Privacy Policy

Privacy Policy & Personal Data Protection (GDPR)

The protection of your personal data is our priority. The data controller is the Company for the Utilisation and Management of the Property of the University of Athens S.A., Akadimias 33, 106 72 Athens, tel. (+30) 210-3688199, email store@uoa.gr.

What Data We Collect

When using the eshop we collect personal information such as:

  • Full name
  • Email address
  • Phone number
  • Postal address

For orders placed by a company, additional information is required (company name, VAT number, tax office, business activity).

Your card details are not stored by the company — the transaction takes place directly on the Nexi XPay platform (see Transaction Security).

Use of Data

Data is used exclusively for the completion of transactions and is not shared with third parties, except where required by law or to fulfil the order (e.g. courier partners).

Legal Basis for Processing

  • Performance of contract: for the completion of your orders.
  • Compliance with legal obligation: for tax and accounting records (Greek Law 4308/2014).
  • Legitimate interest: for website security and fraud prevention.
  • Consent: for optional marketing communications, where applicable.

Retention Period

We retain order data for 10 years due to tax obligations. Contact data is deleted upon your request or after 5 years of inactivity.

Your Rights (GDPR)

You have the right to access, correct or delete your personal data in accordance with the provisions of Greek Law 4624/2019 and the GDPR:

  • Access to the data we hold about you
  • Rectification of inaccurate data
  • Erasure (“right to be forgotten”)
  • Restriction of processing
  • Data portability
  • Objection to processing
  • Withdrawal of consent at any time

To exercise your rights, contact store@uoa.gr. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

Cookies Policy

The website uses cookies for:

  • Improving the user’s browsing experience
  • Collecting anonymous statistics that help us improve our services
  • Providing personalised services and content

Users can manage or disable cookies through their browser settings, although disabling them may affect certain functions of the website.

Use of Artificial Intelligence

In compliance with Regulation (EU) 2024/1689 (AI Act) and the Greek implementing law, we inform you as follows:

In the operation of the website towards you

store.uoa.gr does not use any Artificial Intelligence system for interaction with visitors and customers. Specifically:

  • No chatbot or AI-powered virtual assistant is in operation.
  • Product recommendations shown (e.g. “related products”, “you may also like”) are based on predefined ranking rules (category, tags, manually associated products), not on machine learning or algorithmic personalisation.
  • No automated decision is made that affects you as a customer (pricing, discounts, exclusions, credit assessment, fraud risk scoring).
  • AI is not used to generate content published to you.
  • No biometric recognition, emotion recognition, or similar technology is used.

Consequently, no Article 50 AI Act transparency obligations apply requiring additional notice to you during your use of the website.

In technical administration and development

The website’s technical administrator uses Artificial Intelligence tools solely as a programming, code review, and maintenance assistant, under full human oversight. Every change to the website is reviewed and approved by the administrator before deployment.

Your personal data is not exposed to these tools for profiling, analytics, or model training purposes. Limited access to data (e.g. inspection of log files for troubleshooting) occurs only for a specific legitimate purpose and to a minimal extent.

Future changes

If any AI system is added in the future to the shop’s operation, this Policy will be updated explicitly before its activation. You will receive clear information and, where legally required, the ability to object or provide consent.

Supervisory Authorities

  • Hellenic Data Protection Authority (HDPA) — central supervisory authority for AI Act and GDPR in Greece: www.dpa.gr, tel. 210-6475600
  • National Telecommunications and Post Commission (EETT) — notifying authority under AI Act: www.eett.gr

For questions regarding the use of Artificial Intelligence, please contact store@uoa.gr or the DPO of the National and Kapodistrian University of Athens at dpo@uoa.gr.

Last updated: 6/8/2026

Secure payments via:

Accepted payment cards: Visa, Mastercard, Maestro, Discover, Diners, Google Pay, Apple Pay, IRIS — via Nexi XPay