COSSELIE L.P. respects your personal data. Here we explain in plain language what data we collect when you visit or shop at cosselie.com, why we collect it, who we share it with, how long we keep it and what rights you have. This policy follows the General Data Protection Regulation (EU) 2016/679 (GDPR) and Law 4624/2019.
1. Who is responsible for your data
The data controller is COSSELIE L.P.
- Registered office: Tompazi 30 & Kountourioti 52, 55535 Pylaia, Thessaloniki
- VAT No. 801761777, Tax Office: Z' Thessaloniki, G.E.MI. No. 162851706000
- Email: contact@cosselie.com · Phone: 2310 489452
For any question or request about your data, write to us at contact@cosselie.com.
2. What data we collect
- Order details: full name, shipping and billing address, email, phone, the products you bought, shipping and payment method, order notes.
- Invoicing details, if you request an invoice: company name, VAT No., Tax Office, profession, registered address.
- Payment details: we never see or store your card number. Payment is made directly in the provider's secure environment (Viva, PayPal, Klarna). We only receive the confirmation and the transaction ID.
- Customer account, if you create one: email, name, saved addresses, order history, wishlist. You log in without a password, using a link or a one-time code sent to your email, or via Google, Facebook or Apple if you choose to. In that case we receive only your name and email from the provider, never your password.
- Digital contact card, if you activate it: the details you choose to show on it (e.g. phone numbers, job title, website, social). Only what you choose is public.
- COSSELIE Creator Program: if you came to the site through a creator's link and have accepted Marketing cookies, we record for 30 days which link you came from, so that the sale is credited to that creator. The creator does not see your details. For those taking part in the program, the Participation Terms also apply.
- Your location: the “Near me” feature on the stores page uses your location only if you allow it in your browser, and only on your device. We do not store it or receive it.
- Communication: anything you send us by email, phone, forms (e.g. contact form, return or exchange form), Viber or social media messages. In the contact form: name, email, subject, message and, if you provide them, phone number and order number.
- Reviews: name, rating, text and photos you choose to publish.
- Newsletter and Viber: email or mobile number and your preferences, only if you sign up.
- Browsing data: IP address, device and browser type, pages you visited and actions on the site. Data collected through cookies for analytics and advertising is collected only with your consent (see our Cookie Policy).
- COSSELIE Creators: if you apply to the program: the application details, your social media profiles, the clicks and sales from your links, and the payment details for commissions.
3. Why we use it and on what legal basis
| Purpose | Legal basis |
|---|---|
| Fulfilling your order: payment, shipping, progress updates, returns, exchanges and warranty | Performance of a contract (Article 6(1)(b) GDPR) |
| Issuing a receipt or invoice, transmission to AADE (myDATA), keeping accounting records | Legal obligation (Article 6(1)(c)) |
| Customer service and replies to your messages | Performance of a contract, or legitimate interest in replying to you (Article 6(1)(b), (f)) |
| Invitation to leave a review after delivery | Legitimate interest; you can opt out with one click in every email |
| Fraud prevention, site security, protection of our rights | Legitimate interest (Article 6(1)(f)) |
| Newsletter, Viber and personalized offers | Consent (Article 6(1)(a)), which you can withdraw at any time |
| Emails about similar products to existing customers | Legitimate interest (Article 11 of Law 3471/2006); unsubscribe with one click in every email |
| Traffic statistics, ad measurement and ad personalization | Consent via the cookie banner |
| Running the COSSELIE Creators program and paying commissions | Performance of a contract and legal obligation |
We do not make decisions about you based solely on automated means. If you choose Klarna, Klarna may carry out its own credit check, as an independent controller and under its own policy.
4. Who we share your data with
We never sell personal data. We share it only as far as necessary, with:
- Shipping companies: ELTA Courier, Geniki Taxydromiki, BOX NOW and Wolt (name, address or locker, phone, email, cash on delivery amount).
- Payment providers: Viva (cards, Apple Pay, Google Pay, IRIS), PayPal and Klarna.
- Tax authorities and accounting office: AADE (myDATA), our e-invoicing provider and our accountant.
- Technical partners: the site's hosting provider, our email delivery provider, review tools, Viber (Rakuten Viber).
- Analytics and advertising tools, only with your consent: Google (Analytics, Ads), Meta (Facebook, Instagram), TikTok, Microsoft (Clarity), Glami, Linkwise.
- Public authorities, when they request it in accordance with the law.
Anyone who processes data on our behalf is contractually bound to protect it and to use it only for the purpose for which we provide it.
5. Transfers outside the European Union
Some providers (e.g. Google, Meta, TikTok, Microsoft, PayPal) may process data outside the European Economic Area. In these cases the transfer is made with the safeguards of the GDPR: an adequacy decision of the European Commission (e.g. EU–US Data Privacy Framework) or standard contractual clauses.
6. How long we keep data
- Orders, receipts and invoices: as long as tax law requires, as a rule 5 years from the end of the financial year, and longer if an audit or dispute is pending.
- Customer account: until you ask us to delete it. Your order details are kept for as long as the law requires.
- Newsletter and Viber: until you unsubscribe.
- Customer service messages and return requests: up to 2 years from resolution, so that the legal guarantee is covered.
- Messages from the contact form: we use them only to reply to you, and they are automatically deleted from the site 12 months after they are sent. If the message concerns an order, a return or a warranty, the related correspondence is kept in the same way as customer service messages.
- Cookies: as long as set out in the Cookie Policy.
- COSSELIE Creators: for the duration of the collaboration, and afterwards as long as tax law requires for the payments.
7. Your rights
You have the right:
- to access your data and get a copy of it,
- to rectify anything that is inaccurate or incomplete,
- to erasure, except for what we must keep by law,
- to restrict processing,
- to portability, meaning to receive your data in a machine-readable format,
- to object to processing based on legitimate interest, and always to direct marketing,
- to withdraw your consent at any time, without affecting anything done before.
To exercise them, write to us at contact@cosselie.com. We reply within one month. We may ask you to confirm your identity. If you have an account, you can also change your details from the “My account” page. You can unsubscribe from the newsletter with one click at the bottom of every email.
If you believe we have not respected your rights, you can file a complaint with the Hellenic Data Protection Authority (Kifisias 1-3, 115 23 Athens, www.dpa.gr). But we'd be glad if you wrote to us first, so we can solve it together.
8. Security
The site runs exclusively over an encrypted connection (HTTPS/TLS). Access to data is granted only to those who need it for their work. Card payments are made in the certified environment of the payment providers (PCI DSS), not on our own servers.
9. Embedded third-party content
Some pages contain videos or other content from third parties, such as YouTube, Instagram and TikTok. This content behaves as if you were visiting the third party's website directly, and it loads only with your consent.
The map on the “Our physical side” page is loaded from OpenStreetMap. When you open it, your browser communicates with its servers (e.g. with your IP address), without cookies.
10. Minors
cosselie.com is intended for adults. We do not knowingly collect data from children under 15 without the consent of a parent or guardian.
11. Changes
When we change this policy, we update the date at the bottom of the page. For significant changes we also notify you by email, if we have your details.
Last updated: 22 October 2026
