Privacy Policy – Overview
At Mediterranean Boutique, we prioritize the confidentiality of your information and are steadfast in our commitment to data protection. This Privacy Policy details our practices regarding the collection, use, and security of your personal data during your interactions with our website and our services.
We process all personal information in strict adherence to the General Data Protection Regulation (EU) 2016/679 (GDPR) and relevant national data protection statutes within Greece and the European Union.
By browsing our site, you confirm your understanding and acceptance of the terms outlined in this Privacy Policy.
We Are Arapakos & Evezeti Mediterranean Boutique
Aegean Elegance in Every Stitch
Our registered address –Athanasiou Gliati 10, Markopoulo Mesogaias ,Attica .
Athens, Greece
Email: atelierarapakou@gmail.com
Phone: +30 697 00 88 000
We serve as the primary data controller for all personal information gathered through this digital platform.
Scope of This Policy
This document describes:
The specific personal data we collect
Our purposes and methods for processing your data
The legal frameworks we apply under GDPR mandates
Our data retention schedules
Third parties involved in data sharing
Your statutory rights and how to invoke them
Contact details for inquiries or regulatory complaints
If you disagree with any part of this policy, please refrain from using our digital services.
Personal Data Collection
We gather information including, but not limited to:
Identity and contact details (name, email, phone, physical address)
Account credentials for site members
Transaction history (product selection, pricing, shipping info)
Financial data processed via encrypted payment gateways
Technical metrics (IP addresses, browser types, device info, cookies)
Correspondence via contact forms, email, or digital chat
Purpose of Processing
This data allows us to:
Manage and fulfill your boutique orders
Maintain and secure your membership profile
Address inquiries and provide customer excellence
Communicate essential order updates and service alerts
Analyze and enhance our digital user experience
Deliver curated newsletters and promotions (with your prior approval)
Legal Foundations for Processing
Under GDPR, we utilize your data based on these primary justifications:
Contractual Necessity – to deliver the products or services you purchased
Explicit Consent – when you opt-in for marketing communications
Legitimate Interests – for reasonable business operations like fraud prevention and site optimization
Legal Compliance – to satisfy statutory obligations such as tax reporting
Data Retention Periods
We retain information only for the duration required to:
Provide ongoing services and support
Comply with legal and financial record-keeping laws
Resolve potential disputes or enforce our terms
Once the retention period expires, data is securely erased or fully anonymized.
Authorized Data Sharing
We may disclose information to:
Operations partners (logistics providers, payment hosts, IT infrastructure)
Professional consultants (legal counsel, auditors)
Governmental authorities, when mandated by law
These entities are contractually obligated to maintain your data's integrity and security.
Your Rights Under GDPR
As a data subject, you possess the right to:
Request access to your personal files
Rectify inaccurate or dated information
Request data deletion under specific conditions
Object to or restrict specific processing activities
Request a portable copy of your data
Revoke consent for marketing at any time
Direct your requests to our email; we will respond within the statutory timeframe.
Contact Information & Regulatory Recourse
Direct any privacy-related questions to the boutique via the contact details provided above.
If you believe your data has been mishandled, you have the right to lodge a complaint with the Hellenic Data Protection Authority in Greece.