Skip to content
LUMÉVA
EL/EN

LUMÉVA

Privacy Policy

1. Data controller

The controller of the personal data collected for the online shop’s operations is the business trading under the name LUMÉVA. Its details are listed on the “Business Information & Contact” page.

Contact email for personal data matters: lumeva.candles26@gmail.com.

2. Personal data we collect

Depending on the services you use, we may process:

  • Full name and contact details.
  • Delivery and billing addresses.
  • Order details and purchased products.
  • Personalisation choices, such as names or personal messages you enter.
  • Payment and transaction status details, without storing full card details at LUMÉVA.
  • Messages sent through the contact form and customer service requests.
  • Necessary technical data for security and operation.
  • Your choice regarding visit statistics.

3. Purposes of processing

Processing takes place, as applicable, for:

  • Managing and fulfilling orders.
  • Payments and financial reconciliation of transactions.
  • Shipping and tracking deliveries.
  • Customer service and handling returns.
  • Compliance with legal tax and accounting obligations.
  • Fraud prevention and maintaining security.
  • Anonymous visit statistics, only if you accept them.

4. Legal bases

Depending on the processing, the legal bases may include performance of a contract, compliance with a legal obligation, legitimate interest where applicable and consent where required.

5. Recipients of data

Necessary data are shared only to the extent required:

  • With the website’s hosting and database provider.
  • With Stripe, when you choose card payment; card details are entered directly with Stripe.
  • With the courier delivering your order (ACS or BOX NOW), when that service is active.
  • With an accountant or competent authorities, where there is a legal obligation.

The website’s fonts are loaded from the Google Fonts service, which receives your browser’s IP address in order to deliver them. Links to Instagram take you to a service with its own privacy policy.

6. Retention

Data are kept only for as long as required for the relevant purposes and for legal retention obligations, in particular tax and accounting obligations.

7. Your rights

Under the GDPR, and subject to the legal conditions, you may request access, rectification, erasure, restriction or portability of your data, or object to its processing.

Where processing is based on consent, you may withdraw it.

You can contact lumeva.candles26@gmail.com to exercise your rights and you may lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

8. Security

Appropriate technical and organisational measures are applied to protect personal data, according to the nature and risks of the processing.

9. Transfers outside the EEA

Some providers may process data outside the European Economic Area. In that case, the transfer takes place only with the safeguards provided by the GDPR.