New Arrivals Shop Our Story Contact
Korasís
Contents
Introduction 1. Who Controls Your Data 2. What We Collect 3. Why We Use It 4. Cookies & Analytics 5. Payments 6. Delivery Partners 7. Service Providers 8. International Transfers 9. How Long We Keep It 10. Your Rights 11. Automated Decisions 12. Security 13. Complaints 14. Changes 15. Contact
Other Legal Pages
Terms & Conditions → Shipping & Returns →

Privacy Policy

Last updated: 21 August 2026

At KORASIS, we respect your privacy and are committed to handling your personal information responsibly and transparently.

This Privacy Policy explains what personal data we collect when you visit korasis.gr, contact us or purchase a KORASIS product, why we use that information, who may receive it, how long we retain it and the rights available to you under the General Data Protection Regulation (GDPR) and applicable Greek law.

1. Who Controls Your Data

For the purposes of applicable data protection law, the data controller is:

KORASIS, operated by Panagiotis Ktenas
13 Chrysostomou Smyrnis
Moschato 183 44
Athens, Greece

Email: hello@korasis.gr
Phone: +30 213 047 7161
Website: korasis.gr

2. What Information We Collect

The personal information we collect depends on how you interact with KORASIS.

When you place an order

  • Your name, email address and telephone number
  • Billing and delivery address
  • Order and transaction information, and any product personalisation or bespoke configuration choices
  • Information necessary to process returns, repairs or customer-service requests

Payments are processed through Stripe. KORASIS does not store your complete debit or credit card details.

When you create an account

  • Your email address, name and an encrypted password (or, if you sign in with Google, your Google account details — we never see your Google password)
  • Your saved address and phone number, wishlist items, and any bespoke designs you save in the configurator
  • Order history

When you contact us

If you contact KORASIS by email, telephone, contact form or another communication channel, we may retain your contact details and the content of the correspondence for the purpose of responding to your request and maintaining appropriate customer-service records.

When you subscribe to communications

If you choose to subscribe to KORASIS news or marketing communications, we collect your email address only. You can unsubscribe at any time via the link in every marketing email, or from this page.

When you visit korasis.gr

Our hosting provider automatically logs basic technical information common to any website visit — such as IP address, browser type and pages requested — for the security and operation of the website. We do not currently use analytics or advertising cookies (see Section 4).

3. Why We Use Your Information

We process personal data only where we have an appropriate legal basis.

Purpose Legal Basis
Processing and fulfilling your orderPerformance of a contract
Processing paymentsPerformance of a contract
Arranging deliveryPerformance of a contract
Communicating with you about your orderPerformance of a contract
Handling returns, repairs and customer-service requestsContract and/or legitimate interests
Maintaining invoices and accounting recordsLegal obligation
Protecting the website and preventing fraud or misuseLegitimate interests and/or legal obligation
Responding to enquiriesLegitimate interests or steps taken at your request
Sending marketing communicationsConsent

Where we rely on legitimate interests, we consider whether our interests are compatible with your reasonable expectations and whether your rights and freedoms override those interests.

4. Cookies & Analytics

KORASIS currently uses only strictly necessary cookies required for the website to function — for example, keeping items in your cart and keeping you signed in. These cannot be disabled without affecting the site's functionality.

We do not currently use Google Analytics, advertising cookies, or any third-party marketing or tracking technologies. If that changes in future, we will update this section, introduce a consent mechanism before any non-essential cookie is set, and give you clear controls to accept, decline or change your choice.

5. Payments

Online payments are processed by Stripe.

When you make a payment, information required to complete and secure the transaction is transmitted directly to Stripe. Stripe may process information including your payment details, transaction information, contact details and information used for fraud prevention.

KORASIS does not receive or store your complete payment-card number. Stripe processes personal information in accordance with its own privacy and data-protection obligations — see stripe.com/privacy.

6. Delivery Partners

To deliver your order, we share the information necessary for delivery — your name, delivery address, telephone number and shipment details — with the courier or postal service handling your shipment. We currently ship using a flat shipping rate rather than live carrier tracking, and we provide our delivery partner only with the information reasonably necessary to deliver your order.

7. Service Providers

We use selected third-party service providers to operate korasis.gr and provide our services. These currently include:

  • Stripe — payment processing
  • Resend — transactional email and newsletter delivery
  • Railway — website/application hosting and infrastructure

We may also use professional advisers, accountants, technical service providers or public authorities where this is necessary for our business operations or required by law. If we add further tools — such as website analytics — in future, we will update this section first.

We do not sell your personal data to third parties.

8. International Data Transfers

Some of the technology and service providers used by KORASIS may process personal data in countries outside the European Economic Area. Where personal data is transferred outside the EEA, we rely on appropriate safeguards required by applicable data-protection law, where necessary — these may include European Commission adequacy decisions, Standard Contractual Clauses or other legally recognised transfer mechanisms.

9. How Long We Keep Your Information

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and to comply with applicable legal, accounting and tax obligations.

  • Order and transaction records — retained for the period required by applicable Greek accounting, tax and commercial law.
  • Account data — retained while your account is active. You may delete your account at any time.
  • Customer correspondence — retained for as long as reasonably necessary to handle the relevant enquiry, order, warranty, repair or dispute.
  • Marketing information — retained until you unsubscribe or withdraw your consent.

When information is no longer required, it is deleted or anonymised where reasonably practicable, subject to applicable legal obligations.

10. Your Privacy Rights

Subject to the conditions and limitations provided by applicable law, you may have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — ask us to correct inaccurate or incomplete information.
  • Erasure — ask us to delete your personal data in circumstances where the law provides this right.
  • Restriction — request that we restrict the processing of your personal data in certain circumstances.
  • Data portability — receive certain personal data in a structured, commonly used and machine-readable format.
  • Object — object to certain processing based on legitimate interests or to direct marketing.
  • Withdraw consent — where processing is based on your consent, withdraw that consent at any time. This does not affect the lawfulness of processing carried out before consent was withdrawn.

To exercise your rights, contact us at hello@korasis.gr. We may need to verify your identity before fulfilling a request.

11. Automated Decision-Making

KORASIS does not currently use personal data to make decisions based solely on automated processing that produce legal effects or similarly significant effects concerning you.

12. Security

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss or misuse. No internet transmission or electronic storage system can, however, be guaranteed to be completely secure.

13. Your Right to Complain

If you have concerns about how KORASIS processes your personal data, we encourage you to contact us first at hello@korasis.gr so that we can address your concerns.

You also have the right to lodge a complaint with the competent data-protection supervisory authority. In Greece, this is the Hellenic Data Protection Authority, Athens, Greece — www.dpa.gr. This does not affect any other rights or remedies available to you under applicable law.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technologies, service providers or legal obligations. The current version will always be published on this page together with its latest revision date.

15. Contact

For questions about this Privacy Policy or the way KORASIS handles personal information, please contact:

KORASIS, operated by Panagiotis Ktenas
13 Chrysostomou Smyrnis
Moschato 183 44
Athens, Greece

Email: hello@korasis.gr
Phone: +30 213 047 7161

Carry with purpose.