Privacy policy

Last updated: 23/10/2026. Draft for legal review.

Controller

[COMPANY LEGAL NAME], [Street, number, city, postcode, Greece], [EMAIL]. We process personal data under the GDPR (EU 2016/679) and Greek Law 4624/2019.

What we collect and why

• Orders: name, address, email, phone, order details, payment status (not card numbers). Legal basis: contract. Kept for 5 years for tax law.
• Account: login details and order history. Legal basis: contract. Kept until you delete the account.
• Community profile (optional): display name, sport, birth year, city, photo. Legal basis: your consent; shown publicly only after you opt in and we approve. Withdraw consent any time in your account.
• Newsletter: email, language. Legal basis: consent. Kept until you unsubscribe.
• Contact form: name, email, message. Legal basis: legitimate interest in answering you. Kept for 12 months.
• Analytics and ads (optional): cookies for Google Analytics and Meta, only with your consent. See the cookie policy.
• Server logs: IP address and technical data, for security. Legal basis: legitimate interest. Kept for 30 days.

Who receives data

Only service providers needed to run the shop: payment provider, courier companies, hosting (ChemiCloud, EU servers), email delivery, and, with consent, Google and Meta. We do not sell data.

Your rights

Access, correction, deletion, restriction, portability, objection, and withdrawal of consent, by emailing [EMAIL]. You can also complain to the Hellenic Data Protection Authority (ΑΠΔΠΧ, www.dpa.gr).

Security

The site uses HTTPS; payments go through a PCI-DSS certified provider. Access to personal data is limited to staff who need it.

Children

The shop is intended for persons aged 16 and over.