Data controller: [COMPANY LEGAL NAME], Karkalis Flowers, Sofokli Venizelou side street, Central Market, 54628 Menemeni, Thessaloniki, Greece. VAT No: [VAT NUMBER]. Tel.: +30 2310 703130, Email: info@karkalis.eu.

This policy explains how we process your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Greek Law 4624/2019.

1. What data we collect and why

• Enquiries by email or phone: if you contact us, we process the details you give us (name, email, phone, message) so that we can reply to you. Legal basis: our legitimate interest in answering your enquiries / steps taken at your request.
• Cookies and statistics: only with your consent (see our Cookies Policy). Legal basis: consent (Art. 6(1)(a) GDPR).
• Google Maps: loaded only after you consent, in which case Google receives your IP address.

2. Recipients

Your data is never sold or shared for advertising purposes. It may be processed by service providers (hosting: [HOSTING PROVIDER], email, Google as analytics and maps provider) under data processing agreements.

3. Retention

Messages are kept for as long as needed to serve you and, at most, [24] months after the last contact, unless the law requires longer retention.

4. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent at any time (via the “Cookie settings” link in the footer). To exercise them, contact us at the email above.

You may also lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

5. Security

We apply appropriate technical and organisational measures (HTTPS encryption, restricted access) to protect your data.

Last updated: [DATE]