Privacy policy
Last updated: 7 September 2026
Sanki Trading A.E., which operates the OPPO Greece online store and the website www.oppostore.gr, is responsible for the operation of the store and the related information, content, features, tools, products and services provided through it (the “Services”).
The Services are provided through the Shopify platform, which enables us to operate our online store and provide you with the relevant e-commerce services.
This Privacy Policy describes how we collect, use, store and disclose your personal data when you visit or use our website, make a purchase or other transaction through the Services, or otherwise communicate with us.
In the event of any conflict between our Terms of Service and this Privacy Policy in relation to the collection, processing or disclosure of personal data, this Privacy Policy shall prevail.
Please read this Privacy Policy carefully.
## Personal Data We Collect or Process
By “personal data” we mean any information that identifies or can reasonably be linked to a natural person.
Depending on how you interact with the Services, we may collect or process the following categories of personal data:
- **Contact details**, such as your full name, address, billing address, shipping address, telephone number and email address.
- **Order and transaction information**, such as the products you purchase, return or cancel, order number, order status and transaction history.
- **Payment and transaction information**, such as your selected payment method, payment status and confirmation, and other related transaction information. Full card details or other payment instrument information may be processed directly by our payment service providers in accordance with their own privacy policies and applicable security standards.
- **Account information**, when you use customer account features, such as login details, preferences and account settings.
- **Information you provide when contacting us**, such as the content of emails, support requests or other communications.
- **Device information and technical data**, such as IP address, device type, browser, operating system, device identifiers and connection information.
- **Usage information**, such as the pages you visit, how you use the website and the time you spend interacting with the Services.
- **Information collected through cookies and similar technologies**, in accordance with your consent choices and our Cookie Policy.
## Sources of Personal Data
We may collect personal data:
- **Directly from you**, when you place an order, create an account, complete a form or contact us.
- **Automatically through the Services**, when you visit or use our website, through cookies, similar technologies and technical logs.
- **From service providers**, such as Shopify, payment providers, shipping companies, analytics services and technical partners.
- **From business partners or other third parties**, where necessary for the operation of the Services or as permitted by applicable law.
## How We Use Your Personal Data
We use your personal data for the following purposes:
- **Fulfilling orders and contractual obligations**, including processing orders, payments, shipping and delivery of products.
- **Managing returns, cancellations and refunds.**
- **Providing customer support** and communicating with you regarding orders, products or services.
- **Creating and managing customer accounts**, where applicable.
- **Security and fraud prevention**, including detecting and investigating suspicious or unauthorized activity.
- **Improving the operation and user experience of the online store.**
- **Analyzing website usage**, where permitted and in accordance with your consent preferences.
- **Marketing and advertising**, where you have given the relevant consent or where another lawful basis permits such processing.
- **Complying with legal, tax, accounting and regulatory obligations.**
- **Establishing, exercising or defending legal claims**, where necessary.
## Legal Basis for Processing
We process your personal data only where there is an appropriate legal basis under the General Data Protection Regulation (GDPR) and applicable law.
Depending on the purpose of the processing, we rely in particular on:
- **Performance of a contract**, where processing is necessary to manage your order, payment, delivery, returns or customer service related to your purchase.
- **Compliance with legal obligations**, such as tax, accounting or other obligations imposed by applicable law.
- **Our legitimate interests**, where processing is necessary for the security of the Services, fraud prevention, customer support, improvement of store operations or protection of our rights, provided that your rights and freedoms do not override those interests.
- **Your consent**, where required by law, in particular for non-essential cookies, analytics technologies, personalized advertising and certain forms of marketing communication.
Where processing is based on your consent, you may withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
## Cookies, Analytics and Advertising
We use essential cookies and similar technologies for the proper operation of the website, including shopping cart functionality, security, session management and checkout.
Non-essential cookies and technologies related to analytics, performance measurement or personalized advertising are used only in accordance with your choices and, where required by law, after obtaining your consent.
You can accept, reject or manage your preferences through the website’s Cookie Banner.
## How We Disclose Personal Data
We may disclose personal data to third parties only where necessary for legitimate business purposes or where required by law.
This may include:
- **Shopify**, as our e-commerce platform and technical infrastructure provider.
- **Payment service providers**, for the secure processing of payments.
- **Shipping and logistics companies**, for the dispatch and delivery of orders.
- **Technical, cloud and support service providers.**
- **Analytics and advertising providers**, such as Google or Meta, only to the extent permitted by applicable law and in accordance with your consent choices.
- **Professional advisers**, such as accountants, legal advisers or auditors, where necessary.
- **Public authorities or courts**, where required by law or by valid legal process.
We do not sell your personal data in exchange for monetary consideration.
## Cooperation with Shopify
The online store operates through the Shopify platform.
Shopify collects and processes certain personal data relating to access to and use of the Services in order to provide, protect and improve its platform services.
Information submitted through the online store may be processed by Shopify and its authorized service providers, including in circumstances where processing takes place outside your country of residence.
In certain circumstances, and depending on the Shopify services enabled, Shopify may act as an independent data controller for specific processing activities.
For more information about how Shopify processes personal data, you can visit:
https://www.shopify.com/legal/privacy
and:
https://privacy.shopify.com/
## Third-Party Websites and Services
The website may contain links to third-party websites, platforms or services.
Such third parties operate in accordance with their own privacy policies and terms of use. We are not responsible for the privacy practices, security or content of websites or services that are not under our control.
We recommend that you review the relevant privacy policies before providing personal data to third parties.
## Information Relating to Children
The Services are not specifically intended for children.
We do not knowingly collect personal data from children in violation of applicable law.
If you are a parent or guardian and believe that a child has provided personal data through the Services without the required lawful basis or consent, you may contact us at support@oppostore.gr to request that we review and, where required, delete the data.
## Security of Your Personal Data
We take appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction, alteration or unlawful processing.
However, no method of electronic transmission or data storage can be considered completely secure.
We recommend that you do not send sensitive or confidential information through unsecured communication channels.
## Retention of Personal Data
We retain your personal data only for as long as necessary for the purposes for which it was collected or for as long as required by applicable law.
The retention period may depend, among other things, on:
- the duration of our contractual relationship with you,
- the need to process orders, returns or support requests,
- tax, accounting or other legal obligations,
- fraud prevention requirements,
- dispute resolution,
- the establishment, exercise or defense of legal claims.
After the applicable retention period expires, the data will be deleted or anonymized unless further retention is required by law.
## Your Rights
Under the GDPR and applicable law, depending on the circumstances, you may have the following rights:
- **Right of access** to the personal data we hold about you.
- **Right to rectification** of inaccurate or incomplete personal data.
- **Right to erasure** of personal data where the relevant legal conditions are met.
- **Right to restriction of processing.**
- **Right to object to processing**, in particular where processing is based on legitimate interests or relates to direct marketing.
- **Right to data portability**, where applicable.
- **Right to withdraw consent** at any time where processing is based on your consent.
- **Right to lodge a complaint** with a competent data protection supervisory authority.
To exercise your rights, you can contact us at:
support@oppostore.gr
We may need to verify your identity before responding to certain requests where permitted or required by law.
We will respond to your requests within the time limits required by applicable law.
## Marketing Communications
If you have chosen to receive promotional communications, you may withdraw your consent or unsubscribe at any time by using the relevant unsubscribe link included in the communication or by contacting us.
Unsubscribing from marketing communications does not affect necessary communications relating to active orders, transactions, customer accounts or support.
## Complaints
If you have a complaint about how we process your personal data, please contact us first at:
support@oppostore.gr
You also have the right to lodge a complaint with the competent supervisory authority.
For Greece, the competent authority is:
Hellenic Data Protection Authority (HDPA)
More information is available on its official website:
https://www.dpa.gr/
## International Data Transfers
Some of our service providers may process or store personal data outside Greece or the European Economic Area.
Where personal data is transferred outside the European Economic Area, we use or require, as appropriate, suitable safeguards in accordance with applicable law, such as:
- adequacy decisions adopted by the European Commission,
- Standard Contractual Clauses approved by the European Commission,
- or other lawful transfer mechanisms.
## Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business practices, the Services, technology or legal and regulatory requirements.
Where a material change is made, we will update the “Last updated” date and, where required by law, provide appropriate notice.
## Contact and Data Controller
If you have any questions about this Privacy Policy, how we process your personal data, or if you wish to exercise your rights, you may contact us at:
Sanki Trading A.E.
Kosta Varnali 52
152 33 Chalandri
Greece
Email: support@oppostore.gr
Website: www.oppostore.gr
Greek Tax Identification Number (A.F.M.): 801554924
VAT number (VIES): EL801554924
G.E.MI. number: 159044801000
For the purposes of applicable data protection law, Sanki Trading A.E. acts as the data controller in relation to personal data processed in connection with the operation of the www.oppostore.gr online store, unless otherwise stated in relation to a specific third-party service.