Privacy policy
Last updated 7 October 2026.
Who is responsible
The controller of your data is ΚΟΝΤΑΡΙΝΗΣ ΕΥΣΤΑΘΙΟΣ ΝΙΚΟΛΑΟΣ (KONTARINIS EFSTATHIOS), trading as The Corner Jewelry Market, Kouzi Georgouli 29, 84600 Mykonos, Greece, VAT number 059967934, business registry 048665038000. For anything about your data write to stathiskontarinis@hotmail.com.
What we collect and why
- When you order: your email address, name, delivery address, country and (optional) phone number, plus the pieces, amounts and payment method. We need them to make and ship your order and to answer your questions about it. Legal basis: performance of the contract. The sales record (name, address, items, amounts, payment reference) is kept for the tax authorities. Legal basis: legal obligation.
- When you pay with PayPal: PayPal receives your name, address, email and the amount, and handles the payment under its own privacy policy. We receive only a confirmation and a payment reference. Your card details never reach our site.
- When you pay by bank transfer: your bank shows us your name and the payment reference. We store no bank details of yours.
- When you write to us through the contact form: your name, email and message, so we can reply. Legal basis: our legitimate interest in answering you.
- Your cart: the pieces you put in your cart are stored on our server under a random identifier kept in your browser. No name or email is attached to a cart.
We collect nothing else: no date of birth, no account, no wishlist, no marketing profile. We send no newsletters or marketing emails.
How long we keep it
- Carts and unfinished payments: deleted after 30 days.
- Contact form messages: emailed to the shop and deleted from the website after 6 months.
- Orders: kept for 5 years, the retention period required by Greek tax law. After that your name, email, phone, address and the access link are removed automatically; amounts, items, dates and the payment reference stay in the books.
Who else sees your data (processors)
- Railway (hosting of the website, the database and the photos, in the European Union).
- PayPal (payments). PayPal is a separate controller for the payment itself and may transfer data outside the European Union under its own safeguards.
- Our email provider, which delivers the order and contact emails.
- The courier that delivers your parcel, which receives your name, address and phone number.
We never sell or share your data for advertising.
Your rights
You have the right to access your data, to have it corrected, erased or restricted, to receive it in a portable format (JSON), and to object to processing based on our legitimate interest.
To use a right, email stathiskontarinis@hotmail.com from the address you ordered with. We reply within one month. Data we must keep for the tax authorities (your sales record for 5 years) cannot be erased before that period ends; we tell you exactly what is kept and why.
If you think we handle your data wrongly, you can complain to the Hellenic Data Protection Authority, dpa.gr.
Cookies
The site uses only what is strictly necessary to work (your cart and the shop staff login) and no analytics or advertising cookies. The contact page embeds a Google map, which may set cookies of Google when you open that page. Details on the cookies page.
Security
The site is served over HTTPS only. Access to orders is limited to the shop staff and to you, through an unguessable link sent to your email. The link shows your name, city and country but not your street address, and it stops working 90 days after the order (60 days after it is completed); the "Find my order" page sends a fresh link to the email address of the order. We keep no IP addresses or browser details in our database.