Privacy policy

Here we explain what personal data we collect, why, how long we keep it and what rights you have, under the General Data Protection Regulation (EU) 2016/679 (GDPR).

Data controller

ART RESTORATION E.E., ΑΦΜ 800765361, Διονύσου και Αθηνάς, Κάτω Μαρμαρά, 455 00 Ιωάννινα. Για θέματα προσωπικών δεδομένων: info@artrestorationsupplies.gr · 210 691 4633.

What data we collect

• Account: full name, email, phone, password (encrypted), role (e.g. conservator, institution, student), school for students.
• Billing: company name, VAT number, tax office, business activity, registered address.
• Delivery: address, delivery contact, phone, delivery hours and notes.
• Orders and communication: products, amounts, invoices, messages and attachments you send us.
• Technical data: IP address and cookies (see Cookie policy). Traffic statistics are collected only with your consent.

Why we use it

• To create your account, fulfil orders and ship them (performance of a contract).
• To issue invoices and keep accounting records (legal obligation).
• To check the VAT number in VIES or the Greek tax registry at registration (legitimate interest and legal obligation for intra-Community sales).
• To answer enquiries and quotes (pre-contractual steps or legitimate interest).
• For statistics and advertising, only if you have given consent.

Who we share it with

• Carriers (BOX NOW, ACS, freight carriers, FedEx, DHL), only the details needed for delivery.
• The company's accountant and business software, for invoicing.
• Website hosting provider and email provider.
• Google (Analytics) and Meta, only with your consent.
• Public authorities, where required by law (e.g. the tax authority).

Where data is transferred outside the EU (e.g. Google), appropriate GDPR safeguards apply (standard contractual clauses or an adequacy decision).

How long we keep it

• Order and invoice data: for as long as tax law requires.
• Account: until you ask for it to be deleted.
• Contact form messages: up to 2 years, unless linked to an order.

Your rights

You have the right of access, rectification, erasure, restriction, portability and objection, and may withdraw consent at any time. Email us and we will reply within one month. You may also lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

Security

The website runs over an encrypted connection (HTTPS). Passwords are stored encrypted and only authorised persons have access to the data.