Privacy Policy

1. Introduction

This Privacy Policy explains how Arkians Collectibles collects, uses, stores and protects personal data when you visit our website, create an account, place an order, contact us or otherwise use our services.

This Policy also explains how cookies, local storage and similar browser technologies are used on the website.

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Greek and European data protection legislation.

2. Who Is Responsible for Your Data?

Arkians Collectibles is the trading name used for this online store.

The data controller responsible for the processing of personal data through this website is:

Legal Name: ARKIANS MOBILE CENTERS E.E.

Trading name: Arkians Collectibles

Registered / business address: Karaoli kai Dimitriou 13, Perama, 188 63, Greece

Email: arkians.gr@gmail.com

Telephone / Viber: 2160023648

3. Personal Data We Collect

Depending on how you use the website, we may process the following categories of personal data:

Account information

• Email address.
• Account identifier and authentication information.
• Profile information that you choose to provide.

Order and delivery information

• Full name.
• Email address.
• Telephone number, where required for the order or delivery.
• Billing and shipping address.
• Products purchased, quantities and order value.
• Order status and transaction reference information.

Payment information

Payments are processed through Stripe Checkout. Payment card details are entered directly into Stripe's payment environment.

Arkians Collectibles does not receive or store your full payment card number or card security code. We may receive payment-related information such as payment status, transaction identifiers, amount paid and information necessary to associate a successful payment with your order.

Communications

If you contact us, we may process the information contained in your communication, including your name, email address, telephone number and the content of your message.

Technical information

When you use the website, certain technical information may be processed automatically by the website and its service providers, including IP address, browser or device information, authentication/session information and information necessary for security and the technical operation of the website.

4. Why We Use Your Personal Data

We process personal data only where there is an appropriate legal basis under applicable data protection law.

Performance of a contract

We process data where necessary to provide the services you request, including:

• Creating and managing your account.
• Processing your order.
• Processing payment.
• Arranging delivery.
• Providing order history and order-related services.
• Handling requests relating to purchases, returns or refunds.

Legal obligations

We may process and retain information where this is required to comply with applicable tax, accounting, consumer protection or other legal obligations.

Legitimate interests

We may process limited information where necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. These interests may include:

• Protecting the website and customer accounts.
• Detecting and preventing fraud or misuse.
• Maintaining the security and reliability of our services.
• Responding to customer enquiries and resolving disputes.

Consent

Where processing requires your consent, including the use of any non-essential cookies or similar technologies, we will request your consent before that processing takes place.

You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

5. Accounts and Supabase

Arkians Collectibles uses Supabase to provide parts of the website's backend infrastructure, including user authentication and database functionality.

Where you create an account, Supabase may process information necessary to authenticate and maintain that account, such as your email address, user identifier and authentication/session information.

Information connected with orders, customer accounts and order history may also be stored through our Supabase database infrastructure where required to provide those services.

Supabase acts as a technology service provider and processes data in accordance with its applicable contractual and data protection obligations.

6. Payments and Stripe

Online card payments are processed using Stripe Checkout.

When you proceed to payment, certain personal and transaction information necessary to complete and secure the payment is processed by Stripe.

Depending on the transaction, this may include information such as your name, email address, billing or shipping information, transaction amount and payment method information.

Stripe may process personal data for purposes including payment processing, fraud prevention, security and compliance with financial and regulatory obligations.

Your use of Stripe's payment services is also subject to Stripe's own privacy practices.

7. Cookies and Local Storage

This section forms our Cookie and Local Storage Policy. We do not maintain a separate Cookie Policy page.

Necessary storage

The website may use cookies, local storage, session storage or similar browser technologies where they are necessary for functions requested by the user or for the proper operation of the website.

These technologies may be used for purposes such as:

• Maintaining authentication and account sessions.
• Keeping products in your shopping cart.
• Maintaining your wishlist.
• Preserving website functionality or user selections.
• Supporting security and preventing misuse.

Where storage or access to information on your device is strictly necessary to provide a service that you have requested, consent is not required.

Optional cookies

Non-essential cookies or similar technologies, such as analytics, advertising or other optional tracking technologies, will not be used without obtaining any consent required by law.

You can choose “Accept all” or “Necessary only” in the cookie notice and change your choice at any time using “Cookie settings” in the footer. Your choice is stored locally in this browser. No optional analytics or advertising trackers are currently active.

If optional cookies or similar technologies are introduced in the future, users will be provided with appropriate information and controls before those technologies are activated where consent is required.

Browser controls

You can also remove cookies and local storage through your browser settings. Removing necessary browser data may cause features such as your account session, cart or wishlist to be reset or stop functioning correctly.

8. Who We Share Personal Data With

We do not sell your personal data.

Personal data may be disclosed only where necessary to operate the store, complete your order or comply with legal obligations. Recipients may include:

• Supabase, for authentication, database and backend infrastructure.
• Stripe and relevant payment service providers, for payment processing and fraud prevention.
• Delivery or courier providers, where information is necessary to deliver your order.
• Website hosting and technical service providers where required for the operation and security of the website.
• Accountants, professional advisers or other service providers where necessary for business or legal compliance.
• Public authorities, courts or law enforcement authorities where disclosure is required by law.

Service providers receive only the information necessary for the relevant purpose and are subject to the applicable legal and contractual data protection requirements.

9. International Data Transfers

Some technology or payment service providers used by Arkians Collectibles may process personal data outside the European Economic Area.

Where personal data is transferred internationally, such transfers are made using a lawful transfer mechanism where required, such as an adequacy decision, appropriate contractual safeguards or another mechanism permitted under applicable data protection law.

10. How Long We Keep Your Data

We retain personal data only for as long as necessary for the purposes for which it was collected and for any period required by applicable law.

In particular:

• Account information may be retained while your account remains active and for a reasonable period afterwards where necessary.
• Order, transaction and accounting records may be retained for the periods required by applicable tax, accounting and commercial legislation.
• Customer service communications may be retained for as long as necessary to respond to the request, resolve a dispute or protect legal rights.
• Information stored locally on your device may remain there until it expires, is removed by the website or is cleared through your browser.

When personal data is no longer required, it will be deleted, anonymised or otherwise handled in accordance with applicable law.

11. Your Data Protection Rights

Subject to the conditions provided by the GDPR, you may have the right to:

• Request access to your personal data.
• Request correction of inaccurate or incomplete personal data.
• Request deletion of your personal data.
• Request restriction of processing.
• Object to certain processing based on legitimate interests.
• Request data portability where applicable.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with a competent supervisory authority.

To exercise your rights, contact us at: arkians.gr@gmail.com

We may request information necessary to verify your identity before acting on a request.

12. Right to Complain

If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the competent data protection supervisory authority.

In Greece, the supervisory authority is the Hellenic Data Protection Authority (HDPA).

You may also contact us first at arkians.gr@gmail.com so that we can try to address your concern.

13. Security

We take reasonable technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, loss or destruction.

No method of transmission or electronic storage can, however, be guaranteed to be completely secure.

14. Automated Decision-Making

Arkians Collectibles does not use personal data to make decisions producing legal or similarly significant effects solely through automated processing.

Third-party payment and security providers may use automated systems for fraud prevention and security in accordance with their own legal obligations and privacy practices.

15. Children's Privacy

The website is not specifically directed at children and we do not knowingly request personal data from children for purposes unrelated to completing a lawful purchase or providing our services.

Where applicable law requires consent from a parent or guardian for a particular processing activity, such consent must be provided before that processing takes place.

16. Changes to This Privacy Policy

We may update this Privacy Policy where necessary to reflect changes to the website, our services, our data processing practices or applicable legal requirements.

The current version will be published on this page together with its latest revision date.

17. Contact

For questions about this Privacy Policy, the processing of your personal data or the exercise of your data protection rights, please contact:

Arkians Collectibles

Operated by: ARKIANS MOBILE CENTERS E.E.

Address: Karaoli kai Dimitriou 13, Perama, 1888 63, Greece

Email: arkians.gr@gmail.com

Telephone: 2160023648

VAT Number: 802688266

Tax Authority: E' Pireus

G.E.MI. Number: 180962508000