data or wish to exercise your legal rights, please contact the Data Protection Officer of the business by sending a relevant email to info.kefiskin@gmail.com.