Privacy Policy
Privacy Policy
Effective date: July 1, 2026
Thea Athina SALONIKA AB (“we,” “us,” or “our”) operates **www.vestasalonika.com** (the “Service”).
This Privacy Policy explains how we collect, use, store, and disclose personal data when you visit or make a purchase through our Service, as well as the rights you have in relation to that data.
By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. Unless otherwise stated, the terms used in this Privacy Policy have the same meaning as in our Terms and Conditions.
Definitions
Service
The website **www.vestasalonika.com**, operated by Thea Athina SALONIKA AB.
Personal Data
Information relating to an identified or identifiable living individual.
Usage Data
Information collected automatically through the use of the Service, such as page visits and time spent on pages.
Cookies
Small files stored on your device that help us improve your browsing experience.
Data Controller
The person or organization that determines how and why personal data is processed. For the purpose of this Privacy Policy, we are the Data Controller of your Personal Data.
Data Processor / Service Provider
Any person or company that processes data on behalf of the Data Controller.
Data Subject / User
Any living individual using our Service who is the subject of Personal Data.
Information We Collect
We collect different types of information to operate and improve our Service.
Personal Data
When you use our Service, we may ask you to provide certain information that can be used to contact or identify you. This may include:
- Email address.
- First and last name.
- Phone number.
- Address, state, province, ZIP/postal code, and city.
- Cookies and Usage Data.
Usage Data
We may also collect information about how the Service is accessed and used. This may include:
- Your IP address.
- Browser type and version.
- Pages visited.
- Date and time of your visit.
- Time spent on pages.
- Device identifiers.
- Diagnostic data.
Tracking and Cookies Data
We use cookies and similar tracking technologies to monitor activity on our Service and store certain information. Cookies may include an anonymous unique identifier and are used to improve, analyse, and secure the Service.
You can set your browser to refuse all cookies or to alert you when cookies are being sent. However, if you disable cookies, some parts of the Service may not function properly.
Examples of cookies we use include:
- Session Cookies to operate the Service.
- Preference Cookies to remember your settings and preferences.
- Security Cookies for security purposes.
How We Use Your Data
We use collected data for the following purposes:
- To provide and maintain our Service.
- To notify you about changes to our Service.
- To allow you to use interactive features when you choose to do so.
- To provide customer support.
- To analyse and improve the Service.
- To monitor usage of the Service.
- To detect, prevent, and resolve technical issues.
Legal Basis for Processing Under GDPR
If you are located in the European Economic Area (EEA), our legal basis for collecting and using your personal information depends on the context in which we collect it. We may process your Personal Data because:
- It is necessary to perform a contract with you.
- You have given us permission to do so.
- The processing is in our legitimate interests and is not overridden by your rights.
- It is necessary for payment processing.
- It is required to comply with the law.
Retention of Data
We retain your Personal Data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy.
We may retain data to comply with legal obligations, resolve disputes, and enforce our agreements and policies. Usage Data is generally retained for a shorter period, unless it is needed to improve security, functionality, or legal compliance.
Transfer of Data
Your information, including Personal Data, may be transferred to and stored on servers located outside your country or jurisdiction. Data protection laws in those locations may differ from those in your own.
If you submit information to us from outside our operating country, you consent to the transfer and processing of that data in accordance with this Privacy Policy.
We take reasonable steps to ensure that your data is treated securely and in line with this Privacy Policy. No transfer of Personal Data will take place unless adequate safeguards are in place.
Disclosure of Data
We may disclose your Personal Data if we believe it is necessary to:
- Comply with a legal obligation.
- Protect and defend the rights or property of Thea Athina SALONIKA AB.
- Investigate possible wrongdoing in connection with the Service.
- Protect the personal safety of users or the public.
- Protect against legal liability.
Security of Data
We take the security of your data seriously. However, no method of transmission over the Internet or electronic storage is completely secure. While we use commercially acceptable means to protect your Personal Data, we cannot guarantee absolute security.
Your GDPR Rights
If you are a resident of the EEA, you have certain data protection rights. We take reasonable steps to allow you to access, correct, update, delete, or limit the use of your Personal Data.
These rights may include:
- The right to access, update, or delete your information.
- The right to rectification.
- The right to object to processing.
- The right to restriction of processing.
- The right to data portability.
- The right to withdraw consent at any time.
If you would like to exercise any of these rights, please contact us. We may ask you to verify your identity before responding.
You also have the right to complain to a Data Protection Authority if you believe your data has been handled improperly.
Service Providers
We may use third-party companies and individuals to help us operate the Service, perform Service-related tasks, or analyse how the Service is used.
These third parties only have access to your Personal Data to perform these tasks on our behalf and are required not to disclose or use it for any other purpose.
Payments
If we offer paid products or services, payment processing is handled by third-party payment providers.
We do not store or collect your payment card details. That information is provided directly to our payment processors, whose use of your personal information is governed by their own privacy policies. These processors comply with PCI-DSS standards to help ensure the secure handling of payment information.
The payment processors we may use include:
- **Stripe** — [https://stripe.com/us/privacy](https://stripe.com/us/privacy)
- **PayPal / Braintree** — [https://www.paypal.com/webapps/mpp/ua/privacy-full](https://www.paypal.com/webapps/mpp/ua/privacy-full)
Links to Other Sites
Our Service may contain links to third-party websites that are not operated by us. If you click one of those links, you will be directed to that third party’s site.
We strongly recommend reviewing the privacy policy of every website you visit. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services.
Children’s Privacy
Our Service is not intended for anyone under the age of 18.
We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verified parental consent, we will take steps to remove that information from our servers.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page, and where appropriate, we will notify you by email or through a prominent notice on our Service before the changes take effect.
You are encouraged to review this Privacy Policy periodically. Changes become effective when they are posted on this page.
Contact Us
If you have any questions about this Privacy Policy, please contact us through the contact details listed on our website.