Privacy Policy for www.hellasstones.com

HELLAS STONES (hereinafter referred to as the “Company”) places great importance on the lawful processing, security, and protection of your personal data.

This Privacy Policy aims to inform you about the terms of collection, processing, and transfer of personal data that we may collect as Data Controller during your visit to our website.

Please read this Privacy Policy and our Cookies Policy carefully to understand how we handle your personal data. By continuing to use our website, you acknowledge that you have read and understood this Privacy Policy and the Cookies Policy.

Data Controller

For the purposes of this Privacy Policy, the Data Controller is:

AFOI GAGKOU O.E., operating under the trade name Hellas Stones,
Industrial Area of Larissa (B.I.P.E. Larissa), 40006, Greece
VAT No.: 099847353
G.E.MI. No.: 026638340000

What is Personal Data?

Personal data refers to any information that can directly or indirectly identify you as an individual.

Examples include:

• Full name
• Tax identification number
• Social security number
• Postal and email addresses
• Telephone numbers
• Payment details
• Device or online identifiers
• Browsing history (log files, cookies, etc.)

The collection and processing of personal data are governed by the General Data Protection Regulation (GDPR - Regulation EU 2016/679), Law 4624/2019, and decisions of the Hellenic Data Protection Authority.

What Data We Collect

When using our website, we may collect personal data:

• directly from you
• automatically through our website
• from third parties (e.g. social media platforms such as Facebook, Instagram, LinkedIn, Pinterest, Twitter, and YouTube)

Informational Use of the Website

When you visit our website, certain data is automatically collected through cookies and stored temporarily in log files.

What information we collect

• IP address
• Operating system
• Device type (mobile/tablet)
• Browser type and version
• Date and time of access
• Referring website
• Geolocation data (if consent is provided)

Why we collect this data

• To ensure website security
• To prevent fraud
• To resolve technical issues
• To improve and personalize user experience

Legal basis

Legitimate interest (Article 6(1)(f) GDPR)

Retention period

Data is stored for 12 months and then automatically deleted.

Customer Communication

You may contact us via:

• Contact form
• Facebook Messenger

What information we collect

Contact form:

• Name
• Email
• Phone number
• Message content

Messenger:

• Username
• Profile image
• City
• Message content

(If used as a guest, only message content is processed)

Why we collect this data

• To respond to inquiries
• To provide customer support
• To improve our products and services

Legal basis

• Consent (Article 6(1)(a) GDPR)
• Legitimate interest (Article 6(1)(f) GDPR)

Retention period

• Up to 6 months after last communication
• Messenger guest data: 24 hours

Social Media Presence

We maintain active profiles on social media platforms to enhance communication and interaction.

We act as joint controllers with social media providers (Article 26 GDPR).

Data collected

• Name
• Profile image
• City
• Comments/messages
• Anonymous analytics data

Purpose

• Communication with users
• Promotion of products and services
• Publication of content

Legal basis

Consent (e.g. like, follow, interaction)

Retention

Determined by each platform’s Privacy Policy.

Advertising & Cookies

We use cookies for marketing and advertising purposes, subject to your consent.

Data collected

• Visit duration
• Page views
• Navigation behavior

Purpose

To display personalized advertising content based on your interests.

Legal basis

Consent (Article 6(1)(a) GDPR)

Retention

Until consent withdrawal or cookie expiration.

Third-Party Links

Our website may contain links to third-party websites.

The Company is not responsible for:

• their content
• their privacy practices

We recommend reviewing their Privacy Policies.

Minors

HELLAS STONES does not knowingly collect personal data from minors.

If such data is identified without proper legal basis, it will be deleted immediately.

Data Sharing

We do not share your personal data with third parties without your consent, except where required by law.

Possible recipients:

• Phoenix DA (Greece) – hosting & technical support
• ENARTIA S.A. (Greece) – infrastructure services

Data is stored on servers located in Greece.

Transfers outside the EEA occur only with:

• adequacy decisions
• standard contractual clauses
• approved safeguards

Data Security

We implement appropriate technical and organizational measures to ensure:

• Data confidentiality
• Data integrity
• Data availability

Measures include:

• TLS encryption
• Daily backups
• Firewalls & security software
• Restricted access controls
• Confidentiality agreements

Your Rights

You have the right to:

• Access your data
• Rectify inaccurate data
• Erase data (under conditions)
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent at any time

How to Exercise Your Rights

You may contact us:

📧 Email: info@hellasstones.com
📍 Address: Hellas Stones, B.I.P.E. Larissa, 41005 Larissa, Greece
📬 P.O. Box: 3019

We will respond within 30 days.

Complaints

If you believe your data is being processed unlawfully, you may contact:

Hellenic Data Protection Authority
Website: www.dpa.gr
Address: 1–3 Kifisias Ave, 11523 Athens
Tel: +30 210 6475600

Updates to This Policy

This Privacy Policy is regularly updated to comply with legal requirements and best practices.

Last updated: March 30, 2021