Privacy Policy
The website “www.sohottcg.com” belongs to the company with the name Spanos Ioannis and the distinctive title SoHotTCG, with registered office Serifou 30, Cholargos 15562 , with VAT number EL153555606 and with Commercial Registry number 171583303000, tel. 6977000690, email: shop@sohottcg.com (hereinafter referred to as “the Company”), which company is also the Data Controller of the Personal Data of the visitors/users of the website.
The management and protection of the visitor/user’s personal data is subject to the terms of this Policy as well as the relevant provisions of Greek and European law (in particular the EU General Data Protection Regulation 2016/679).
This Privacy Policy may be modified at any time and without notice. The current version of the Policy will be posted on the website in order to inform the visitor/user. For this reason, each visitor/user of the website is requested to check the Policy periodically.
If any visitor/user does not agree with the applicable terms of this Policy, they must not use the website.
1. What data do we collect and for what purposes do we process it?
When you visit/use the website, we collect and process your personal data which is relevant, adequate, necessary and no more than is required for the purposes listed below, in each case:
i) Placing an order with the e-shop:
In case you place an order with our e-shop, either as a registered customer/member of our website (if applicable) or as a “visitor”, we collect and process the personal information you provide to us, namely as applicable: your name and surname, electronic address (email), billing postal address, shipping postal address, telephone number, profession, VAT number and Tax Office (the last three in case you choose the issuance of an invoice), for the purpose of:
– Managing your order, communicating and informing you about product availability, the progress and execution of the order, sending the products to the address you indicate, making returns of our products and in general for fulfilling our obligations towards you. The legal basis for this processing is the execution of the contract between us for the sale and delivery of the products you ordered and for subsequent support from us in relation to your order and the products you purchased from us.
– Our compliance with the obligations imposed by applicable law, e.g. the obligation to issue a receipt/invoice for your order. The legal basis for this processing is our compliance with our legal obligations.
– Maintaining and managing order history in the company’s internal systems, with the data that is absolutely necessary for this purpose. The legal basis for this processing is our legitimate interest for the purposes of internal control and order monitoring, for the future improvement of order handling services and in general for the optimal operation of the company.
– The management of any kind of your debts to the store, the exercise of our potential legal or contractual claims and our defense against any claims of yours or third parties. The legal basis for this processing is our legitimate interest in ensuring our above legal rights.
ii) Contacting our Company (e.g. via the contact form or by email etc.):
In the event that you send us any kind of message using the available contact form on our website or via email or telephone or otherwise, we will collect and process the personal information that you provide to us (i.e., the content of your message itself, your full name, your profession, email, telephone, postal address, etc.) for the purpose of:
– The response to your message/question or the satisfaction of any of your requests. The legal basis for this processing is the consent you provide by sending your message.
– The provision and improvement of our professional services, the search for potential partners, the establishment, exercise, support and defense of our rights and legal claims and the general safeguarding of our legitimate interests. The legal basis for this processing is our legitimate interest in achieving the aforementioned purposes and in safeguarding our legitimate rights.
iii) Information we obtain from automatic technological means (cookies etc.)
We may collect data regarding the use of the website, such as your IP address , domain name, browser version and operating system, device type, web logs, etc, but not visitors’ email addresses (unless you provide them to us). Please also see the detailed Cookies Policy.
iv) Data collected on third-party websites
The website may provide referral links (“links”, “hyperlinks”, advertising “banners”, etc.) towards websites managed by third parties. If you visit one of these websites, you should read the privacy policy of each website, the terms and conditions of use and their other policies. We are not responsible for the policies and practices of third parties. For any damage caused to the visitor/user by accessing and using the aforementioned websites, the persons who own and manage these websites bear sole responsibility.
2. Who do we share your personal data with?
For the purposes of providing you with the best possible service, managing and sending any orders you may have, sending commercial communications and advertising our business, as well as protecting our legitimate interests, we may share your personal data that is necessary to fulfill these purposes with our third-party partners (such as our IT partner for managing the website, cooperating courier companies for product deliveries, our partner for sending newsletters, our accountants, etc.).
The processing of your personal data by our direct partners is carried out only on our instructions and under conditions of confidentiality and is subject to at least the same level of personal data protection as that provided by this policy.
Your personal information is not sold or shared for other purposes with other third parties, except for our partners to whom we share the personal data that is necessary for the performance of the respective task we have assigned to them, or unless otherwise required by our legal obligations.
Your Personal Data may be transferred to, stored and processed outside the European Economic Area (EEA). In this case, we ensure that the recipient of the data provides an adequate level of protection of personal data, and, where necessary, we ensure the signing of specific contractual clauses for the transfer of data to third countries.
3. How long do we keep your data?
Your personal data is retained only for the period of time required to achieve the respective purposes of their collection and processing, and up to five (5) years from your last communication or transaction with our Company, and is deleted after this period. However, cases defined differently by applicable law regarding our compliance with our legal obligations or for the exercise of our legal claims or for our defense against any claims of yours or third parties are excluded, in which the respective legal deadlines apply as the data retention period. In the case of subscription to the newsletter, your email is retained until you unsubscribe from the newsletter.
4. What security measures do we apply?
We process your data by taking appropriate technical and organizational measures for their security and complying with the provisions of applicable legislation. To achieve the security of the website:
- SSL encryption is used across the entire website to protect data in transit.
- Firewall and malware protection is actively maintained through a dedicated security plugin, which monitors and blocks malicious traffic.
- Access to customer data is strictly limited to authorized personnel only.
- Payment security: All payments are processed via Viva.com (http://viva.com/)’s secure, hosted checkout environment. No card or payment data is stored on or transmitted through our website.
5. What are your rights?
Under the specific conditions, limitations and exceptions of the relevant legislation (in particular EU Regulation 2016/679 and Greek Law 4624/2019), and without prejudice to the existence of specific legitimate reasons justifying the non-satisfaction of certain rights, you have the right to request us in writing for specific actions regarding your personal data, such as the following:
- Right of access: You have the right to obtain confirmation as to whether or not we are processing personal data concerning you and, if so, you have the right to obtain a copy of the personal data being processed.
- Right to rectification: You have the right to request the correction or completion of inaccurate or incomplete personal data concerning you. In any case, we urge you to inform us of any change to any of your personal information, so that it is always accurate for the period during which we retain it.
- Right to restriction of processing: You have, in certain cases, the right to request the restriction of the processing of your data.
- Right to object: In cases where the legal basis for processing is our legitimate interest, you have, in certain cases, the right to object to the processing of personal data concerning you.
- Right to withdraw consent: In cases where the processing of your data is based on consent, you have the right to withdraw your consent to the processing of part or all of your data, without however affecting the lawfulness of the processing based on consent, before its withdrawal.
- Right to erasure: You have, in certain cases, the right to request the deletion of personal data we hold about you.
In the event that your personal data is necessary for the performance of a contract concluded with you, or for compliance with our legal obligations, or for the establishment, exercise or support of legal claims, or for any other legitimate reason, our company has the right to reject the request for the satisfaction of any of your above rights, as the case may be, with justification, and to inform you accordingly.
We also inform you that in the event that, following your request to exercise any of your above rights, deletion of your data or restriction or cessation of processing takes place, we may not be able to provide you with specific services or products, depending on the case.
You can exercise your rights by contacting our company by email (see our email at the end of this Policy), and we will respond to you without delay, and in any case within one (1) month from the date we receive your request. If your request is complex or there are a large number of your requests, we will inform you within the above period if we need to obtain an extension within which to respond to you. In the event that your requests are manifestly unfounded or excessive, in particular due to their repetitive nature, the company reserves the right to impose the payment of a reasonable fee, taking into account the administrative costs of providing the information or performing the requested action, or to refuse to follow up on the request.
Right to lodge a complaint with the supervisory authority: If you believe that our processing of your personal data violates applicable data protection legislation, you have the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for Greece is the Hellenic Data Protection Authority (HDPA), located at 1-3 Kifissias, 115 23, Athens, tel. 210 6475600, www.dpa.gr.
Users under 18 years of age
The website is intended for adults and if you are under the age of 18, you must obtain the consent of your parents or guardians before providing us with any personal data.
Contact us
If you have any questions or requests regarding the use of your personal data or any questions regarding this Privacy Policy, please contact us.
Contact Details:
Company name: Spanos Ioannis
Address: Serifou 30, Cholargos 15562
Telephone: 6977000690
Email : shop@sohottcg.com
This policy was revised on 31/03/2026