Privacy Policy
Effective Date: 1 August 2026
Last Updated: 1 August 2026
Document Version: 1.0
Table of Contents
- Introduction
- Who We Are
- Personal Data We Collect
- How We Collect Your Data
- Why We Process Your Data
- Legal Basis for Processing
- Sharing Your Personal Data
- Data Retention
- Your Rights
- Cookies & Tracking Technologies
- Data Security
- International Transfers
- Children’s Privacy
- Changes to this Privacy Policy
- Contact Information
1. Introduction
At Konstantinos Ar. Gerontis Jewellery, we recognise that your privacy is important.
We are committed to protecting your personal information and processing it fairly, transparently and securely in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and all applicable Greek legislation.
This Privacy Policy explains what personal data we collect, why we collect it, how we use it and the rights you have regarding your information.
By using our website, you acknowledge that you have read and understood this Privacy Policy.
2. Who We Are
This website is operated by:
Konstantinos Ar. Gerontis Jewellery
Owner
Konstantinos Gerontis
VAT Number
EL126343978
G.E.MI.
025048841000
EUID
ELGEMI.025048841000
Address
Roussou Koundourou 50
72100 Agios Nikolaos
Lasithi
Crete
Greece
Telephone
+30 28410 22618
+30 69442 41700
info@kgerontis.gr
3. Personal Data We Collect
Depending on how you use our website, we may collect the following categories of personal information.
Identity Information
- Full name
- Billing details
- Shipping details
Contact Information
- Email address
- Telephone number
- Postal address
Transaction Information
- Purchased products
- Order history
- Payment status
- Delivery information
Technical Information
- IP address
- Browser type
- Operating system
- Device information
- Website usage statistics
Marketing Information
- Newsletter preferences
- Marketing consent
- Cookie preferences
4. How We Collect Your Data
We collect personal information when:
- you place an order;
- you create an account;
- you contact us;
- you subscribe to newsletters;
- you complete forms;
- you browse our website;
- cookies and similar technologies collect technical information automatically.
5. Why We Process Your Data
We process personal data for the following purposes:
- processing and delivering orders;
- customer support;
- payment verification;
- fraud prevention;
- legal compliance;
- accounting obligations;
- improving website performance;
- analysing website traffic;
- responding to enquiries;
- improving customer experience.
- • managing customer accounts;
- • processing warranty requests;
- • complying with anti-fraud and security procedures.
We do not sell personal information.
6. Legal Basis for Processing
We process your personal data only where permitted under the GDPR.
Depending on the purpose, processing is based on:
- performance of a contract;
- compliance with legal obligations;
- legitimate interests;
- your consent.
Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of previous processing.
7. Sharing Your Personal Data
Your information may be shared only where necessary with trusted service providers such as:
- Viva.com (payment processing)
- Speedex Courier (delivery)
- Hostinger (website hosting)
- • Google Analytics (where implemented)
- • Google reCAPTCHA (spam protection, where implemented)
- Professional accountants
- Legal advisers
- Government authorities where legally required
Some of these service providers may act as independent data controllers where required by law (for example payment providers), while others process personal data solely on our behalf under data processing agreements compliant with the GDPR.
All service providers process personal information only for the purposes agreed and in accordance with applicable data protection legislation.
8. Data Retention
We retain personal information only for as long as necessary to:
- complete your order;
- comply with legal obligations;
- resolve disputes;
- prevent fraud;
- maintain accounting records required by Greek law.
When data is no longer required, it is securely deleted or anonymised.
9. Your Rights
Under the GDPR you have the right to:
- access your personal data;
- request correction;
- request deletion;
- restrict processing;
- object to processing;
- request data portability;
- withdraw consent;
- lodge a complaint with the Hellenic Data Protection Authority (HDPA).
We aim to respond to all requests within one month, in accordance with applicable legislation.
10. Cookies & Tracking Technologies
Our website uses cookies and similar technologies to:
- ensure proper website functionality;
- remember your preferences;
- analyse website traffic;
- improve user experience.
Detailed information can be found in our Cookie Policy.
Where required by applicable law, non-essential cookies are activated only after obtaining your consent.
11. Data Security
We implement appropriate technical and organisational measures designed to protect personal data against:
- unauthorised access;
- accidental loss;
- unlawful destruction;
- misuse;
- disclosure;
- alteration.
Despite these measures, no online system can guarantee absolute security.
Our website uses SSL encryption to help protect data transmitted between your browser and our servers.
We also implement access controls, regular software updates and security monitoring to minimise the risk of unauthorised access or data breaches.
12. International Transfers
Where personal data is transferred outside the European Economic Area (EEA), appropriate safeguards will be implemented in accordance with GDPR requirements to ensure an adequate level of protection.
13. Children’s Privacy
Our website is not intended for children under the age of 16.
We do not knowingly collect personal information from children.
If we become aware that such information has been collected unintentionally, appropriate steps will be taken to delete it without undue delay.
14. Changes to this Privacy Policy
We reserve the right to update this Privacy Policy whenever necessary to reflect:
- legislative changes;
- technological developments;
- changes in our services;
- security improvements.
The most recent version will always be published on this page together with its revision date.
15. Contact Information
If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact us.
Konstantinos Ar. Gerontis Jewellery
Roussou Koundourou 50
72100 Agios Nikolaos
Lasithi
Crete
Greece
Telephone
+30 28410 22618
+30 69442 41700
Final Privacy Notice
This Privacy Policy should be read together with our:
- Terms & Conditions
- Cookie Policy
- Shipping & Returns Policy
By using www.kgerontis.gr, you acknowledge that your personal data will be processed in accordance with this Privacy Policy and applicable data protection legislation.
This Privacy Policy was prepared in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), applicable Greek legislation and current eCommerce best practices.
