Privacy information
Information on how personal data may be handled when using our corporate website.
1. Data controller
This notice relates to the corporate website “The Vape Corner” and its two physical stores in Corfu. The data controller is Eleftheria Papadopoulou, daughter of Georgios, Gianni Chroni 4, Corfu 491 00, Greece. For privacy enquiries, please email [email protected].
2. Personal data that may be processed
This website presents the business and its physical locations. It does not provide ecommerce, visitor accounts or customer signup forms. When you visit, the hosting and security providers may process technical connection data, such as IP addresses and access or error records. If you contact us by phone or email, we process the details you choose to provide and the content of your enquiry.
3. Purposes and legal grounds
Technical data may be used to operate and secure the website on the basis of legitimate interests (GDPR Article 6(1)(f)). We use correspondence data to respond to enquiries and, where applicable, take steps requested before entering into a contract (Article 6(1)(f) or (b)). Data may also be processed to meet legal obligations where applicable (Article 6(1)(c)).
4. Age confirmation and local storage
When you select “I am over 18”, a confirmation value is stored in your browser's sessionStorage so that the age prompt need not reappear on each page during the same tab session. This is not identity verification. No standalone advertising tracker or analytics script was identified in this version's website code. Infrastructure providers may nonetheless use necessary security mechanisms or cookies according to their configuration.
5. Service providers and external links
The website uses Cloudflare Pages infrastructure; company email services are hosted with 1HOST. Links to Google Maps, Instagram and Facebook open third-party services only when you select them. Those services have their own privacy notices. Details you send to us are not published on the website.
6. Retention
The sessionStorage age indicator lasts for the corresponding tab session. Correspondence is retained for the time needed to handle the enquiry and, where applicable, meet legal requirements. Technical access and security logs are retained as necessary for operation and protection of the services, in line with the relevant providers’ policies. You may contact us for further information.
7. International transfers
Using international technology providers may involve processing or access outside the European Economic Area. Where international transfers take place, GDPR rules and, where applicable, the relevant providers’ transfer safeguards apply. You may contact us for information about specific transfers.
8. Your rights
Subject to GDPR conditions, you may request access, rectification, erasure, restriction or portability of your personal data and object to processing based on legitimate interests. Contact us at [email protected] to exercise your rights. You may also lodge a complaint with the Hellenic Data Protection Authority.
9. Changes to this notice
This notice will be updated if the website's features or the relevant processing arrangements change. Last updated: 26 October 2026.