1. Introduction
EMPORAS LP (hereinafter "the Company", "we" or "us") takes the protection of your personal data seriously. This Privacy Policy describes how we collect, use, store and protect your data when you visit our website emporas.gr or use our services.
Your personal data is collected and processed in accordance with the General Data Protection Regulation (GDPR — EU 2016/679) and Greek Law 4624/2019.
2. Data Controller
The controller of your personal data is:
3. Data We Collect
We collect the following personal data:
3.1 Data you provide to us:
- Identity details: full name, date of birth (where requested)
- Contact details: email address, phone, shipping/billing address
- Business details (B2B): company name, VAT number (ΑΦΜ), tax office (ΔΟΥ), activity
- Account details: username, password (encrypted)
- Order data: purchase history, product preferences
3.2 Data we collect automatically:
- IP address and browsing information
- Cookies and tracking technologies (see Cookie Policy)
- Device details: browser type, operating system, screen resolution
- Usage data: pages you visit, time spent, navigation path
4. Purpose of Processing
We use your data for:
- Fulfilling orders and customer management
- Communication about products, orders or questions
- Managing the B2B account and personal sales rep
- Issuing receipts and invoicing
- Improving our services and website
- Sending newsletters (only with your consent)
- Compliance with legal obligations (tax, accounting)
- Fraud prevention and security protection
5. Legal Basis for Processing
We process your data on the basis of:
- Consent (Art. 6(1)(a) GDPR) — e.g. newsletter subscription
- Performance of a contract (Art. 6(1)(b)) — e.g. fulfilling an order
- Legal obligation (Art. 6(1)(c)) — e.g. tax documents
- Legitimate interest (Art. 6(1)(f)) — e.g. fraud prevention, service improvement
7. Data Retention
We keep your data for as long as necessary:
- Account data: as long as your account is active
- Order data: 10 years (tax obligation)
- Marketing data: until you withdraw your consent
- Cookies: see Cookie Policy
8. Your Rights (GDPR)
Under the GDPR, you have the following rights:
- Right of Access: to request a copy of your data
- Right to Rectification: to request correction of inaccurate details
- Right to Erasure ("right to be forgotten"): to request deletion of your data
- Right to Restriction: to request a temporary halt of processing
- Right to Data Portability: to receive your data in a structured format
- Right to Object: to object to specific processing (e.g. marketing)
- Right to Lodge a Complaint: with the Hellenic Data Protection Authority
To exercise any right, send an email to sales@emporas.gr. We reply within 30 days.
10. Data Security
We take the following technical and organisational measures:
- SSL/TLS encryption for all data transmission
- Hashed passwords (bcrypt)
- Regular backups and security updates
- Access to personal data restricted to authorised staff only
- Firewall and attack prevention (WAF)
11. Privacy Contact
For any question or request regarding your personal data:
12. Changes
We reserve the right to update this Policy. Material changes will be announced by email or by a notice on the website. The date of the last update is shown at the top of the document.