Last updated: 1 September 2026

This Privacy Policy explains in plain language which personal data we process when you visit joytoy.gr, create an account, contact us or make a purchase.

1. Data controller

The data controller is JOY TECHNOLOGIES EE, VAT number 802757670.

  • Registered office: 96 Dimitriou Gounari Street, Marousi 15125, Attica, Greece
  • Warehouse / Assembly: 78 Lavriou Avenue, Glyka Nera 15354, Attica, Greece
  • Telephone: +30 210 60 41 079
  • Email for personal-data matters: admin@joy-toy.gr

2. What data we collect

Depending on how you use the website, we may process:

  • identity and contact details, such as your full name, telephone number and email address,
  • billing and shipping addresses or your selected collection point,
  • order details, products, amounts, payment method, transaction status and customer-service history,
  • invoicing details, such as business name, VAT number, tax office, occupation and registered address, when you request an invoice,
  • customer-account details and wish-list information, if you use these features,
  • messages, requests, complaints and any information you provide when contacting us,
  • technical data, such as IP address, device and browser type, logs and cookie data.

We do not store your full card details. Card payments take place in the payment provider’s secure environment.

3. Why we process data and our legal bases

  • Performance of a contract: for the cart, order, payment, delivery, returns and customer service.
  • Legal obligation: for issuing and keeping tax or accounting documents, complying with requests from authorities and protecting consumer rights.
  • Legitimate interests: for website security, fraud prevention, technical support, service improvement and the defence of legal claims, provided your rights do not override those interests.
  • Consent: for non-essential cookies, personalised advertising or marketing communications where required. You may withdraw your consent at any time.

4. Address autocomplete and invoice-detail checks

If you choose address autocomplete, the text you type may be sent to Google Places to display suggestions and fill in address fields. Use of this service is also subject to Google’s terms and privacy policy.

When you request an invoice, your VAT number and necessary details may be sent to the relevant AADE service for verification and retrieval of publicly available business-register information.

5. With whom data is shared

We grant access only to the extent necessary to provide the service or as required by law. Recipients or processors may include:

  • hosting, technical-support, security, email and e-commerce software providers,
  • Viva, banks and other payment providers,
  • courier companies, BOX NOW and delivery or collection partners,
  • accountants, tax advisers and professional advisers,
  • AADE and other competent public authorities where required,
  • Google for maps or address-suggestion features and, depending on your cookie choices, for analytics or advertising services.

We do not sell your personal data.

6. Transfers outside the European Economic Area

Some technology providers may process data outside the European Economic Area. Where required, a transfer is based on an adequacy decision, standard contractual clauses or another lawful safeguard under the GDPR.

7. How long we keep data

We keep data only as long as necessary for the purposes above:

  • order, transaction and document details for the periods required by tax, commercial and consumer law,
  • account details while the account is active or until a lawful deletion request, except for data we must retain,
  • support requests for as long as needed to provide service and protect legal claims,
  • marketing-communication data until you withdraw consent or object,
  • cookies for the periods stated in the website’s consent settings.

8. Cookies and similar technologies

We use strictly necessary cookies for basic functions such as the cart, sign-in and security. Analytics, functionality or advertising cookies are activated according to your choices where consent is required. You can change your choices through the website’s cookie-settings tool and your browser.

9. Security

We apply appropriate technical and organisational measures to protect against unauthorised access, loss, alteration or disclosure. No system can guarantee absolute security, so we monitor and improve our measures.

10. Your rights

Subject to the conditions of the law, you have the right to:

  • information about and access to your data,
  • rectification of inaccurate or completion of incomplete data,
  • erasure,
  • restriction of processing,
  • data portability,
  • object to processing based on legitimate interests or to direct marketing,
  • withdraw consent without affecting the lawfulness of earlier processing,
  • not be subject to a decision based solely on automated processing that has legal or similarly significant effects, where applicable.

To exercise a right, send a request to admin@joy-toy.gr. We may ask for reasonable proof of identity. We will respond within the legal deadline, usually within one month.

11. Complaint to the supervisory authority

If you believe processing breaches the law, you may contact the Hellenic Data Protection Authority through dpa.gr. We would appreciate it if you contacted us first so we can try to resolve the matter.

12. Children’s data

The online store is intended for adults purchasing products. We do not knowingly seek to collect personal data from minors without the required permission of a parent or guardian.

13. Automated decisions

We do not make decisions that have legal or similarly significant effects solely by automated means. Automated security or fraud-prevention checks may be used, with the possibility of human review where required.

14. Changes to this Policy

We may update this Policy when our services, partners or the law change. The current version is published on this page with its last-updated date.