Terms & Privacy​

Angels in love - 130x110cm


Orlik Gallery guarantees timely information to end consumers about their unavailability. The online store orlikgallery.com is not responsible for any technical problems presented to its users in case they are due to their own infrastructure.

The processing and protection of your personal data is governed by the provisions of the General Data Protection Regulation (EU) 2016/679 – GDPR and the current Greek legislation on the protection of personal data (Law 4624 / 2019, Law 2472/1997, Law 3471 /2006, as applicable, etc.).

1. Definitions

For a better understanding of this Policy, we provide you with the definitions of the key terms you will encounter:

Subject of personal data: The website user, the customer/consumer of the online store, who places an order and purchases a product/service and any other natural person, comes into contact with our website.

Personal data: Any information that can directly or indirectly identify a natural person (the “Subject”), such as name, postal address, contact information (telephone, mobile), email address (e-mail), etc. .

Processing: Any operation or series of transactions performed with or without the use of automated means on personal data or sets of personal data, such as collection, recording, organization, structure, storage, adaptation or modification, retrieval, retrieval of information, use, disclosure through transmission, dissemination or any other form of disposal, association or combination, limitation, deletion or destruction of personal data that has come or will come to the knowledge of the Company or directly from you through the website or in the context of your business relationship with it .

Edited by: orlikgallery is the e-shop of the company (orlik gallery ike) Nikolozi Tchikadze . (VAT: DOU: Athinon GEMI: 161664001009) with headquarters: Navarchou Nikodimou 27 Athens, Attika.

Processor: The natural or legal person, public authority, agency or other entity that processes personal data on behalf of the controller.

Recipient: The natural or legal person, public authority, agency or other entity, where personal data is disclosed, whether it is a third party or not.

What data do we collect, for what purpose and on what legal basis

Login to the site:

IP address, date and time of access, URL, referring URL, access provider, browser, operating system to Provide personalized services to you, correct connection establishment, security and system stability covered by the legal basis: a) the relationship between us

b) legal obligation

c) legitimate interest, in the context of making our website available to the general public and providing services to it

Contact via contact form. Data collected: name, e-mail, telephone, comments (message content) in order to communicate, manage / solve or resolve your request, query or complaint. Legal basis: a) the contract between us

b) legitimate interest, in the context of your service

Contact by email. Collected data: e-mail, first name, last name (if any), message content in order to communicate, manage / solve or resolve your request, query or complaint. Legal basis: a) the contract between us

b) our legal obligation under consumer law

c) legitimate interest, in the context of your service

Order – purchase products. Data collected: name, address, region, city, postal code, country, telephone, mobile, email, order shipping address information, receipt or invoice information, data in comments/comments. Reason: Contract conclusion, order management / processing, invoicing, tax compliance, customer service. Legal basis: a) the contract between us

b) our legal obligations

Offers (newsletter). Data collected: email. Reason: Sending newsletters about our offers, products, services, benefits. Legal Basis: a) your consent

b) where appropriate, our legitimate interest in promoting new products and services to existing customers for similar promotional purposes

3. Information concerning minors

Our online store is not intended for persons under the age of eighteen (18). Therefore, our Company does not process personal data of minors. We reserve the right, in the event that we find that a minor has provided his data to us, without the consent of his legal representative, to delete this data. If you notice that a minor has provided their data to us without the consent of their legal representative, please contact us.

However, we point out that, when the processing of personal data is based on consent in accordance with Art. 6 par. 1 f. A) GDPR, in relation to the provision of information society services directly to a child, the consent provided by the minor and therefore the processing is legal, if the minor is at least 15 years old, otherwise if provided or approved by the minor’s legal representative.

Recipients of your data

The personal data we collect from you in the context of our relationship through our website is only processed by:

Our authorized and properly trained staff, who are committed to maintaining strict confidentiality and confidentiality and to implementing the Policies set by us,

partners of our Company, to whom according to art. 28 GDPR we entrust the execution of specific tasks on our behalf (as Executors) and with which we have ensured the processing in accordance with the GDPR for the protection of your data, by signing contracts and committing to comply with the appropriate measures, in accordance with the relevant provisions of GDPR (no. 28, 32), such as indicative third-party technical companies in the context of website management and service provision, support of our applications, companies providing promotional services (e.g. sending newsletters), etc.

banking organization under the name Piraeus Bank

the contracted courier companies

public bodies and authorities, such as public agencies and bodies, independent authorities, regulatory authorities, police, competent authorities, prosecutors, other administrative agencies, etc., when required by the applicable legal framework.

We primarily do not transfer your data to third countries (non-EU or EEA) countries or international organizations, which do not ensure an adequate level of protection. Any transmission will be in accordance with the relevant provisions of the applicable legal framework and the required guarantees, in particular the nos. 44 GDPR, And in any case, you will be informed about it.

Personal data retention period

We keep your personal data for as long as required by the nature and purpose of the processing, for as long as defined by the applicable legal and regulatory framework and in any case for the entire duration of the transaction between us and our individual contractual commitments. , taking into account the legal obligations of our Company as well as any legal claims that may be raised by it, in order to justify the retention time of personal data.

Your rights regarding the processing of your data

In any case, you retain control over the processing of your personal data. Every visitor, registered user or customer of ours, as a data subject, can at any time exercise their rights, as provided for in the GDPR and in particular in articles 12 to 23 thereof, as well as

national law and in particular:


Right to information and to provide information about data processing, before and during processing (No. 12, 13, 14 GDPR). Explanation: It is your right to be informed about how we process your personal data, who we are, what is the purpose of the processing, who are the recipients, how long they are kept, etc.

Right of access to personal data concerning you and if it is processed by the Company, as Head of Processing (Article 15 GDPR). Explanation: Your right to correct inaccurate information as well as fill in missing information.

Right to erasure of your personal data (“right to be forgotten”) (Article 17 GDPR). Explanation: Your right to request the deletion of your data, subject to the Company’s obligations and legal rights.

Right to restrict the processing of your personal data (Article 18 GDPR). Explanation: Your right to restrict the processing under certain conditions, whether their accuracy is disputed, or the processing is unlawful or the purpose of the processing is missing, but their deletion is not appropriate.

Right to portability (Article 20 GDPR). Explanation: Your right to receive or provide your personal data to another controller if the processing is based on your consent or the performance of a contract and is carried out by automated means, in a commonly used and machine-readable structured format.

Right to object (Article 21 GDPR) and to object to any automated decision-making, including profiling (Article 22 GDPR). Explanation:

Right to withdraw your already given consent (Article 7 para. 3 GDPR) Explanation: Your right to object for reasons related to your particular situation to the processing of your data, in the event that your data is processed for the purposes of legal legislation of the Company interests or subject to a decision made solely on the basis of automated processing that significantly affects you.

Right to withdraw your consent already given (Article 7 para. 3 GDPR). Explanation: Your right to withdraw your consent to such processing at any time. Please note that the lawfulness of the processing of your data that took place before the revocation is not affected.

Possibility of submitting a complaint to the competent supervisory authority (art. 77 GDPR).

Your right, if you consider that the processing of your data violates the General Data Protection Regulation, to contact the Competent Supervisory Authority, which in Greece is the Personal Data Protection Authority (Kifisias Street 1-3, Athens, P.O. 115 23 , +30 210 6475600, contact@dpa.gr).

How to exercise your rights and file a complaint

You have every right to exercise your rights after completing the special form for the exercise of rights that we provide you and according to the more specific instructions therein, to be considered, in one of the following ways:

Either by sending it via e-mail to our email address contact@orlikgallery.com

Either by shipment or by personal delivery to our Company’s offices, Navarchou Nikodimou 27 Athens

Our Company will make every effort to take the required actions within (1) month from the date of receipt of your request, unless the work related to the satisfaction of the request is characterized by particularities and/or complications, based on which the Company reserves the right to extend the completion time of the actions. In any case, we will inform you about the progress of your request within one (1) month of its submission.

Security of processing your data

Our Company takes care, among other things, to take appropriate technical and organizational measures in order to ensure an appropriate level of security against risks during processing, in particular from accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access to personal data transmitted . , stored or otherwise processed as well as maintaining both technical and physical security in accordance with Article 32 GDPR. It has relevant Policies and generally adheres to the principles of processing according to the letter of the GDPR (Article 5 GDPR), to ensure the availability, integrity and confidentiality of your data.

In particular, regarding the measures we take to secure your data through our website:

Our website uses the SSL protocol (SecureSocketsLayer), which ensures the secure exchange of data between the website and the user’s browser and protects his browsing. SSL is the global Internet standard for authenticating websites to users and encrypting data between network users and web servers. SSL encrypted communication requires that all information sent between a client and a server be encrypted by the sending software and decrypted by the receiving software, thus protecting personal information in transit. In addition, all information sent with the SSL protocol is protected by a mechanism that automatically detects if the data has changed in transit. When the process that activates the SSL security certificate (e.g. placing an order (e.g. ordering a product online or filling out a contact form) is initiated, a series of checks and actions are performed to ensure a secure interface between the website and user.

Also, the Company has taken, as far as possible, all the necessary measures, including the upgrading of protection systems and the use of anti-virus programs, in order to ensure a high level of security and protection of the website from viruses and other malicious software. The Company also controls access to the websites with security systems to prevent attacks and other unauthorized actions.

The databases in which all data managed through our website are stored are encrypted in such a way that unauthorized users cannot access them. This encryption is performed using strong encryption algorithms, based on information systems security best practices.

Regarding the transaction security measures taken by Piraeus Bank, see the link https://www.piraeusbank.gr/el/epiheiriseis-epaggelmaties/anakalypse-ta-xrimatodotika-ergaleia-sou/lyseis-emporon/sxetikes-ipiresies/asfaleia-synallagon

Social media

Our Company uses the following social media pages:

Facebook & Instagram

With regard to certain processing, we and the processors of the above social media platforms act as joint Controllers of your data, within the meaning of no. 26 GDPR. Regarding data processing by Social Media Processors, we can have limited influence. Thus, we act within the possibilities we have and in accordance with the applicable legislation for the protection of personal data. For more information on the processing of your data by social media platform providers and your rights in general, please refer to the respective Privacy / Protection Policies of each provider.

10. Special statements of our Company

Our Company with a special sense of responsibility declares the following:

It is not responsible for any damage (direct, indirect, positive, negative) that may be caused to the visitor due to the website or its use. The visitor is solely responsible for protecting his system from viruses and other malicious programs.

It does not make decisions or profiles based on the automated processing of your data.

This Privacy Policy is subject to change at any time. The user will be informed of all important changes, while each time the updated version will be posted on the website. For this reason the visitor must be informed and regularly refer to this policy.

No other use of the visitor’s personal data will be made for purposes other than those stated herein, without prior notification and, where necessary, his consent.

In the case of purchases made remotely (eg via the Internet), you can return a product and we will pay the price. Within 14 calendar days of receipt of the product by you or a third party you indicate. In the event that you order a batch of products, the period starts from the moment you receive the last product of the batch or upon completion of the last delivery in the case of periodic benefits.

Finally, in case of purchase of digital content that is not stored on a permanent basis, the period starts from the date of conclusion of the contract. By exercising the right of withdrawal you are obliged to return the product to us in its original perfect condition (as new) in which it was delivered to you or to provide us with clear and indisputable proof that you have sent it safely within 14 calendar days of exercising the right of withdrawal from you and within the same period we are obliged to refund you the amounts you have paid us using the payment method you have chosen to pay us the price. In case you have paid with a payment card, we immediately proceed with the order to the card issuer and we are not responsible for any delays in crediting the price to you that are not due to us.

The consumer is liable for any reduction in the value of the goods only as a result of the handling of the goods other than that necessary to determine the nature, characteristics and function of the goods. We are not responsible and will not compensate the consumer nor will the withdrawal have any effect if the damage to the goods is caused by the fault of the consumer or if the use exceeds what is necessary to determine the nature, characteristics and function of the goods.

In any case, the products you wish to return must be accompanied by the necessary legal documents and receipts. If the shipping cost of returning the product exceeds the cost of the universal postal service, it is not covered by us.

Without limiting the Withdrawal provisions of article 9, the order can be canceled in the following cases: Before completing the order, during the online ordering process you can “go back” and remove the quantities of products from your basket by clicking on ” Remove” button. If the online order has been completed but the product has not yet been shipped, you can call the store and one of our associates will take care of canceling your order. Upon receipt of the product, please call us in store or contact us via the email form on the website, explaining the reason you wish to cancel the order. One of our associates will serve you immediately and inform you about all your options.

In addition, you can fill out a return form and we will contact you for more details www.orlikgallery.com/returns

a) Digital Payments accepted:



American Express

China UnionPay (CUP)



Japan Credit Bureau (JCB)

Additional payment methods include region-specific payment methods such as Sofort, iDEAL, Bancontact, and so on. 

Express checkout methods

Express checkout methods allow customers to pay even faster using their phone or any compatible device.

Apple Pay

Google Pay

Link by Stripe

PCI-DSS Compliance and WooCommerce:

WooPayments is PCI compliant, but merchants should still be aware of the core PCI-DSS requirements. For more general information, please see our PCI-DSS Compliance and WooCommerce documentation.



b) Collection and payment at our store Navarchou Nikodimou 27 Athens & Kidathineon 12 Athens.

d) Payment by PayPal

By selecting PayPal as your payment method, you are automatically taken to the PayPal page to complete the transaction and pay for the order. PayPal is the most well-known, secure and reliable intermediary for online transactions. If you don’t have a PayPal account, you can sign up here using your debit or credit card or through your bank account.

Transactions made through PayPal are exclusively for delivery to the customer’s site and are not combined with other payment methods. For questions and information about payments you can go here. Transactions made through PayPal are governed by the PayPal Terms & Conditions. More info https://www.paypal.com/jm/webapps/mpp/paypal-safety-and-security

e) Payment by bank deposit to the account you will find on the payment page.

send us the copy of the bank payment order to orlik@orlikgallery.com mentioning your order number so that identification can be done quickly and easily. Upon receipt of the copy of the bank payment order, we will process your order

A “clearance delay” is the term used when packages or shipments are held at customs. The above reason can lead to the delay of your order.

In periods of extreme weather events or strikes as well as in any case of force mature, which may affect the transport and delivery of your order.

In case it is impossible to contact you by phone and / or by e-mail (if there is a problem with your order, either in relation to the product or in relation to its payment) because e.g. your details that you have entered are not properly updated. In any case, the delay does not exceed thirty days from the conclusion of the contract.

A “clearance delay” is the term used when packages or shipments are held at customs. The above reason can lead to the delay of your order.

In periods of extreme weather events or strikes as well as in any case of force mature, which may affect the transport and delivery of your order.

In case it is impossible to contact you by phone and / or by e-mail (if there is a problem with your order, either in relation to the product or in relation to its payment) because e.g. your details that you have entered are not properly updated. In any case, the delay does not exceed thirty days from the conclusion of the contract.

What is a Cookie A “cookie” is a small text file that is downloaded to your device such as a computer or smartphone when you access our websites.

We use cookies and other similar technologies to make our website work efficiently and securely and to improve the personal user experience.

We use cookies and other similar technologies to make our website work efficiently and securely and to improve the personal user experience.

All cookies have an owner that tells you who owns the cookie. The owner is the domain specified in the cookie. Each time you visit our website, we place cookies on your device for different reasons. Such cookies are called “first-party” cookies, while cookies set by a different owner, such as social media platforms or ad networks/ad technology providers, are called “third-party” cookies.

Below you will find more detailed information about our cookies and the reason for their use.

How to disable cookies? You can easily stop your browser from accepting cookies by configuring your browser’s cookie settings.

All commercial web browsers are presented with a cookie management function.

Please check your browser to learn more how to delete or disable cookies etc.

If you choose to disable cookies, you may experience limited functionality and a degraded user experience.

What types of cookies do we use and why? Our cookies are grouped into four categories:

Strictly necessary cookies

Some cookies are absolutely necessary for you to enjoy the full functionality of our website and to fulfill our promises. For example, these cookies allow you to use the website and log into your account as intended. Without these cookies, some parts of our website and services will not function as they should. We also use cookies to direct you to the correct website based on geography and language and to detect and prevent security threats and malicious behavior.

Performance cookies

Performance cookies tell us how you use the website and help us improve it. For example, these cookies count the number of visitors to our website and see how visitors move around when using it. This helps us to improve the way our website works, for example by ensuring that users find what they are looking for easily.

Functional cookies
Functional cookies allow our website to remember your preferences, helping you to customize your content on our website. This type of cookie enables us to highlight products and services that we think are of interest and interest to you. This way we can remember you when you return to our website and provide you with the best possible user experience.

Marketing cookies

Marketing cookies are a key part of how we deliver marketing on our websites. Among other uses, cookies allow us to show you more relevant advertising by providing you with information, offers and promotions based on your browsing patterns and how you have interacted with our websites and applications. We can then present you with website content that is more relevant to you, responding to your interests and preferences. Cookies allow limiting the number of times an advertisement is displayed. Marketing cookies may be used to track the effectiveness of our advertising campaigns on third party websites.

What is the legal basis for using cookies?

The use of cookies for purposes other than those necessary for the operation of the website in a safe and efficient manner, to provide you with full functionality and to provide you with certain requested services requires your prior consent.

How long are cookies stored on your browser or device?

Cookies can be stored for varying periods of time on your browser or device.

Persistent cookies

Persistent cookies (or persistent cookies) will be stored in one of your browser’s subfolders until you delete them manually or your browser deletes them based on the duration period contained in the cookie file. Their duration depends on the expiry date written on them.

Session cookies

Session cookies are deleted immediately when you close your browser. When you restart your browser and return to the site that created the cookie, the site will not recognize you.

Other tracking technologies Information collected through other tracking technologies, such as tags and pixels, is stored for 24 months.

See more details about the cookies used or withdraw your consent!

orlikgallery.com is the e-shop of the company (Orlik Gallery E.E) Nikolozi Tchikadze . (VAT: DOU: A’ Athinon GEMI: 161664001009) with headquarters: Navarchou Nikodimou 27 Athens, Attika.

orlikgallery.com has the right to configure the following terms unilaterally or to renew the present and the terms of transactions made through this store. It is clarified that the change of terms does not occupy orders that you have already placed.