Cookie Policy

Information about cookies used by rolling_papers, their categories and purposes, and how users can manage their consent preferences.

Last updated: 23 July 2026 This Cookie Policy explains how cookies and similar technologies are used on rolling_papers. This document must be read together with the Privacy Policy, the Terms and Conditions of Sale and the other legal information published on the Site.

1. Data controller

  • Controller: Despoina Grigoriadou
  • Trading name: rolling_papers
  • Address: Karaoli Dimitriou 10, Nea Karvali, 64006, Greece
  • VAT number: EL116306705
  • Email: shop@e-cartine.it
  • Telephone: +30 695 900 6904

2. What cookies are

Cookies are small files or technical information that a website may store in a user’s browser or device. They may be used, for example, to keep a session active, remember products in the cart, recognise a logged-in user, store preferences and settings, secure checkout, record consent choices, load authorised external services and, where permitted, measure use of the Site.

3. Similar technologies

In addition to cookies, the Site may use technologies with comparable functions, including local storage, session storage, pixels and tags, session identifiers, technical scripts, browser cache, device or transaction identifiers and other technologies necessary for online services. In this document, the term “cookies” may also include such technologies where they perform an equivalent function.

4. First-party and third-party cookies

Cookies may be:
  • first-party cookies: set directly by rolling_papers;
  • third-party cookies: set or read by an external service integrated into the Site.
Third-party cookies may also be governed by the relevant provider’s own notices and terms.

5. Session and persistent cookies

Session cookies are normally deleted when the browser is closed. Persistent cookies remain on the device for the period stated in their description or until deleted by the user. Retention periods may change following technical, legal or service updates.

6. Categories of cookies used

The Site mainly distinguishes between:
  • functional or strictly necessary cookies;
  • preference cookies;
  • statistical cookies;
  • marketing or tracking cookies.

7. Functional or strictly necessary cookies

Functional cookies are necessary to provide a service requested by the user or to ensure the correct functioning and security of the Site. They may be used to maintain cart contents, manage checkout, recognise a session, manage account access, remember consent preferences, protect forms and transactions, prevent fraud and abuse, manage traffic and security and retain a choice expressly requested by the user. These tools may be used without consent where they are strictly necessary for transmission of a communication or provision of a requested service.

8. Preference cookies

Preference cookies remember choices that are not always essential for the basic functioning of the Site. They may concern language, display settings, saved products, wishlists, interface preferences or previously selected settings. Their classification and whether consent is required depend on the function actually performed.

9. Statistical cookies

Statistical cookies may be used to understand how the Site is used, identify technical problems and improve performance. Where these cookies or tools are not strictly necessary or are not fully anonymous under applicable law, they are activated only after consent. At the date of publication of this page, no external analytics service is declared active unless it has actually been configured and detected.

10. Marketing or tracking cookies

Marketing or tracking cookies may be used to create interest profiles, measure advertising campaigns, display personalised advertising, follow a user across different sites or services or load external content that performs tracking. Where consent is required, these tools are not activated before the user has expressed a choice.

11. WordPress

The Site uses WordPress as its content-management system. WordPress may use functional cookies to check whether the browser accepts cookies, manage access by authorised users, protect sessions, remember interface preferences and support administrative functions. Most administrative cookies concern authenticated users or Site administrators.

12. WooCommerce

The Site uses WooCommerce for the product catalogue, cart and order management. WooCommerce may use functional cookies or identifiers to remember products in the cart, update quantities and totals, recognise the Customer’s session, manage checkout, associate browsing with an order in progress and protect shop operations. Disabling strictly necessary cookies may prevent the cart or checkout from working correctly.

13. Account and authentication

When a Customer creates or uses an account, functional cookies may be used to recognise the authenticated user, keep the session active, protect the account, display saved orders and addresses, manage logout and prevent unauthorised access.

14. Wishlist

The Site may offer a wishlist function that allows products of interest to be saved. The wishlist may use cookies, local storage, temporary identifiers or data linked to the account where the user is logged in. These tools make it possible to remember selected products during browsing or on later visits.

15. Incomplete carts

The Site may use a technical function to manage and, where applicable, recover incomplete carts. For this purpose, cookies or identifiers may be used to recognise the cart, temporarily retain its contents, link it to information entered at checkout, verify whether the order has been completed and avoid duplicate communications. Any cart-recovery communications are handled as described in the Privacy Policy and on the basis of the applicable legal ground.

16. Contact Form 7

The Site uses Contact Form 7 to manage contact forms. The form may use technical tools necessary to send the message, protect the form, prevent automated submissions, temporarily retain the status of the request and identify technical errors. Processing of data submitted through the form is described in the Privacy Policy.

17. Elementor, Blocksy and visual components

The Site uses Elementor and components of the Blocksy theme to build and display pages. These tools may use local storage or technical identifiers to retain display settings, completed actions or interface functions. Their classification depends on the function actually performed and on any data processed.

18. Complianz

The Site uses Complianz – GDPR/CCPA Cookie Consent to manage cookie preferences. Complianz may store functional cookies to record whether the banner has been shown, remember acceptance or refusal, save authorised categories and services, remember the accepted version of the Cookie Policy and allow preferences to be changed later. These cookies are necessary to respect and document the user’s choice.

19. YouTube

The Site may include embedded videos or links to YouTube. When an embedded video is loaded, YouTube or Google may use cookies or similar technologies to provide video content, measure views, prevent abuse, personalise the service, associate interaction with a Google account where the user is logged in, and carry out other processing described in their own notices. Where required, the content is blocked until consent is given. Without consent, the video may not be displayed, while access to the other functions of the Site remains available.

20. Payments

The payment method indicated as active is direct bank transfer. During checkout, bank transfer does not normally require installation in the browser of cookies belonging to an external payment provider. Future activation of additional payment methods may involve technical or anti-fraud cookies from the relevant provider. In that case, this page and the dynamic list will be updated.

21. Carriers and shipment tracking

Links to DHL, GLS, BRT, UPS, FedEx or other tracking systems may lead to external websites. Carrier websites may use their own cookies under their respective notices. This Cookie Policy governs only cookies used directly by the Site or loaded through it.

22. Dynamic list of cookies and services

The following section is generated and updated by Complianz according to the cookies and services detected and configured.
Whether a service appears in the list depends on the current configuration, the available scan and the pages visited during the check. Temporary absence of a cookie from the list does not alter applicable obligations and does not authorise the use of undeclared tools.

23. Consent banner

Where required, a banner is shown on first access allowing the user to:
  • accept non-essential categories;
  • reject non-essential categories;
  • view preferences;
  • select individual categories or services, where available;
  • save the chosen settings.
Failure to make a positive choice is not automatically treated as consent to non-essential cookies.

24. Changing or withdrawing consent

The user may change or withdraw preferences concerning non-essential cookies at any time. Use the following control: Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

25. Refusal of non-essential cookies

Refusing non-essential cookies does not prevent general access to the Site. Some optional functions may, however, be unavailable, for example embedded videos, content from external platforms, non-essential preferences or any statistical or personalisation functions. Functions strictly necessary for the cart, checkout, security and consent management remain available to the extent technically possible.

26. Deleting cookies in the browser

Users may also delete or block cookies through their browser settings. Procedures vary depending on the browser and device. Deleting cookies may log the user out of the account, empty the cart or prevent it from being recognised, remove saved preferences, require a new banner choice or prevent some functions from working.

27. Do Not Track and device settings

Some browsers can send signals such as “Do Not Track” or other privacy preferences. Technical and legal recognition of such signals may vary. Preferences selected through the Complianz banner are the main tool available on the Site for managing non-essential categories.

28. International transfers

Some external services, such as video platforms or other international providers, may involve processing of data outside the European Economic Area. Where applicable, such transfers must be based on a mechanism provided by the GDPR, such as an adequacy decision, standard contractual clauses, supplementary measures, a specifically permitted derogation or explicit consent where appropriate.

29. Updating the list

The cookie list may change following:
  • WordPress or WooCommerce updates;
  • installation, activation or removal of plugins;
  • changes to external services;
  • activation of new payment methods;
  • changes to Site functions;
  • Complianz updates;
  • new technical scans.
The Controller periodically checks and updates this page and the banner configuration.

30. Duration of consent

Consent preferences are retained for the period configured in the consent-management system. A new choice may be requested where the validity period expires, the Cookie Policy changes materially, new categories or purposes are added, the previous choice cannot be verified or the user deletes browser cookies.

31. Evidence and recording of preferences

The Controller may retain technical information necessary to demonstrate:
  • the version of the banner shown;
  • the version of the Cookie Policy;
  • the selected categories;
  • the date or period of the choice;
  • technical identifiers needed to manage consent.
This information is used to respect the user’s choice and demonstrate proper consent management.

32. Security

Cookies and technical identifiers are managed using proportionate measures, including, where applicable, HTTPS/TLS connections, software updates, access restrictions, plugin configuration, technical monitoring and measures against abusive use. No system can guarantee absolute security.

33. Data-subject rights

Where the use of cookies involves processing of personal data, the data subject may exercise the rights provided by the GDPR as described in the Privacy Policy. These may include access, rectification, erasure, restriction of processing, objection, data portability, withdrawal of consent and the right to lodge a complaint with a supervisory authority.

34. Cookies belonging to external websites

This page does not govern cookies set independently after the user leaves the Site and visits YouTube, carrier websites, banking websites, social networks, manufacturers’ websites or other linked sites. The user should review the Cookie Policy of the relevant external website.

35. Changes to this Cookie Policy

This Cookie Policy may be updated following changes to applicable law, detected cookies, services used, the banner, available preferences, purposes of processing or the Controller’s contact details. The date of the latest update is stated at the beginning of the page.

36. Contact details

For questions about cookies or consent management:

Main legal references

  • Regulation (EU) 2016/679 – GDPR;
  • Directive 2002/58/EC on privacy and electronic communications;
  • applicable Greek law on the confidentiality of electronic communications;
  • European and national rules applicable to cookies and similar technologies;
  • other provisions applicable to the specific processing activity.