Privacy policy

Last updated: 25 October 2026

This policy explains how Brandsamsara uses your personal data when you shop with us in our store, at our events or on brandsamsara.com, when you consign pieces with us, and when you receive our news. If anything is unclear, write to us at contact@brandsamsara.com.

1. Who we are

Brandsamsara is the trade name of the sole proprietorship of Athanasios Papathanasiou, VAT no. (ΑΦΜ) 077056998, G.E.MI. no. 066578503000, Holargos Center, 1st floor, 56 Leoforos Perikleous, 155 61 Cholargos, Athens, Greece (“Brandsamsara”, “we”). We are the controller of your personal data for our store, our events, brandsamsara.com, our consignment service, and our emails, text messages and calls.

Contact: contact@brandsamsara.com · +30 210 6522735.

2. What data we collect

• Identity and contact details: first and last name, email address, mobile and other phone numbers, postal and delivery address.
• Purchases: what you bought (piece, brand, category, size), when, where (store, event, website), the amount and how you paid. We never see or store your full card number: payments are handled by our payment providers.
• Consignment: the pieces you bring us, their evaluation, price and sale, and the payments we make to you, including the bank or PayPal details you give us for those payments.
• Your preferences: sizes, brands and pieces you are looking for, and how you prefer to be contacted.
• Your choices about our news: whether you agreed to receive our emails or text messages, when and how (the form, the exact wording you saw, the date and time, the device, the staff member who helped you, the checkout box, or your answer in our store), and any request to stop.
• What we work out: your total purchases, number of purchases, last purchase date, and your customer status.
• Notes from our contact with you: emails, messages and calls about your orders, pieces or requests.
• How you read our emails: whether you open them and which links you click.
• What you do on brandsamsara.com: if you accept cookies and we know your email (because you signed up or ordered), the pieces you look at and what you leave in your basket or at checkout.
• Website data: information collected by cookies and similar technologies, as shown in our cookie banner.

Where it comes from: from you (in our store, at events, through our forms, at checkout, by email, phone, Instagram, WhatsApp or Viber), from your purchases and consignments with us and from our payment providers (confirmation of payment).

What you must give us: to buy online we need your name, email, delivery address and a phone number for the courier; to consign we need your name, contact details and the account for your payments. Greek tax law requires some of these details on invoices. Without them we cannot complete the order or the consignment. Everything else, including signing up for our news, is optional: you can buy from us without it.

3. Why we use your data and on what legal basis

What we do	Legal basis (GDPR art. 6)
Process your orders, deliveries, returns and purchases in our store	Contract
Run the consignment service: evaluate, display and sell your pieces, keep you informed, pay you	Contract
Keep invoices and accounting records	Legal obligation
Keep a customer record with your purchases (including purchases in our store), preferences and our notes	Legitimate interest: to know our customers and serve you personally
Send you our news (new pieces, events, offers) by email or text message, because you asked for it: on one of our forms, with the box at checkout, on Instagram, on our earlier newsletter, or by saying yes in our store	Consent
If you bought from us in our store or at our events: email you our news about pieces like the ones you bought, unless you told us no when you bought or at any time since. By email only, never by text message. Online orders: only if you ticked the box at checkout	Legitimate interest and Law 3471/2006 art. 11(3)
Send you a reminder about pieces you looked at or left in your basket or at checkout, and a follow-up after an order, only if you receive our news	The same basis as our news, and your consent to the cookies that make it possible
Group our customers by how recently and how much they buy (your customer status), so that our team can look after regular customers personally, for example with a call, a message or an invitation. It never sends you automatic emails and no decision about you is made by a computer alone	Legitimate interest: to look after our regular customers personally
Measure whether our emails are opened and which links are clicked, to send fewer and more relevant emails	Legitimate interest
Keep a record of what you agreed to or refused, when and with which wording	Legal obligation (GDPR art. 7(1)) and legitimate interest: to respect your choices
Protect our sign-up forms from abuse (we keep a coded form of your network address, not the address itself)	Legitimate interest: to keep our forms safe
Cookies that are not strictly necessary on brandsamsara.com (statistics, advertising)	Consent, through the cookie banner
Protect our rights, prevent fraud and defend legal claims	Legitimate interest: to protect our business and our customers

4. Our emails, text messages and calls, and how to stop them

• Email: every email has an “Unsubscribe” link at the bottom. Using it stops our marketing emails.
• Text messages (SMS): they come from BRNDSAMSARA, and every marketing SMS has a link to stop them.
• Phone: we sometimes call customers we know, for example about a piece you were looking for or an invitation. Tell us during the call, or at any time, and we will not call you again for this. Before a promotional call we check the telephone companies’ “do not call” registers (Law 3471/2006 art. 11), unless you have told us you want our calls.
• In our store: tell us you do not want our news («Μη μου στέλνετε»). We record it and stop our emails, text messages and calls about offers.
• Any time: write to contact@brandsamsara.com.

Stopping our news does not affect messages about your orders or consigned pieces. We send at most two marketing emails in any 7 days. Our emails contain a small invisible image and tracked links that tell us whether you opened an email and what you clicked; to avoid this, turn off automatic image loading in your email app, or unsubscribe. Reminders about your basket or checkout stop when you unsubscribe or refuse cookies.

5. Signing up in our store and at our events

In our store and at our events we ask whether you would like to receive our news. If you say yes, you fill in our sign-up form on our tablet or your phone, or we fill it in with you. For emails you then confirm with the link we email you; nothing is sent before you confirm. If you tick the text message box, we add your mobile to our SMS list. If you say no, we record it and do not send you our news, even if you buy from us again, unless you later sign up yourself.

Before October 2026, when you said yes in our store, our staff recorded your email and mobile in our customer records. We keep treating that answer as your agreement until you tell us otherwise.

6. Who receives your data

We share your data only as far as each recipient needs it.

• Service providers that work for us under a contract and only on our instructions: our online store and checkout platform; our email and text message services; our customer records (CRM) software; our accounting software; our email, cloud hosting and internal tools.
• Others who use your data under their own responsibility: payment providers and banks, which handle your card or payment details directly; courier companies, for deliveries; our accountants and legal advisers, who are bound by confidentiality; and public authorities, only when the law requires it.
• Website analytics, advertising and review providers: only if you accept those cookies in our cookie banner. They receive information about your visit and use it under their own policies.

We never sell your data, and we never give your email or phone number to other businesses for their own marketing.

7. Data outside the European Union

Some of our providers store or access data in the United States, the United Kingdom, Canada, New Zealand or Australia. We use them only with a safeguard the GDPR recognises: a European Commission adequacy decision (United Kingdom, Canada, New Zealand), the EU-US Data Privacy Framework for US companies certified under it, or the European Commission’s Standard Contractual Clauses in every other case. Ask us at contact@brandsamsara.com which safeguard applies and for a copy of it.

8. How long we keep your data

• Invoices and accounting records: as long as tax law requires (in Greece, at least 5 years, and longer when the law requires it).
• Orders and consignments: for as long as needed for the order or the consignment agreement, and afterwards until any related claims are time-barred.
• Your customer record: for as long as you shop, consign or are in touch with us, and afterwards for as long as it helps us serve you if you come back. You can ask us to delete it at any time (section 9).
• Our news: until you stop them.
• Records of your consent: for as long as you receive our news and for 5 years after, so that we can show that you had agreed.
• Requests to stop or to delete: for as long as needed to respect them. After you unsubscribe we keep your email on a “do not send” list, so that we never email you by mistake. After a deletion we keep only what tax law requires (invoices) and a coded (hashed) form of your email and mobile, not the address or number itself, so that an old sale cannot bring your record back.
• Cookies: for the time shown in the cookie banner, or until you withdraw your consent or clear them from your browser.

9. Your rights

Your right to object. You can object at any time to our use of your data for direct marketing, including your customer status (section 3) and our calls, and we will stop. You can also object to any other use based on our legitimate interest, for reasons related to your situation; we will stop unless we have compelling reasons or need the data for a legal claim.

You also have the right to:

• access your data and receive a copy;
• correct inaccurate data;
• delete your data, for example when we no longer need it, when you withdraw your consent or when you object; we keep only what the law requires (such as invoices) and the coded trace in section 8;
• restrict how we use your data, for example while we check a request of yours or when you need the data kept for a legal claim;
• receive the data you gave us in a common format, or have it sent to another business, when we use it on the basis of your consent or a contract;
• withdraw your consent at any time, without affecting what was done before;
• not be subject to a decision made only by a computer that has legal or similarly significant effects on you; we make no such decisions.

Write to contact@brandsamsara.com or tell us in our store. We reply free of charge within one month (up to two more months for complex requests; we tell you within the first month). We may ask you to confirm your identity.

If you are not satisfied with our answer, you can complain to the Hellenic Data Protection Authority, 1-3 Kifisias Avenue, 115 23 Athens, tel. +30 210 6475600, complaints@dpa.gr, www.dpa.gr, or to the data protection authority of the EU country where you live or work.

10. Security

Only people who need your data for their work can see it. Our staff screens are protected by a PIN, and our providers use encrypted connections and access controls.

11. Children

Our shop and our consignment service are for adults (18 or over). Our sign-up forms are not meant for children: under Greek law (Law 4624/2019 art. 21) a child under 15 cannot agree alone to receive our news, so we do not knowingly sign up anyone under 15. If you think a child has given us their details, write to us and we will delete them.

12. Changes to this policy

We update this policy when our practices change. The date at the top shows the latest version. If a change matters to you, we will tell you by email or on our website before it applies.