Krinellia Organics – GDPR Privacy Notice

1. Data Controller

Krinellia Organics Private Company
 Krinellia, Agia Paraskevi, Lesvos, PC 81102, Greece
 Email: info@krinelliaorganics.com
 Phone: +30 697 1890 236

2. Data We Collect

2.1 Data you provide

  • Full name
  • Email
  • Phone
  • Billing & shipping address
  • Order details
  • Newsletter preferences (Mailchimp)

2.2 Automatically collected data (Google Analytics)

  • IP (anonymized)
  • Browser, device, OS
  • Cookies & identifiers
  • Website usage statistics

2.3 Payment data

Card payments are processed by Eurobank / Wordline.  We do not store card information.

3. Purposes of Processing

  • Order processing & delivery
  • Invoicing & tax compliance
  • Customer support
  • Newsletter communication (Mailchimp)
  • Website analytics (Google Analytics)
  • Security & fraud prevention
  • Website optimization

4. Legal Bases

  • Contract performance
  • Legal obligation
  • Legitimate interest
  • Consent (newsletter, marketing cookies)

5. Data Sharing

We share personal data only with:

  • Eurobank / Wordline (payments)
  • Speedex (shipping)
  • Mailchimp (newsletter)
  • Google Analytics
  • Accountant & tax authorities
  • IT/hosting providers

We never sell personal data.

6. Data Retention

  • Orders: 10 years
  • Newsletter data: until you unsubscribe
  • Analytics data: up to 26 months
  • Cookies: according to their category

7. Your GDPR Rights

You may request:

  • access
  • rectification
  • deletion
  • restriction
  • portability
  • objection
  • withdrawal of consent

Requests via: info@krinelliaorganics.com

8. Data Security

We implement:

  • SSL encryption
  • secure hosting
  • limited staff access
  • backups
  • firewall & anti-malware protection

9. Cookies & Tracking

Details are provided in our Cookies Policy.

10. External Links

We are not responsible for third-party sites linked through our website.

11. Complaints

You may contact:

Hellenic Data Protection Authority (HDPA)
 www.dpa.gr

EU ODR platform:
 https://webgate.ec.europa.eu/odr