Privacy Notice
Version 1.0, in force from 2 November 2026.
Who is responsible
EFTYCHIA ZOI SINGLE MEMBER P.C., 33 Saronikou Street, Ilioupoli, 16345, Greece, GEMI 189797203000, decides how the personal data described here is used, which makes it the controller under the General Data Protection Regulation (GDPR). We deal with businesses, so this notice concerns the people who contact us on a company’s behalf.
What we collect and why
| Details | Used for | Legal basis |
|---|---|---|
| Company name and registration or VAT number, contact person, country or region, business email, phone or WhatsApp | Knowing who is asking and replying to them | GDPR Art. 6(1)(b), pre-contract steps at your request |
| Product models, specifications, condition, quantities, delivery destination, notes | Preparing and discussing a quotation | GDPR Art. 6(1)(b) |
| Company check documents: registration documents, beneficial ownership details, identification of the people who sign for the company, proof of trading address | Confirming that a buyer may buy from us, sanctions screening and preventing fraud | GDPR Art. 6(1)(c) where the law requires the check, otherwise Art. 6(1)(f), our interest in knowing who we trade with |
| Quotations, orders, payments, delivery addresses and order history | Processing orders, invoicing, delivery and after-sales, and keeping tax, customs and accounting records | GDPR Art. 6(1)(b) and Art. 6(1)(c) |
| Your network address while the form is being sent | Slowing down repeated automatic submissions. It is not written into the message | GDPR Art. 6(1)(f), our interest in keeping the form usable |
| A scrambled marker of your email address and request, kept for up to 40 minutes | Stopping a repeated click from delivering the same request twice | GDPR Art. 6(1)(f) |
| Network address, browser type and page requested, in server access logs | Keeping this website working and secure | GDPR Art. 6(1)(f) |
Giving these details is your choice, but without the required fields we cannot prepare a quotation or accept an order.
Who else handles the data
Personal data is never sold. Cloudflare, Inc. delivers this website and passes the form to the company’s mailbox. It may process data outside the European Economic Area under the EU-US Data Privacy Framework or standard contractual clauses.
Others receive data only where their work needs it: our email hosting provider and accountants, banks and payment institutions, couriers, freight forwarders and customs brokers, supply partners fulfilling your order, and providers that help with company checks. Authorities and courts receive it where the law requires, and our professional advisers receive it under a duty of confidentiality.
Some recipients are outside the European Economic Area, for example a courier delivering to your country. Those transfers rely on an adequacy decision, on standard contractual clauses, or on being necessary for the contract you asked for.
How long we keep data
- Enquiries and check documents of buyers who do not go on to order: up to 24 months after the last contact.
- Company check, transaction, invoicing and customs records: 7 years after the financial year concerned ends, or longer if the law requires it.
- Server access logs: up to 90 days.
Security
We protect data with technical and organisational safeguards such as access controls and encrypted connections. No system is completely secure; if a breach occurs, we inform the people affected and the authorities as the law requires.
Your rights
You may ask for access to your data, its correction or erasure, a restriction of its use and a machine-readable copy of it, and you may object to use based on our legitimate interests. Erasure is limited where the law requires us to keep records. Write to the registered address above or to quotes@eftychiazoi.com. We reply within one month and may first need to confirm who you are.
You may also complain to the Hellenic Data Protection Authority, www.dpa.gr.
Children
This website is for businesses, not children, and we do not knowingly hold data about anyone under 18. If you think a child has sent us data, tell us and we will delete it.
Changes to this notice
We may update this notice. The version line at the top shows which text is in force.