To Chani tis Gravias – chanigravias.com
Last updated: October 2025
1. General Information
This Privacy Policy explains how “To Chani tis Gravias”, located in Gravia, Fokida, Greece, Postal Code 330 57,
Tel: +30 22650 91735, Email: info@chanigravias.com,
(“we”, “our”, or “the company”), collects, uses and protects your personal data through the website chanigravias.com.
We act as the Data Controller under EU Regulation 2016/679 (GDPR) and Greek Law 4624/2019.
2. Data We Collect
We collect only the data strictly necessary for your service and the operation of our e-shop.
a) During browsing:
IP address, device type, browser type, cookies (via Google Analytics).
b) When registering or purchasing:
Full name
Shipping address
Telephone number
Email address
Billing details
Order history
c) During payment:
Your card details are not stored on our website.
All transactions are processed securely by Piraeus Bank, which is responsible for handling your payment information.
d) Via the contact form:
Name, email address and message content.
e) Via newsletter subscription:
Email address (processed by Mailchimp).
3. Purposes of Processing
Your personal data are processed solely for the following purposes:
Order fulfillment and product delivery.
Communication regarding your orders or account.
Sending newsletters and promotional updates (only with your consent).
Improving our services and user experience (via Google Analytics).
Compliance with legal and tax obligations.
4. Legal Basis for Processing
Processing of your personal data is based on:
The performance of a contract (order execution).
Your consent (newsletter subscription, cookies).
Legal obligations (e.g., accounting and tax record-keeping).
Our legitimate interest in improving services and security.
5. Cookies and Analytics
Our website uses Google Analytics to analyze traffic and improve user experience.
Cookies are small text files that do not contain personal information and can be disabled at any time through your browser settings.
For more details, please read our Cookie Policy.
6. Data Sharing with Third Parties
Your data may be shared only with trusted third parties strictly for operational purposes:
Piraeus Bank – payment processing.
Mailchimp – newsletter management (servers located in the U.S., under EU Standard Contractual Clauses).
Courier companies – for product delivery (partner to be determined).
All third parties process data on our behalf and in full compliance with GDPR obligations.
7. Data Retention Period
Customer data: up to 5 years for tax compliance.
Newsletter data: until you withdraw consent.
Cookies: according to browser settings or until deleted.
Contact form data: up to 12 months after responding to your request.
8. Your Rights
You have the following rights under the GDPR:
Right of access to your personal data.
Right to rectification or erasure.
Right to restrict or object to processing.
Right to data portability.
Right to withdraw consent (e.g., unsubscribe from newsletter).
To exercise any of these rights, contact us at:
info@chanigravias.com
9. Data Security
We apply all appropriate technical and organizational security measures (SSL encryption, limited access, secure storage).
Payment details are not stored on our systems.
10. Links to Third-Party Websites
Our website may contain links to third-party sites (e.g., social networks, Mailchimp).
We are not responsible for their privacy practices.
We encourage you to review their respective privacy policies before using them.
11. Contact Information
For any questions or requests related to your personal data, please contact the Data Controller:
To Chani tis Gravias
Gravia Fokida 330 57 Greece
+30 22650 91735
info@chanigravias.com
12. Policy Updates
This Privacy Policy may be updated periodically to reflect legal or operational changes.
Any revised version will be posted on chanigravias.com and will take effect upon publication.
