Privacy policy
DATA CONTROLLER
George Tatakis, 41 Skopeftiriou Street, 17673 Athens, Greece. VAT: EL141615444. Correspondence: Ipsilantou 18, Kolonaki, 10676 Athens, Greece. Contact: admin@tatakis.com, +30 694 7455499.
Last updated: 14 October 2026.
SCOPE AND INFORMATION
This policy covers this website, Collect, contact enquiries, newsletter subscriptions, learning interests and book registrations. We receive the contact details and information you submit. Orders also require delivery, billing and payment information. Payment details are handled by Shopify and its payment providers; this site does not store full card numbers.
Technical information such as IP address and device details supports delivery and security. Optional usage analytics and marketing require your cookie choices. If you use the AI search or concierge, your questions and relevant conversation context are sent to OpenAI to generate an answer. Please do not include payment details or unnecessary sensitive information.
PURPOSES AND LEGAL BASES
We use data to answer enquiries, provide requested services, process and deliver orders, manage registrations and prevent fraud. The bases are contract performance or steps at your request before a contract, legal obligations and legitimate interests in service security. Optional tracking and subscription communications rely on consent.
Newsletter, course-interest and book communications are separate choices. Rejecting optional cookies does not prevent a purchase, enquiry or subscription. You may unsubscribe through the link in subscription emails or contact admin@tatakis.com. Necessary order and service correspondence remains separate.
SERVICE PROVIDERS
We use Shopify and Oxygen for storefront hosting, basket and checkout; Supabase for content and enquiry records; Klaviyo for subscriptions; Resend for service email; Cloudflare Turnstile for form security; and OpenAI for AI search. Payment providers and delivery partners receive the information needed for their services.
Embedded YouTube or Vimeo videos and Google Maps connect to those providers only when you enable external media. Those providers process connection information under their own privacy policies. Third-party links open services governed by their own policies.
For limited-edition works, your full name and country of residence may be recorded in the Benaki Museum photographic archive for archival and security purposes, as explained for the particular edition.
Shopify also processes information under its own privacy policy when providing and improving its services, including enhanced features where enabled. You can review the Shopify Consumer Privacy Policy at https://www.shopify.com/legal/privacy/app-users and exercise rights through https://privacy.shopify.com/en. Contact admin@tatakis.com for requests concerning this website.
COOKIES AND YOUR CHOICES
Necessary cookies support the basket, secure sessions, registration steps and private-page access. They remain active. Usage analytics, marketing, optional preferences and external videos or maps are offered separately and are off until you enable them.
Use the Cookies button or Cookie settings link to review or withdraw your choices at any time. This site remembers a choice for up to 180 days. Withdrawal stops future optional processing; it does not undo processing performed with earlier consent. Shopify checkout has its own privacy controls.
RETENTION AND INTERNATIONAL TRANSFERS
We retain information for as long as needed for the stated purpose, order support and applicable tax, accounting or legal obligations. Subscription details are retained while the subscription is active and as necessary to record consent or honour an unsubscribe request. Contact us about deletion of an enquiry or registration.
Some service providers process data outside the European Economic Area. Applicable transfer safeguards may include an adequacy decision or standard contractual clauses. Contact us for information about the safeguards relevant to your data.
YOUR RIGHTS AND SECURITY
You may request access, correction, erasure, restriction, portability or object to processing, subject to applicable law. You may withdraw consent at any time. Contact admin@tatakis.com; we may need to verify your identity. You may complain to the Hellenic Data Protection Authority.
We use access controls and appropriate technical measures to protect information. This policy may be updated as our services change; the date above identifies this version.