Privacy Policy

PRIVACY POLICY & DATA PROTECTION
Compliant with Regulation (EU) 2016/679 — GDPR
Last updated: May 2026

1. GENERAL
The use of the website https://www.yperikon.gr/ — operated by sole trader "Anastasopulos Ap. Vassilios — Valsamo" (hereinafter "the business") — implies unconditional acceptance of this Privacy Policy. If you do not agree, please do not use the website or its services.
This policy may be updated from time to time in line with legislative developments. We recommend checking this page periodically. Continued use of the website after any changes constitutes acceptance of the revised policy.

2. LEGAL FRAMEWORK
This website and our internal systems comply with:
•Regulation (EU) 2016/679 — General Data Protection Regulation (GDPR), applicable from 25 May 2018
•Greek Law 4624/2019 — National GDPR implementation framework
•Directive 2002/58/EC — ePrivacy Directive

3. DATA CONTROLLER
The data controller for this website is:
Anastasopulos Ap. Vassilios — Valsamo / yperikon.gr
Patreos 41-45, 26221 Patra, Greece | info@yperikon.gr | (+30) 2610 221354

4. WHAT DATA WE COLLECT AND WHY
4.1 Order data
To process your order we collect: full name, delivery and billing address, phone number, and e-mail address. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
4.2 Payment data
Card payments are processed exclusively by Piraeus Bank / Epay. We do not store card numbers or payment credentials on our systems.
4.3 Website analytics (Google Analytics)
We use Google Analytics to analyse website traffic anonymously. Data collected (IP address, browser, device type) does not personally identify you. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). You may opt out at: https://tools.google.com/dlpage/gaoptout
4.4 Contact forms
Data submitted via contact forms or e-mail is transmitted using TLS/SSL encryption and is not shared with third parties.
4.5 Newsletter
If you subscribe to our newsletter, we store your e-mail address with your explicit consent. You may unsubscribe at any time with a single click. Legal basis: consent (Art. 6(1)(a) GDPR).

5. COOKIES
What are cookies?
Cookies are small text files stored on your device when you browse a website. They are used to improve your browsing experience and to analyse how our site is used.

Types of cookies we use
•Essential cookies — shopping cart functionality, user login (no consent required)
•Analytics cookies — Google Analytics (anonymous statistics)
•Social media cookies — Facebook, Instagram (third-party cookies)
You can manage or disable cookies through your browser settings. For more information: www.aboutcookies.org

6. YOUR RIGHTS UNDER GDPR
Under the GDPR, you have the following rights:
•Right of access — to know what personal data we hold about you
•Right to rectification — to correct inaccurate data
•Right to erasure ("right to be forgotten")
•Right to restriction of processing
•Right to data portability
•Right to object to processing
•Right to withdraw consent (where processing is based on consent)

To exercise any of these rights, please contact us at: info@yperikon.gr
You may be asked to verify your identity before your request is processed. We will respond within 30 days.

7. SHARING YOUR DATA
We do not sell, rent, or disclose your personal data to third parties for commercial purposes. Your data is shared only with:
•Courier companies (ACS, ELTA, Box Now, DHL) — for order delivery
•Piraeus Bank / Epay — for payment processing
•AfterSalesPro — for shipment management and voucher generation (ISO 27001, GDPR compliant)
•Google (Analytics) — for anonymous website analytics
•Mailchimp — for newsletter delivery (only with your consent)

All third-party processors have been selected to ensure GDPR compliance.

8. DATA SECURITY
We implement appropriate technical and organisational measures to protect your data, including SSL/TLS encryption, secure servers, and restricted access controls.
In the event of a data breach that puts your rights at risk, we will notify you and report the incident to the competent supervisory authority within 72 hours, as required by GDPR.

9. SUPERVISORY AUTHORITY
If you believe your data protection rights have been violated, you have the right to lodge a complaint with:
Hellenic Data Protection Authority (HDPA)
Kifissias 1-3, 115 23 Athens, Greece | Tel.: +30 210 6475628 | contact@dpa.gr | www.dpa.gr

EU residents may also contact the data protection authority in their country of residence.

10. DATA CONTROLLER DETAILS
Anastasopulos Ap. Vassilios
Valsamo / yperikon.gr
Patreos 41-45, 26221 Patra, Greece
info@yperikon.gr | (+30) 2610 221354