Privacy Policy

Puzzle Box is committed to protecting your privacy and complying with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and all applicable Greek data protection laws. This Privacy Policy explains how we collect, use, store and protect your personal data when you visit www.puzzlebox.gr or use our services.

Data Controller

The Data Controller responsible for the processing of personal data is Puzzle Box, operating the website www.puzzlebox.gr.

Personal Data We Collect

We may collect and process the following categories of personal data:

Identity data (name, surname, company name)
Contact data (email address, phone number, postal address)
Account data (login credentials, order history)
Transaction data (orders, payments, invoices)
Technical data (IP address, device, browser, cookies)
Marketing preferences and newsletter subscriptions

Legal Basis for Processing

Your personal data is processed only when at least one of the following applies:

Your explicit consent (cookies, newsletter, remarketing)
Performance of a contract (order processing, delivery, support)
Legal obligation (tax and accounting records)
Legitimate interest (security, fraud prevention, service improvement)

Use of Analytics & Advertising Tools

Puzzle Box uses third-party analytics and advertising tools only after your consent:

Google Analytics (GA4) – for anonymous statistical analysis of website traffic and user behavior.
Meta Ads (Facebook Pixel & Conversion API) – for measuring ad performance and delivering relevant advertisements.
Google Ads – for conversion tracking and remarketing campaigns.

These tools may collect information such as IP address, device, browser and interaction data. Data is processed only after cookie consent and may be transferred outside the EU under Standard Contractual Clauses (SCCs).

Newsletter & Marketing Communication

If you subscribe to our newsletter, we will use your email address to send you updates, promotions and news about Puzzle Box. Subscription is based solely on your explicit consent and you may unsubscribe at any time using the link included in every email.

Cookies & Consent Management

We use cookies and similar technologies for website functionality, analytics and advertising. Non-essential cookies (analytics and marketing) are activated only after your consent via the cookie banner. You may change or withdraw your consent at any time.

Recipients of Personal Data

Your personal data may be shared with trusted service providers such as:

Payment providers (banks, PayPal)
Shipping companies
Hosting and IT service providers
Email marketing platforms
Analytics and advertising platforms (Google, Meta)

All partners process data under contractual obligations and GDPR compliance.

Data Retention Period

We retain personal data only for as long as necessary for the purposes for which it was collected or as required by law. Marketing data is retained until consent is withdrawn.

Your Rights under GDPR

You have the right to:

Access your personal data
Request correction or deletion
Restrict or object to processing
Withdraw consent at any time
Request data portability
File a complaint with the Hellenic Data Protection Authority

Security of Personal Data

We apply appropriate technical and organizational measures (SSL encryption, access control, secure servers) to protect your personal data from unauthorized access, alteration or loss.

Personal Data of Minors

Puzzle Box does not knowingly collect personal data from children under 13 years of age. If such data is identified, it will be deleted immediately.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on www.puzzlebox.gr. We encourage you to review this policy periodically.