Privacy Policy
At wox.gr we respect your privacy and treat the protection of personal data with special care.
This Privacy Policy explains what data we may collect, why we use it, to whom it may be disclosed, how long it is retained, and what rights you have under the applicable data protection law.
Data controller
The data controller for personal data is VSL-STORES E.E..
Head office: Attaleias 14, P.C. 26334, Patra, Greece
VAT: 802008702 · GEMI: 168057716000
Contact email: info@wox.gr
1. What personal data we may collect
Depending on how you use wox.gr and our services, we may process different categories of personal data.
Card details
wox.gr does not store the full details of your credit or debit card.
Card payments are made through secure systems of partner payment providers or financial institutions, who process the necessary data according to their own security standards and legal obligations.
2. Why we use your data
We use personal data only when necessary for a specific purpose and with an appropriate legal basis.
3. Legal bases for processing
Depending on the purpose, processing may be based on one or more of the following legal bases:
4. To whom data may be disclosed
For the operation of the online store and the performance of our services, we may need to disclose specific data to partners and service providers.
Disclosure is limited to the information necessary for each service.
Personal data may also be disclosed to public, administrative, tax, police or judicial authorities, when required by law or upon a legitimate request.
We do not sell your personal data
VSL-STORES E.E. does not sell customer personal data as a marketable data file to third parties.
The transfer of information to partners occurs only when necessary for specific services, for legitimate business purposes or where required by law.
5. Transfer of data outside the European Economic Area
Some technological providers used for the operation of the online store may process data in countries outside the European Economic Area.
When such a transfer takes place, the appropriate mechanisms and safeguards provided for by applicable law are applied, such as adequacy decisions or approved contractual clauses, where required.
6. How long we retain data
We retain personal data only for as long as it is necessary for the purpose for which it was collected, taking into account the obligations imposed by law.
Orders and transactions
Related data is retained for the period required for order fulfillment, after-sales service, any returns or warranties and for as long as required by tax, accounting or other legal obligations.
Customer account
Data related to a customer account may be retained as long as the account remains active and for as long as required by legal obligations after its deletion.
Communication & support
Communication records may be retained for as long as needed for managing the request, serving the customer, managing warranty or protecting legitimate claims.
Marketing
Data used based on consent for marketing is retained until consent is withdrawn or you unsubscribe, unless there is a different legal basis for retention.
Where possible and appropriate, data may be anonymized for statistical or analytical use, in which case it no longer constitutes personal data that can be linked to a specific individual.
7. Security of personal data
We take appropriate technical and organizational measures to protect personal data from unauthorized access, loss, destruction, alteration or unlawful use.
Access to data is granted only to persons and partners who need it for a specific business purpose and are subject to the corresponding confidentiality and data protection obligations.
Although security measures are implemented, no electronic transmission or data storage can be considered absolutely free from all risks.
8. Your rights
According to the General Data Protection Regulation and applicable law, you may have the following rights, depending on the case:
How to exercise your rights
For requests for access, rectification, erasure, restriction, objection or other data protection matters, you can contact us at info@wox.gr.
To protect your data, we may need to verify your identity before completing a request.
Requests are processed within the deadlines provided by current legislation. In the case of a particularly complex request, the deadline may be extended as provided by law.
Submit privacy request9. Right to lodge a complaint
If you believe that the processing of your personal data violates applicable law, you have the right to contact the competent supervisory authority.
In Greece, the competent authority is the Hellenic Data Protection Authority.
You can also contact us first at info@wox.gr, so that we can examine the matter and try to resolve it.
10. Cookies and similar technologies
wox.gr uses cookies and similar technologies for the proper functioning of the e-shop and, depending on your choices, for analysis, experience improvement and advertising purposes.
Essential cookies
They are necessary for basic e-shop functions, such as the cart, checkout, security and the operation of the customer account.
Functional and analytical cookies
They can be used to measure website usage, understand visitor behavior and improve functionality and user experience, according to the available consent options.
Advertising cookies
They can be used to measure advertising effectiveness and to display more relevant content, when you have given the required consent.
You can manage the available privacy options and cookies through the consent mechanism displayed on wox.gr and, additionally, through your browser settings.
11. Commercial communication & newsletters
If you have chosen to receive commercial updates, we may use your contact details to send newsletters, offers or product updates.
You can stop receiving such messages at any time through the unsubscribe link included in the relevant communications or by contacting us.
Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
12. Data of minors
The e-shop is not specifically aimed at children and we do not knowingly seek to collect personal data of minors without the required legal basis or parental consent, where required.
If you become aware that we have been given personal data of a minor without the required conditions, you can contact us to examine the issue.
13. Changes to the Privacy Policy
This Policy may be updated when our services, the technologies used, business processes or the relevant regulatory framework change.
The current version is published on this page. We recommend that you check it periodically for updates.
Last updated: August 2026
Questions about your personal data?
The wox.gr team is available for questions regarding this Policy, the protection of your data or the exercise of your rights.