Privacy & Data Protection Policy

Last updated: June 2026

The company Galanos Doukas (hereinafter "DUK", "we", or "our"), based at Iasonos 10, Koridallos 181 20, Greece, VAT No.: 146848462, Tax Office: NIKAIAS and GEMI No.: 190293909000, is committed to protecting the personal data of visitors and customers of the website www.duk.gr.

This Privacy Policy explains how we collect, use, share, and protect your personal data, in accordance with the EU General Data Protection Regulation (GDPR) (2016/679).

1. What Data We Collect and Why

We only collect the data that is absolutely necessary to serve you:

• When Completing an Order (E-shop): We collect your name, shipping address, billing address, contact phone number, and email.
  Purpose: The execution of the sales contract, invoicing, and delivery of the products via courier/logistics company.
• Contact Form: We collect your name, email, and message.
  Purpose: To respond to your requests, questions, or custom commission inquiries.
• Newsletter Subscription (Marketing): We collect your email only if you explicitly choose (opt-in) to receive updates and exclusive collection announcements.
  Purpose: Keeping you informed about DUK creations.
• Cookies and Technical Data: We collect your IP address, browser type, and behavioral data via cookies (only if you give your consent in the cookie banner).
  Purpose: To optimize website browsing performance and user experience.

2. Legal Basis for Processing

We process your data based on the following legal bases:

• Performance of Contract: To prepare, craft, and send you the collectible design objects you purchased.
• Consent: To send promotional emails (newsletters) and use non-essential cookies.
• Legal Obligation: To issue receipts/invoices and comply with Greek and European tax legislation.

3. Who We Share Your Data With (Third Party Recipients)

We do not sell or rent your data. For the operation of the website and the delivery of orders, we share data strictly with:

• Courier / Transport Companies: We share your name, address, and telephone number with cooperating carrier and shipping companies exclusively for the transport and delivery of your items.
• Payment Providers: Your card details are not stored on our website. They are processed with complete security directly in the systems of partner banks / secure payment providers (e.g. Stripe, Viva Wallet, PayPal).
• Accounting Support: Invoicing details are transmitted to our external accountant for tax reporting and legal accounting purposes.

4. Data Retention Period

Order and invoicing data are retained for the period specified by Greek tax legislation (typically 10 years).

Newsletter subscription data is retained until you withdraw your consent (by clicking on the "Unsubscribe" link in any newsletter or contacting us).

Data from contact forms is retained for at least 6 months after the completion of our communication, to assist with future customer service inquiries.

5. Your Rights (Under GDPR)

You have the following rights regarding your personal data:

• Right of Access: To request details of the personal data we hold about you.
• Right of Rectification: To request the correction of incorrect or outdated data.
• Right to Erasure ("Right to be Forgotten"): To request the deletion of your data (provided there is no pending legal or tax obligation to retain it).
• Right to Portability: To receive your data in a structured, digital format.
• Right to Withdraw Consent: You can stop receiving marketing communications at any time.

To exercise any of these rights, please contact us via email at info@duk.gr.

6. Data Security

We implement modern SSL/HTTPS security protocols to encrypt your data during transfer across the website, ensuring that unauthorized third parties cannot intercept or read your private information.

7. Data Protection Authority

If you believe that the processing of your data violates GDPR regulations, you have the right to file a formal complaint with the Hellenic Data Protection Authority at www.dpa.gr.