Last updated: February 2026

This Privacy Policy explains how G. LAMPRAKIS & CO L.P., trading as The Wonder Room (hereinafter referred to as the “Company”, “we”, “us” or “our”), collects, uses, stores, and protects your personal data when you visit or use our website www.thewonderroom.gr (the “Website”) or interact with us.

Company details:
G. LAMPRAKIS & CO L.P.
Olympionikon 220 & Lykourgou
Neo Psychico, 15451
Athens, Greece
VAT: EL801263985
Email: [email protected]

If you have any questions regarding this Privacy Policy or your personal data, you may contact us at [email protected].

 

  1. What is personal data?

Personal data refers to any information that can identify you directly or indirectly, such as:

  • Name
  • Address
  • Email address
  • Telephone number
  • Payment details
  • Purchase history

 

  1. What is personal data processing?

Processing refers to any operation performed on personal data, including:

  • Collection
  • Storage
  • Organization
  • Use
  • Transmission
  • Deletion

 

  1. What data we collect

We collect only the data necessary to provide our services.

a) Account and order information

When you create an account or place an order, we may collect:

  • Name
  • Email address
  • Shipping and billing address
  • Phone number
  • Order details
  • Payment confirmation data

b) Transaction and communication data

  • Purchase history
  • Customer service communications
  • Reviews or feedback
  • Wishlist or cart activity

c) Technical and browsing data

  • IP address
  • Device and browser type
  • Website activity
  • Cookie data

d) Marketing preferences

If you subscribe to our newsletter or marketing communications:

  • Email address
  • Shopping preferences

 

  1. Children’s data

We comply with applicable laws regarding children’s data.

The Website is not intended for children under the age of 16. Where required, we will request parental consent for participation in events or activities.

 

  1. How we use your data

We process your personal data for the following purposes:

a) Order processing

  • To process and deliver your orders
  • To provide customer support
  • To manage returns or refunds
  • To comply with legal and tax obligations

b) Account management

  • To create and manage your user account
  • To provide access to account features

c) Customer communication

  • To respond to inquiries or complaints
  • To provide order updates

d) Marketing and personalization

With your consent, we may:

  • Send newsletters and offers
  • Suggest products based on your interests
  • Notify you about events and promotions

You may withdraw your consent at any time.

e) Website improvement and security

  • To analyze site usage
  • To improve our services and products
  • To prevent fraud and unauthorized access

 

  1. Legal basis for processing

We process your data based on:

  • Performance of a contract (order processing)
  • Legal obligations (tax and accounting laws)
  • Legitimate business interests
  • Your consent (for marketing communications)

 

  1. Who we share your data with

We may share your data with trusted third parties, including:

  • Payment providers
  • Courier and delivery companies
  • IT and hosting providers
  • Marketing and analytics partners

All third parties are contractually bound to protect your data and use it only for the agreed purposes.

We may also disclose data when required by law or to protect our legal rights.

 

  1. International data transfers

Some service providers may be located outside the European Economic Area (EEA).
In such cases, we ensure appropriate safeguards, such as:

  • Standard contractual clauses
  • Approved data protection mechanisms

 

  1. How long we keep your data

We retain your personal data only as long as necessary:

  • Account data: as long as your account remains active
  • Order data: up to 5 years for legal and tax purposes
  • Warranty-related data: for the duration of the warranty
  • Marketing consent: until you withdraw your consent

After this period, data is deleted or anonymized.

 

  1. Data security

We take appropriate technical and organizational measures to protect your data.

These include:

  • Secure servers
  • Encrypted transactions (TLS/SSL)
  • Restricted data access
  • Regular security reviews

 

  1. Your rights

Under GDPR, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Restrict processing
  • Object to processing
  • Withdraw consent at any time
  • Request data portability

You also have the right to file a complaint with the Hellenic Data Protection Authority.

 

  1. How to exercise your rights

To exercise any of your rights, contact us at:

Email: [email protected]
Subject line: “Data Protection Request”

We will respond within one month, in accordance with applicable law.

 

  1. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.
Any significant changes will be posted on this page.

We encourage you to review this policy periodically.

 

  1. Contact

For any questions regarding this Privacy Policy or your personal data:

LAMPRAKIS & CO L.P. – The Wonder Room
Olympionikon 220 & Lykourgou
Neo Psychico, 15451
Athens, Greece

Email: [email protected]