Privacy Policy

Last updated: 14/06/2026

​

Welcome to MysteryKits.gr.

This Privacy Policy explains how MysteryKits.gr collects, uses, stores, and protects your personal data when you visit our website, create an account, place an order, contact us, subscribe to our newsletter, or use any of our services.

We respect your privacy and process your personal data in accordance with the General Data Protection Regulation EU 2016/679, the applicable Greek data protection legislation, and the guidance of the Hellenic Data Protection Authority.

1. Who We Are

The website www.mysterykits.gr is operated by:

Company name: SYLC PCC / ΣΥΛΚ ΙΚΕ
Trade name: MysteryKits.gr
Registered address: Prigkipou 1, 14341, Greece
VAT number: EL801123270
Tax office: Kefode Attikis
Email: info@sylc.gr
Telephone: +302102515539

For the purposes of data protection law, the above company is the Data Controller, meaning that we decide why and how your personal data is processed.

​

2. What Personal Data We Collect

Depending on how you use our website, we may collect the following categories of personal data:

Order and delivery details

Name, surname, billing address, shipping address, telephone number, email address, order number, order details, product size, payment status, delivery method, courier information, receipt or invoice details, and return or exchange information.

Account information

If you create an account, we may collect your name, email address, password in encrypted form, saved addresses, order history, preferences, and account settings.

Payment information

Payments are processed through secure third-party payment providers. MysteryKits.gr does not store full card numbers, CVV codes, or sensitive card details.

Communication data

When you contact us by email, contact form, telephone, social media, or any other channel, we may collect your name, contact details, message content, and any information needed to respond to your request.

Marketing data

If you subscribe to our newsletter or agree to receive marketing communication, we may collect your name, email address, preferences, consent status, and interaction with our campaigns.

Technical and browsing data

When you visit our website, we may collect technical information such as IP address, device type, browser type, operating system, pages visited, time spent on the website, referring pages, approximate location, cookie identifiers, and other analytics data.

​

3. Why We Use Your Personal Data

We process your personal data for the following purposes:

• To process, confirm, dispatch, and deliver your orders

• To manage payments, receipts, invoices, returns, refunds, and exchanges

• To create and manage your customer account

• To communicate with you about your order, request, return, or customer support issue

• To respond to questions, complaints, or messages

• To send newsletters, offers, and promotional messages, where permitted by law or where you have given consent

• To improve our website, products, services, customer experience, and advertising performance

• To protect our website, customers, and business from fraud, unauthorized activity, misuse, or security incidents

• To comply with legal, tax, accounting, consumer protection, and regulatory obligations

 

4. Legal Basis for Processing

We process your personal data only when we have a lawful basis to do so.

Contract performance

We process your data when it is necessary to complete your order, deliver products, manage returns or exchanges, provide customer support, or offer account services.

Legal obligation

We process certain data to comply with tax, accounting, invoicing, consumer protection, and other legal requirements.

Consent

We rely on your consent for certain marketing communications and for non-essential cookies or tracking technologies, where required.

You may withdraw your consent at any time.

Legitimate interest

We may process certain data to improve our services, secure our website, prevent fraud, manage business operations, understand customer interest, and measure website or campaign performance, provided that your rights and freedoms do not override our interests.

 

5. Newsletter and Marketing Communication

If you subscribe to our newsletter, we may send you updates about new Mystery Boxes, offers, product launches, campaigns, and other football-related content from MysteryKits.gr.

You may unsubscribe at any time by clicking the unsubscribe link in our emails or by contacting us at:

Email: [insert email]

We do not sell your personal data to third parties.

 

6. Cookies and Similar Technologies

Our website uses cookies and similar technologies to operate properly, improve performance, analyze traffic, personalize content, and support marketing activities.

Cookies are small text files stored on your device when you visit a website. They may allow the website to remember your preferences, keep your shopping cart active, support login functionality, or help us understand how visitors interact with the website.

We may use the following types of cookies:

Strictly necessary cookies

These cookies are required for the website to function properly, such as shopping cart, checkout, security, login, and order-processing features.

Analytics cookies

These cookies help us understand how visitors use our website, which pages are visited, and how we can improve the customer experience.

Marketing cookies

These cookies may be used to measure advertising campaigns, show relevant advertisements, or understand the performance of our marketing activity.

Preference cookies

These cookies remember choices such as language, region, or display settings.

Where required, non-essential cookies will be used only with your consent. You can manage or disable cookies through your browser settings and, where available, through our cookie consent banner.

Please note that disabling certain cookies may affect the functionality of the website.

 

7. Who We Share Your Data With

We may share your personal data only when necessary with trusted partners and service providers, such as:

• Website hosting and e-commerce platform providers

• Payment service providers

• Courier and delivery companies

• Accounting, invoicing, and tax support providers

• Email marketing platforms

• Analytics and advertising providers

• IT support, security, and website maintenance providers

• Legal, tax, regulatory, or public authorities, where required by law

All third-party providers are expected to process personal data securely and only for the purposes for which we provide it.

 

8. International Transfers

Some of our service providers may process personal data outside Greece or the European Economic Area.

Where this happens, we take appropriate steps to ensure that your personal data is protected in accordance with applicable data protection law, such as using providers that apply appropriate safeguards.

 

9. How Long We Keep Your Data

We keep your personal data only for as long as necessary for the purposes described in this Privacy Policy.

• Order, invoice, transaction, and accounting data may be kept for the period required by tax and accounting law.

• Customer account data is kept for as long as your account remains active, unless you request deletion and no legal retention obligation applies.

• Marketing data is kept until you unsubscribe or withdraw your consent.

• Customer communication data may be kept for a reasonable period to handle requests, complaints, disputes, or legal claims.

• Technical, analytics, and cookie data is kept according to the retention period of each tool or cookie.

 

10. Your Rights

Under applicable data protection law, you have the right to:

• Be informed about how your personal data is processed

• Request access to your personal data

• Request correction of inaccurate or incomplete personal data

• Request deletion of your personal data, where legally possible

• Request restriction of processing

• Object to processing based on legitimate interest

• Withdraw consent at any time, where processing is based on consent

• Request data portability

• Lodge a complaint with the Hellenic Data Protection Authority

To exercise your rights, please contact us at:

Email: info@sylc.gr

We may need to verify your identity before responding to your request.

 

11. Data Security

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, alteration, disclosure, or destruction.

These measures may include secure hosting, encrypted connections, access controls, password protection, monitoring, and internal procedures for handling personal data.

However, no website, platform, or online service can guarantee absolute security.

 

12. Minors

Our website and services are intended for customers who are legally able to make online purchases.

We do not knowingly collect personal data from minors without appropriate consent. If we become aware that we have collected personal data from a minor without the required consent, we will take appropriate steps to delete such

data where required.

 

13. Third-Party Links

Our website may contain links to third-party websites, platforms, or social media pages.

MysteryKits.gr is not responsible for the privacy practices, content, or security of third-party websites. We encourage you to read the privacy policies of any third-party websites you visit.

 

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our website, services, legal obligations, or business operations.

The latest version will always be available on this page, with the date of the latest update shown at the top.

 

15. Contact Us

For any questions about this Privacy Policy or the way we process your personal data, please contact us:

MysteryKits.gr
Company: SYLC PCC / ΣΥΛΚ ΙΚΕ
Address: Prigkipou 1, 14341, Greece
Email: info@sylc.gr
Telephone: +302102515539

​