Legal
Privacy policy
How Wellen collects, uses and protects your personal data, on what legal basis, for how long, and what rights you have.
Last updated:
Who collects your personal data?
The Greek company Wellen is the controller of the personal data you provide to us and is responsible for the security of your data under the Personal Data Protection Law.
to manage your online shopping, i.e. to process your orders and returns through our online services and to send you notifications about the delivery status or in case of any problems during the delivery of your items.
to process your payments.
to handle complaints about our products.
to offer you different payment alternatives.
to identify you and verify that you are over 16 years old.
to improve your shopping experience and our services.
to send promotional emails about new products, special offers, our news or other information that we think you may find useful, using the email addresses you have provided to us.
What personal data do we collect?
Contact information such as name, surname, address, email address, telephone number, postal code.
Account information such as first name, last name, address, email address, phone number, zip code, date of birth, gender, city, country and username.
Payment information and history
Order information
Purchase history
Delivery history
Activity log information
IP address
What is the legal basis for processing your data?
We process your personal data because it is necessary for:
the execution of the contract for the sale of goods
our compliance with our legal obligations
the pursuit of our legitimate interests
In general, we rely on your consent as a legal basis only for processing related to sending direct marketing messages via email. You have the right to withdraw your consent at any time. Where your consent is the only legal basis for processing, we will stop processing your data after its withdrawal.
How long do we keep your data?
We do not retain your data for longer than is necessary for the purposes set out in this Policy. Different retention periods apply to different types of data, however the longest period we retain your personal data is 10 years.
Who has access to your personal data?
In order to provide you with certain services, we need to share your personal data with some of our partners. These include delivery, payment and marketing service providers. We will never transfer, sell, rent or exchange our customers’ data with other organisations for marketing purposes. We may share your data with government organisations, regulators, law enforcement agencies, courts, banking institutions and insurers, where we are required to do so:
to comply with our legal obligations.
to exercise our legal rights.
for the prevention, detection, investigation of crimes or the prosecution of offenders.
for the protection of our employees and customers.
Do we transfer your data outside the European Union?
In order to provide you with our products and services, it is sometimes necessary for us to transfer your data outside the European Union. This usually happens when our service providers are located outside the European Union or if you are located outside the Union. These transfers are subject to special rules under data protection laws. If this happens, we ensure that the transfer complies with data protection laws and that all your personal data is secure. Our usual practice is to use “standard data protection clauses” which have been approved by the European Commission for such transfers.
How do we protect your data?
We implement appropriate technical and organizational measures to ensure that your personal data is always protected and secure. Our security measures include data encryption, regular cybersecurity assessments of all service providers that may handle your personal data, security controls that protect our entire technological infrastructure from external attack and unauthorized access, and internal policies that define how we ensure the protection of your data and the training of our employees.
What are your rights?
Right of access: you have the right to request information about the personal data we process at any time. You can contact us and we are happy to provide you with your personal data via email.
Right to rectification: You have the right to request the correction of your personal data if it is incorrect.
Right to erasure (“right to be forgotten”): You have the right to request that the personal data processed by our company be deleted at any time, unless there is a pending order that has not yet been shipped or you owe us a debt.
Right to restriction of processing: You have the right to request from us restriction of processing when there is a specific reason for this (e.g. if you object to our legitimate interest or if your personal data is incorrect or if you think that the processing is unlawful or if we no longer need it).
Right to portability: Whenever our company processes your personal data, you have the right to receive a copy of it in a structured, commonly used and machine-readable format, as well as to request that it be transmitted to another party. This only includes personal data that you have provided to us.
Right to object to processing based on legitimate interest: You have the right to object to the processing of your personal data based on our legitimate interest. We will no longer process your personal data unless we can demonstrate legitimate grounds for the processing that override your interests and rights or we have legitimate claims.
Right to object to direct marketing: You have the right to object to direct marketing, including profiling for direct marketing purposes. You have the option to opt out of direct marketing.
How can you exercise your rights?
If you wish to exercise any of the above rights, please contact us using our contact details or go to your personal account where you can change your data or unsubscribe. If you believe that our company is processing your personal data incorrectly, please contact us.
Do we use cookies?
Our website uses cookies to collect information. The information includes data about browsing and purchasing behavior. More information is provided in the Cookie Policy.
Can we modify the privacy policy?
We reserve the right to update or change this Privacy Policy at any time. You should check this Policy periodically. The latest version of the Privacy Policy is always available on our website. We will notify you of any material changes to the Privacy Policy, for example if they relate to the purpose for which we use your personal data, the identity of the controller or your rights.
Contact information
If you have any questions about how we use your personal data that are not answered here or if you would like to exercise your rights regarding your personal data, please email us at info@wellen.gr