Privacy Policy
1. Data controller
KAZEPI GROUP ΜΟΝΟΠΡΟΣΩΠΗ Ι.Κ.Ε., Alexandrou Svolou 23-25, Ampelokipoi, 56121 Thessaloniki, Greece, VAT EL802252145 ("we"). For any personal data matter, contact us through our Contact page.
2. What we collect and why
| Orders | Name, email, phone, address, products, amounts, payment method, delivery instructions — to perform the contract (Art. 6(1)(b) GDPR) and meet our tax obligations (Art. 6(1)(c)). |
|---|---|
| Account (optional) | The above plus a password, stored only as a hash — to provide the account (6(1)(b)). |
| Newsletter | Email and language — only with your consent (6(1)(a)), which you may withdraw at any time. |
| Contact | Name, email, phone, message — to reply to you (6(1)(b)/(f)). |
| Security | IP address and time of actions (e.g. placing an order, logging in) — to prevent fraud and abuse (legitimate interest, 6(1)(f)). |
| Analytics & advertising | Only if you click "Accept all" in the cookie notice (6(1)(a)): browsing and purchase data via Google Analytics, Google Ads and Meta Pixel. See our Cookie Policy. |
Your card details are processed exclusively by Viva (Viva Wallet) on its own secure page. We never see or store them.
3. Recipients
We share data only as necessary: with the courier (name, address, phone, cash-on-delivery amount), Viva (card payments), our email service provider, our accountant and accounting system (issuing receipts), and — only with consent — Google and Meta. We never sell personal data.
4. Where data is stored
The website and database are hosted on servers within the European Union. Google and Meta may transfer data to the USA under the EU-US Data Privacy Framework or standard contractual clauses.
5. How long we keep it
- Orders and receipts: as required by tax and accounting law.
- Account: until you delete it.
- Newsletter: until you unsubscribe (link in every email).
- Contact messages: as long as needed to assist you.
6. Your rights
You have the right of access, rectification, erasure, restriction, portability, objection and to withdraw consent at any time. You can delete your account yourself from "My account" and change cookie preferences via "Cookie settings" at the bottom of every page. For any other request, contact us; we will reply within one month. You also have the right to lodge a complaint with the Hellenic Data Protection Authority.
7. Minors
This website is intended for adults. We do not knowingly collect data from children under 15.
8. Security
We use encrypted connections (HTTPS), password hashing, restricted staff access and logging of administrative actions.