A compliant Greek e-shop needs four things: a business start-up with an e-commerce activity code and GEMI registration, full company details visible on the site, terms of sale including the 14-day right of withdrawal, and electronic invoicing connected to myDATA.
Two things changed recently and are missing from most Greek e-shops: the withdrawal button has been mandatory since 19 June 2026, and the link to the EU online dispute resolution platform must now be removed — the platform has closed.
Want to know what is missing from your shop? Request a free compliance check and you will get a list of what needs fixing.
Table of Contents
What paperwork do I need before the first sale?
There is less bureaucracy than you fear, but it has an order.
| Step | Where | Typical time |
|---|---|---|
| Business start-up with e-commerce code (47.91.71) | myAADE | 1–3 working days |
| Secondary activity codes per product category | myAADE | Alongside the above |
| GEMI (business registry) registration | Chamber of commerce / business portal | A few days |
| Declaring the online store | myAADE | Immediate |
| EFKA social security registration | EFKA | In parallel with start-up |
The core code for online retail is 47.91.71. Secondary codes depend on what you sell — clothing, cosmetics and electronics each have their own.
If you already sell through Instagram without a registered business, this is the point at which you regularise everything. The full migration guide is here: from Instagram shop to e-shop.
What must appear on my site
A customer must be able to find out who you are without hunting. These belong somewhere obvious, usually the footer plus a dedicated page.
- Full registered company name, not just the trading name.
- Registered address, not a PO box.
- Tax ID and competent tax office.
- GEMI number.
- Phone and email that are actually answered.
- Licensing authority, if your activity requires a licence.
The most common mistake is a “Contact” page with nothing but a form. A form does not replace the details.
The three pages that must exist
| Page | What it covers | Why it gets checked |
|---|---|---|
| Terms of sale | Ordering process, prices, payment, delivery, warranty | It is your contract with the customer |
| Returns & withdrawal policy | Deadlines, who pays the cost, exclusions | The most common source of complaints |
| Privacy & cookie policy | What data you collect, why, for how long | A GDPR obligation |
Do not copy another shop’s terms. Beyond the copyright issue, you will end up promising things you do not do — and that is binding on you.
How long does a customer have to return something?
A consumer has 14 calendar days from delivery to withdraw, with no obligation to give a reason. After declaring withdrawal, they have another 14 days to send the item back.
You then have 14 days to refund, including the original delivery charge. You may withhold the refund until you receive the goods or proof of dispatch.
When withdrawal does not apply:
- Made-to-order or personalised goods.
- Perishable products with a short shelf life.
- Sealed hygiene products that have been opened.
- Sealed audio, video or software once unsealed.
- Digital content whose delivery has begun with express consent.
Note this trap: if you fail to inform the customer properly about the right of withdrawal, the 14-day window extends to 12 months and 14 days.
Separate from withdrawal, there is the statutory guarantee: for two years from delivery you are liable for product defects. This is not a commercial warranty — it is an obligation.
What is the withdrawal button, and why you need it now
Since 19 June 2026, every online shop selling to EU consumers must provide a one-click withdrawal function, not just a form or an email address.
What is technically required:
- A clearly labelled button or link, worded unambiguously along the lines of “withdraw from contract here”, available throughout the withdrawal period.
- Two steps: first identify the customer and the order, then a separate confirmation button.
- An automatic acknowledgement to the customer, usually by email, as proof.
- A record of the declaration, with date and time, as evidence.
The obligation applies to businesses of every size, with no minimum turnover threshold. Penalties for non-compliance can reach administrative fines calculated as a percentage of annual turnover.
If your shop launched before June 2026, it almost certainly does not have this. It is worth checking this week.
Not sure whether your button meets the spec? Send us your shop’s address and we will check it free.
The ODR link you need to delete
For years, e-shops were required to display a link to the EU Online Dispute Resolution platform. The platform stopped operating on 20 July 2025 and the regulation was repealed.
The link must be removed from your terms and your footer. A dead link inside a legal text is not merely untidy — it points consumers at a mechanism that no longer exists.
In its place, tell customers which alternative dispute resolution bodies are available and that they can escalate to the Greek Consumer Ombudsman.
GDPR: what it means in practice for an e-shop
You do not need a legal department. You need five things working correctly.
- A privacy policy stating what data you collect, why, where it is stored and for how long.
- A cookie banner with a real choice. Non-essential cookies do not load before consent. “Reject” must be as easy as “Accept”.
- Separate consent for the newsletter. The checkbox is not pre-ticked and is not buried in the terms.
- Right to erasure. A customer can request their data or its deletion, and you respond within one month.
- Security: SSL across the whole site, strong passwords, restricted admin access.
If you use external tools — email marketing, analytics, couriers — they are data processors and must be named in your policy.
Invoicing, VAT and myDATA
Every sale needs a tax document that reaches the Greek tax authority. From 1 October 2026, electronic invoicing becomes mandatory for all businesses.
| Topic | What applies |
|---|---|
| VAT | Standard 24%, reduced 13% and 6% by category |
| Sales to EU consumers | Greek VAT up to €10,000 a year, then the OSS scheme |
| Cash register | Not required for purely online sales |
| Transmission to myDATA | In real time via a provider |
The full guide with steps and costs is here: connecting an e-shop to myDATA.
Pre-launch checklist
Go through this with your accountant and your web developer. Half of it is yours, half is theirs.
- Business start-up with the right activity codes and GEMI registration.
- Company details visible in the footer of every page.
- Terms of sale written for your actual business.
- Returns policy with deadlines and exclusions.
- A model withdrawal form the customer can download.
- A two-step withdrawal button with automatic acknowledgement.
- Privacy policy and a cookie banner offering a real choice.
- SSL on every page.
- Prices inclusive of VAT and shipping costs shown before checkout.
- Invoicing connected to myDATA.
- The old ODR link removed.
- Delivery times stated per product or category.
If you are paying a developer, items 2, 6, 7, 8, 9 and 11 are their job. Ask for them in writing in the quote — see what else it should include in e-shop costs.
Frequently asked questions
Do I need a lawyer for the terms?
For a standard retail shop, a well-adapted template covers it. If you sell subscriptions, food, medicines or licensed goods, get legal review.
Who pays return shipping?
The customer, provided you told them clearly before the order. If you did not put it in writing, you pay.
Can I refuse returns?
Not for distance sales to consumers. The right of withdrawal cannot be removed by a term in your contract.
What if I also sell to other EU countries?
The same consumer protection rules apply, and VAT changes once you pass €10,000 of annual sales to EU consumers.
What does compliance cost?
Legal texts typically run €150–€600. The withdrawal button and cookie banner are a few hours of technical work if done alongside the build.
What to do this week
Open your own shop as if you were a customer. Count how many clicks it takes to find your tax ID, your returns policy, and a way to cancel an order.
If any of the three takes more than two clicks, your customers will struggle too — and so will an inspector.
This article is for information only and is not legal advice. For your own case, consult a lawyer and your accountant.
Next step Book a free 30-minute call with the team at The Dev Alley. We will walk the checklist together and tell you what needs fixing and what does not.
