1. Data Controller
The data controller responsible for processing your personal data is:
[COMPANY NAME]
2. What Data We Collect
We collect and process the following personal data:
2.1 Data from Contact Forms
When you fill out our contact form, we collect:
- Name
- Phone
- Subject
- Message
2.2 Data from User Accounts
If you create an account on our website, we collect:
- First and last name
- Phone (optional)
- Address (for shipping)
- Password (encrypted)
2.3 Data from Orders (E-shop)
If you make purchases, we collect:
- Billing and shipping information
- Payment information (depending on payment method)
- Order history
2.4 Cookies & Analytics
We use cookies and tracking technologies for:
- Website functionality
- Traffic analysis (Google Analytics)
- Marketing and advertising (Meta Pixel, Google Ads)
2.5 Newsletters / Marketing
If you subscribe to our newsletter, we collect:
- Communication preferences (optional)
3. Processing Purposes
We process your personal data for the following purposes:
- Contractual obligations: Processing orders, shipping products, providing services
- Communication: Responding to contact requests, customer support
- Legal obligations: Compliance with tax and legal requirements
- Legitimate interest: Protection of our rights, fraud prevention
- Consent: Marketing, newsletters, analytics (with your consent)
4. Legal Basis for Processing
The processing of your personal data is based on:
- Contract performance: For orders and service provision
- Legal obligation: For tax and accounting requirements
- Legitimate interest: For security and fraud prevention
- Consent: For marketing, newsletters, analytics
5. Data Recipients
Your personal data may be shared with:
- Hosting providers: Providers hosting the website
- Email providers: Email delivery services (e.g., Mailchimp, SendGrid)
- Analytics providers: Google Analytics, Meta Pixel (with consent)
- Payment providers: Banks, payment gateways (for orders)
- Shipping companies: Delivery companies (for orders)
- Legal/Accounting: For legal and accounting services
All providers are committed to protecting your data in accordance with GDPR.
6. Data Subject Rights
Under GDPR, you have the following rights:
6.1 Right of Access
You can request information about the data we hold about you.
6.2 Right to Rectification
You can request correction of inaccurate or incomplete data.
6.3 Right to Erasure (“Right to be Forgotten”)
You can request deletion of your data, provided there is no legal reason to retain it.
6.4 Right to Restrict Processing
You can request restriction of processing of your data.
6.5 Right to Data Portability
You can receive your data in a structured, commonly used format.
6.6 Right to Object
You can object to processing of your data for marketing purposes.
6.7 Right to Withdraw Consent
You can withdraw your consent at any time.
To exercise your rights, contact us at: [EMAIL]
7. Data Retention Period
We retain your personal data:
- Contact forms: 2 years from last communication
- User accounts: For as long as you maintain your account
- Orders: 10 years (for accounting/tax purposes)
- Cookies: According to your browser settings
- Newsletters: Until you unsubscribe
8. Cookies & Third-Party Services
8.1 Cookies
We use cookies for:
- Essential cookies: For website functionality
- Analytics cookies: For traffic analysis (Google Analytics)
- Marketing cookies: For advertising and remarketing
You can manage cookies from your browser settings.
8.2 Third-Party Services
We use:
- Google Analytics: For traffic analysis
- Meta Pixel: For marketing (if used)
- Google Ads: For advertising (if used)
These services have their own privacy policies.
9. Data Security
We implement appropriate technical and organizational measures to protect your data:
- Data encryption
- Secure connections (HTTPS)
- Limited data access
- Regular security audits
10. Contact
For any questions or requests regarding your personal data:
11. Changes to Privacy Policy
We reserve the right to modify this Privacy Policy. Changes will be published on this page with an updated date.
We recommend checking this page periodically.
12. Supervisory Authority
You have the right to file a complaint with the Data Protection Authority:
Data Protection Authority
- Address: Kifisias 1-3, 115 23 Athens
- Phone: 210 6475600
- Website: https://www.dpa.gr
Last updated: [DATE]