Privacy & Cookie Policy
Last updated 29 August 2026This policy explains what happens with your personal data when you visit this website. It is written to comply with the EU General Data Protection Regulation (GDPR, Regulation 2016/679), Greek Law 4624/2019 and Greek Law 3471/2006 on electronic communications (cookies).
1. Who is responsible (data controller)
The controller of any personal data processed through this website is the business operating the SCARS brand:
Business name:
[SCARS — legal name / owner]Address:
[street, postcode, Athens, Greece]Tax ID (ΑΦΜ):
[…] · Tax office (ΔΟΥ): […] · GEMI no.: […]Contact: Instagram @scars.cl · Phone 694 690 4305 · Email for privacy requests:
[privacy@yourdomain]2. What this website is
This is an informational website presenting our clothing. No purchases are made through it, no account is created and no payment data is ever collected here. To buy a piece you contact us on Instagram or by phone; any data you share there is handled by those channels and by us as described below.
3. What data we collect and why
| Data | Purpose | Legal basis | Kept for |
|---|---|---|---|
| Technical server logs (IP address, browser type, time, pages requested), generated by our hosting provider Vercel when the site is delivered to you | Delivering the site securely, preventing abuse | Legitimate interest (Art. 6(1)(f) GDPR) | Short-term, as per the hosting provider's retention |
| Your cookie choice | Remembering whether you accepted optional cookies | Legitimate interest / your choice | 6 months, in your browser only |
| Name, phone number, Instagram handle and messages you send us when you contact us | Answering you, arranging an order or delivery | Steps prior to a contract (Art. 6(1)(b)) and legitimate interest | As long as needed to handle your request and any order, then deleted; invoices as required by Greek tax law |
We do not sell personal data and we do not use it for automated decision-making or profiling.
4. Hosting and third parties
The website is hosted by Vercel Inc. (USA/EU edge network). Vercel processes the technical data above on our behalf under its Data Processing Agreement, which includes the EU Standard Contractual Clauses for any transfer outside the EEA. Fonts and scripts are served from our own hosting — your browser does not contact Google or other font/script providers when you load this site.
Links to Instagram (Meta Platforms Ireland Ltd.) open Instagram's own site or app. Once there, Meta's privacy policy applies. We do not embed Instagram content or Meta pixels on this site.
5. Cookies and similar technologies
Under Greek Law 3471/2006 (Art. 4 §5) and the Hellenic Data Protection Authority's guidance, non-essential cookies are only set with your prior consent. Our approach:
| Type | Name | What it does | Consent? |
|---|---|---|---|
| Strictly necessary | scars-consent (browser local storage) | Stores your cookie choice so we don't ask again. Contains no personal data and is never sent to a server. | Not required |
| Analytics (optional) | Currently none installed. If we add analytics in the future (e.g. Google Analytics, _ga cookies), they will run only after you click "Accept all", with IP anonymisation enabled. | Measuring which pieces get attention | Required |
| Advertising | None. We do not use advertising or retargeting cookies. | — | — |
You can change or withdraw your choice at any time by clicking "Cookies" in the footer of the site, or by clearing your browser's site data. Withdrawing consent does not affect the site's functionality.
6. Your rights
Under the GDPR you have the right to access, rectify or erase your personal data, to restrict or object to processing, to data portability, and to withdraw consent at any time. To exercise them, contact us using the details in section 1. We will respond within one month.
You also have the right to lodge a complaint with the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα): Kifissias 1-3, 115 23 Athens · www.dpa.gr · +30 210 6475600.
7. Security
The site is served exclusively over HTTPS. We collect as little data as possible so that there is as little as possible to protect.
8. Children
This site is not directed at children under 15 (the age of digital consent in Greece under Law 4624/2019) and we do not knowingly collect their data.
9. Changes
We may update this policy. The date at the top shows the latest version. Material changes will be flagged on the site.