We respect your privacy. This policy explains what personal data we collect at petridi.gr, why, how long we keep it and what rights you have, under the General Data Protection Regulation (EU) 2016/679 ("GDPR") and Greek Law 4624/2019.
1. Data controller
«AFAI PETRIDI O.E.», Karolou Ntil 27, 54623 Thessaloniki, Greece, VAT No. 998081399, legally represented by its managing partner Maria Petridi. Phone: +30 2310 227746, e-mail: info@petridi.gr.
2. What data we collect
- Account: name, e-mail, password (stored encrypted).
- Orders: shipping and billing address, phone number, products, amounts, payment method. We never see or store card details; payment takes place on the bank's or PayPal's page.
- Businesses (B2B): company name, activity, VAT number and tax office, to issue an invoice.
- Communication: the messages and files you send us through the contact form or by e-mail.
- Newsletter: your e-mail address, if you subscribe.
- Technical data: IP address, device and browser type, cookies (see section 10).
We do not collect special categories of data (e.g. health data).
3. Why we use it and on what legal basis
| Purpose | Legal basis (Article 6 GDPR) |
|---|---|
| Processing orders, shipping, payment, returns | Performance of a contract |
| Creating and managing your account | Performance of a contract |
| Issuing receipts and invoices, tax obligations | Legal obligation |
| Answering requests and complaints | Performance of a contract or legitimate interest |
| Sending our newsletter with offers | Consent |
| Visitor statistics (Google Analytics) | Consent (through cookies) |
| Website security, fraud and spam prevention (reCAPTCHA) | Legitimate interest |
4. Who we share data with
We do not sell your data. We share it only as needed with:
- courier companies (ACS, Geniki Taxydromiki, ELTA), for delivery,
- banks and payment providers (e.g. PayPal), for payment,
- hosting, security and website service providers (e.g. Cloudflare),
- Google, for statistics (Google Analytics) according to your cookie choice, and to protect our forms from spam (reCAPTCHA),
- the OpenStreetMap Foundation, which provides the map on our Contact page and receives your IP address when the map loads,
- our accountant and public authorities, when the law requires it.
These partners process data only for the task given to them and are bound to protect it.
5. Transfers outside the EU
Some providers (e.g. Google, PayPal, Cloudflare, OpenStreetMap Foundation) may process data outside the European Economic Area, mainly in the USA and the United Kingdom. Such transfers use the safeguards of the GDPR, such as the EU-US Data Privacy Framework or standard contractual clauses.
6. How long we keep data
- Account: until you delete it.
- Orders and invoices: for as long as tax law requires, even if you delete your account.
- Newsletter: until you unsubscribe.
- Messages: for as long as needed to help you and to defend any legal claims.
- Cookies: as listed in section 10.
7. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and you can withdraw your consent at any time, without affecting the lawfulness of processing before that.
You can do much of this yourself from "My account" → "My personal data":
- download your data as PDF or CSV,
- permanently delete your account,
- correct your details from the "Information" and "Addresses" pages.
You can unsubscribe from the newsletter through the link in every e-mail or from your account. For any other request, write to info@petridi.gr. We reply within one month.
8. Security
The website uses an encrypted connection (SSL). Passwords are stored encrypted, and access to data is limited to the people who need it for their work.
9. Children
Our store is not aimed at children under 15. If we learn that we hold a child's data without parental consent, we will delete it.
10. Cookies
Cookies are small files stored in your browser. We use:
| Category | What they do | Examples | Duration | Consent |
|---|---|---|---|---|
| Necessary | Signing in, cart, language, remembering your cookie choice | PrestaShop-*, pcc_consent | Up to 20 days (pcc_consent: 6 months) | Not required |
| Statistics | Show us how the website is used, so we can improve it | Google Analytics (_ga, _ga_*) |
Up to 2 years | Only if you accept |
Statistics cookies are only stored if you click "Accept" in the cookie message. If you don't accept them, Google Analytics works without cookies (Google Consent Mode) and receives only limited, aggregated signals, with no identifier that follows you. You can change your choice at any time from the "Cookie settings" link at the bottom of every page, or delete cookies in your browser settings.
11. Complaints
If you believe the processing of your data breaks the law, you can file a complaint with the Hellenic Data Protection Authority (Kifisias Ave. 1-3, 11523 Athens, www.dpa.gr). We suggest contacting us first, so we can try to resolve it.
12. Changes
We may update this policy. The current version is always published on this page.
Last updated: 4 October 2026