Last Updated: 09/07/2026
At Josef Woodturner, we respect your privacy and are committed to protecting your personal data.
This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you visit www.josefwoodturner.com, create an account, place an order, contact us, or otherwise interact with our website.
By using our website, you acknowledge that you have read this Privacy Policy.
Table of Contents
- Processing Activities Summary
- Applicable Legislation
- Data Controller
- Scope
- Personal Information We Collect
- How We Collect Your Information
- Why We Process Your Information
- Legal Basis for Processing
- Payments
- Manufacturing
- Shipping
- Newsletter & Marketing
- Cookies & Similar Technologies
- Third-Party Services
- International Transfers
- Data Retention
- Security
- Your Rights
- Children’s Privacy
- Changes to this Privacy Policy
- Contact Us
Applicable Legislation
This Privacy Policy has been prepared in accordance with applicable European Union and Greek legislation governing the protection of personal data, electronic communications, consumer rights, and electronic commerce.
- General Data Protection Regulation (GDPR)
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016. https://eur-lex.europa.eu/eli/reg/2016/679/oj
- ePrivacy Directive
Directive 2002/58/EC concerning the processing of personal data and the protection of privacy in the electronic communications sector (as amended by Directive 2009/136/EC).
https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32002L0058
- Greek Law 4624/2019
Implementation of the GDPR and measures for the application of Regulation (EU) 2016/679 in Greece.https://www.dpa.gr/en/legislation/law-4624-2019
- Law 2251/1994 on Consumer Protection (Greece)
Consumer protection legislation governing distance selling and electronic commerce. https://www.kepka.org/main/en/
- Directive 2011/83/EU on Consumer Rights https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32011L0083
- Directive (EU) 2019/2161 (“Omnibus Directive”)
Modernisation of EU consumer protection rules for online commerce. https://eur-lex.europa.eu/eli/dir/2019/2161/oj
Where customers reside outside the European Union, this Privacy Policy is intended to comply primarily with the General Data Protection Regulation (GDPR) and applicable Greek law. Nothing in this Policy is intended to limit any mandatory privacy rights available to individuals under the laws of their country of residence where such laws apply.
Processing Activities Summary
| Activity | Personal Data Collected | Purpose | Legal Basis (GDPR) |
|---|---|---|---|
| Browsing the Website | IP address, browser type, device information, pages visited | Website functionality, security, analytics | Legitimate Interest / Consent (where applicable) |
| Creating a Customer Account | Name, email address, encrypted password, saved addresses | Account management and future purchases | Performance of a Contract |
| Placing an Order | Name, billing address, shipping address, telephone number, email address, purchased products | Order processing, manufacturing, shipping and customer support | Performance of a Contract |
| Payment Processing | Payment information (processed by Stripe), billing details | Complete payment transactions securely | Performance of a Contract |
| Shipping & Delivery | Name, address, telephone number, email address (where required) | Deliver purchased products | Performance of a Contract |
| Customer Support | Name, email address, telephone number, correspondence | Respond to enquiries and provide assistance | Legitimate Interest |
| Newsletter Subscription | Email address | Send marketing communications and product updates | Consent |
| Website Analytics | IP address, device information, browsing behaviour | Improve website performance and user experience | Consent |
| Marketing & Advertising | Cookie identifiers, browsing behaviour | Measure advertising effectiveness and display relevant advertisements | Consent |
| Legal Compliance | Order records, invoices, tax information | Comply with accounting, tax and legal obligations | Legal Obligation |
1. Data Controller
The controller responsible for processing your personal data is:
Legal Business Name: «GEREIGE JOSEPH ΓΕΝΕΤΖΑΚΗ ΟΛΓΑ Ο.Ε.»
Trading Name: Josef Woodturner
Registered Address:
G. Leof. Kapetanaki 164
70100 Archanes
Heraklion
Crete
Greece
VAT Number (AFM): 801382716
GEMI Number: 155624127000
Email: contact@josefwoodturner.com
Telephone: +30 694 350 3388
Website: www.josefwoodturner.com
2. Scope
This Privacy Policy applies to all personal information collected through:
- our website;
- customer accounts;
- orders placed through our online store;
- contact forms;
- newsletter subscriptions;
- customer support communications.
3. Personal Information We Collect
Depending on how you use our website, we may collect:
- Identity Information
- Name
- Billing information
- Shipping information
- Contact Information
- Email address
- Telephone number
- Order Information
- Products ordered
- Order history
- Payment status
- Delivery preferences
- Account Information
If you create an account, we may store:
- Username
- Encrypted password
- Saved addresses
- Wishlist or preferences (where applicable)
- Technical Information
When you visit our website, we may automatically collect:
- IP address
- Browser type
- Device type
- Operating system
- Pages visited
- Referring website
- Language settings
- Time zone
- Website interaction data
- Marketing Information
If you subscribe to our newsletter or consent to marketing cookies, we may collect information regarding:
- Newsletter preferences
- Marketing interactions
- Advertising performance
4. How We Collect Your Information
We collect information when you:
- visit our website;
- place an order;
- create an account;
- subscribe to our newsletter;
- contact us;
- submit a contact form;
- accept cookies;
- interact with our advertising campaigns.
5. Why We Process Your Information
We process your personal information to:
- process and fulfil orders;
- manufacture your handmade products;
- arrange shipping;
- communicate about your order;
- respond to enquiries;
- provide customer support;
- manage customer accounts;
- improve our website;
- analyse website performance;
- prevent fraud;
- comply with legal obligations;
- send newsletters and promotional communications where consent has been provided.
6. Legal Basis for Processing
We process personal information under one or more of the following legal bases under the General Data Protection Regulation (GDPR):
Contract Performance: To fulfil your order, process payments, manufacture products, and deliver purchases.
Legal Obligations: To comply with tax, accounting, consumer protection, and other applicable legal requirements.
Legitimate Interests: To improve our services, protect our business against fraud, maintain website security, and analyse website performance.
Consent: Where required, including for:
- newsletters;
- marketing communications;
- analytics cookies;
- advertising cookies.
You may withdraw your consent at any time.
7. Payments
Payments are securely processed by Stripe.
When available, additional payment providers such as PayPal may also process payment information.
We do not store complete credit or debit card details on our servers.
Payment providers process payment information according to their own privacy policies.
8. Manufacturing
All Josef Woodturner products are designed and manufactured in-house.
We do not share your personal information with third-party manufacturing or production partners for the purpose of producing your order.
9. Shipping
To deliver your order, we share only the information necessary with shipping providers, including, where applicable:
- ELTA
- ACS
- UPS
- DHL
This typically includes:
- Name
- Delivery address
- Telephone number
- Email address (where required by the carrier)
Shipping providers process this information solely for the purpose of delivering your order.
10. Newsletter & Marketing
If you subscribe to our newsletter, we may send information regarding:
- new products;
- promotions;
- special offers;
- company news.
You may unsubscribe at any time using the unsubscribe link contained in every marketing email or by contacting us directly.
We do not send marketing emails without an appropriate legal basis.
11. Cookies & Similar Technologies
Our website uses cookies and similar technologies to improve functionality, analyse website performance, and deliver relevant advertising.
We use the following categories of cookies:
Essential Cookies
These cookies are necessary for:
- shopping cart functionality;
- checkout;
- account login;
- website security;
- fraud prevention.
These cookies cannot be disabled through our cookie banner.
Analytics Cookies
With your consent, we may use services including:
Google Analytics 4
These cookies help us understand how visitors use our website.
Marketing Cookies
With your consent, we may use technologies including:
Meta Pixel
TikTok Pixel
These services help us measure advertising performance and display relevant advertisements.
Marketing and analytics cookies are only activated after you provide your consent through our cookie preferences.
For more information, please refer to our Cookie Policy.
12. Third-Party Services
Our website may use trusted third-party providers, including:
- Stripe (payments)
- PayPal (when available)
- Google Analytics
- Google Search Console
- Meta
- TikTok
- Hostinger (website hosting)
- Shipping providers
Each provider processes personal information according to its own privacy practices.
13. International Transfers
Some of our service providers may process personal information outside the European Economic Area (EEA).
Where such transfers occur, appropriate safeguards are implemented in accordance with the GDPR, including the use of Standard Contractual Clauses or other approved transfer mechanisms where required.
14. Data Retention
We retain personal information only for as long as necessary.
Typical retention periods include:
- Information Retention Period
- Orders Up to 10 years (legal obligations)
- Customer accounts Until deleted by the customer or upon request
- Contact form enquiries Up to 24 months
- Newsletter subscriptions Until consent is withdrawn
- Analytics information According to configured retention settings
Where longer retention is required by law, we will comply with those obligations.
15. Security
We implement appropriate technical and organisational measures designed to protect your information against:
- unauthorized access;
- accidental loss;
- misuse;
- alteration;
- disclosure.
Although we employ industry-standard security measures, no method of electronic transmission or storage can be guaranteed to be completely secure.
16. Your Rights
Under the GDPR, you may have the right to:
- access your personal information;
- correct inaccurate information;
- request deletion;
- restrict processing;
- object to processing;
- withdraw consent;
- request data portability;
- lodge a complaint with your local supervisory authority.
Requests may be submitted to:
contact@josefwoodturner.com
17. Children’s Privacy
Our website is not intended for individuals under the age of 18 to make purchases.
We do not knowingly collect personal information from children without appropriate parental or legal guardian consent.
If we become aware that personal information relating to a child has been collected inappropriately, we will take reasonable steps to delete such information.
18. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect legal, technical, or business developments.
The most recent version will always be available on this website.
Your continued use of our website after changes have been published constitutes acceptance of the revised Privacy Policy.
19. Contact Us
If you have questions regarding this Privacy Policy or wish to exercise your privacy rights, please contact us:
Josef Woodturner
Email: contact@josefwoodturner.com
Telephone: +30 694 350 3388
Website: www.josefwoodturner.com