Privacy Policy - Kombucha hellas

Introduction

Our company recognizes and respects the right to the protection of personal data for internet users, in accordance with the European General Data Protection Regulation (GDPR) 679/2016 and Greek Law 4624/2019. This Policy describes how your personal data is collected, used, shared, and protected, as well as the rights you have regarding your personal data. For any questions regarding this Policy, or any issues related to the processing of your data and the exercise of your rights, you may contact us directly.

We update this Policy whenever necessary. If there are significant changes to the Policy or to the way we use your Data, we will publish the updated version on our website before the changes take effect and will notify you by any appropriate means.
We encourage you to read this Policy periodically to stay informed about how your Data is protected.

The Privacy Policy was last updated in April 2026.

What is personal data?

According to the law, personal data is any information relating to an identified or identifiable natural person (“data subject”), such as full name, email address, tax identification number, etc. An identifiable person is defined as one whose identity can be determined, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier (IP address, email, etc.), or one or more factors specific to their physical, physiological, genetic, psychological, economic, cultural, or social identity.

In compliance with the applicable legal framework, and in particular the European General Data Protection Regulation 679/2016 (GDPR) and Greek Law 4624/2019, our company has taken all necessary measures, implementing appropriate technical and organizational safeguards to lawfully maintain, process, and securely store personal data collected through our website. We are committed to ensuring and protecting your personal data from loss, leakage, alteration, transmission, or any other form of unlawful processing.

What is the processing of personal data?

Processing of personal data refers to any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure to third parties, dissemination, alignment, combination, restriction, erasure, and destruction of personal data.

The data controller responsible for your personal data collected through our online store is Mr. Giorgos KARADIMAS, son of Vangelis, residing in Peristeri, Attica, at 45 Skra Street, Postal Code 12134, with VAT number 075975055. Contact email: giomaked1@gmail.com.

DATA RECIPIENTS

Access to your data is granted only to the minimum necessary company personnel, who are bound by confidentiality obligations. The personal data of visitors and/or users of our online store is not transferred to third-party recipients.

Third parties that may have access to your data include official state and supervisory authorities: (a) when such disclosure is necessary for our compliance with legal obligations, (b) when disclosure is deemed necessary for important reasons of public interest, and (c) for the establishment, exercise, or defense of legal claims.

We do not make decisions or create profiles based on automated processing of your Data, except in the case of using “cookies” on our website, always after providing you with information and obtaining your consent.

APPLICABLE LAW

The applicable law is Greek Law, as structured in accordance with the General Data Protection Regulation 2016/679/EU, and more generally the applicable national and European legislative and regulatory framework for the protection of personal data.

DATA SECURITY

Recognizing the importance of the security of your personal data, we have implemented all appropriate organizational and technical measures to protect your data from any unauthorized access, misuse, alteration, prohibited disclosure, loss, or accidental/unlawful destruction, as well as any other form of unlawful processing. These measures are reviewed and updated whenever deemed necessary.

GENERAL

The information voluntarily provided by website users is used by us to enable direct and meaningful communication with the online store, to respond to specific inquiries, and to process and fulfill their orders. The information we collect through the website is also used to measure website traffic, identify customer demand for additional products, and facilitate transactions with the company. The company does not share email addresses or any other information concerning its users and customers with any other organization or partner not affiliated with it.

Collection of Information

We designed our website so that users can visit it without having to reveal their identity unless they choose to. Visitors are only asked to provide personal data if they wish to place an order, register on our website, and/or send us an email.

The website collects four types of information about users: (1) information provided by the user when registering as a customer, (2) information provided by the user to process their order, (3) information provided by the user when signing up for the online store’s newsletter, and (4) information provided by the user when connecting via another electronic platform (Facebook, Instagram, Pinterest). This information may include:

Personal data such as name, address, email address, phone number, and other contact information.
Account information, such as username and other identifiers or credentials used to access our online services
Device information
IP address and cookie data

Processing of information

a. Basic processing

The user/customer has the option to choose between two methods to complete an online order and provide their personal data:

As a guest: In this case, the personal data of the visitor/customer will be retained in the COMPANY’s records until the completion and delivery of the specific order, with the exception of transaction data for tax purposes. The processing of this data will be exclusively for the purpose of fulfilling the sales contract.
As a registered user of the online store: In this case, the customer/user has created an account on our online store, and their personal data will be retained in the company’s records until they request its deletion. The user/customer can modify or correct their data at any time by logging into their account on the website using their username and password.

Welcome to our website. The website www.kombucha-hellas.gr is an online store for displaying and selling products via the Internet (hereinafter referred to as the “online store” or “website”) created and operated by the limited partnership company “TIMEELLAS360 E.E.,” headquartered in Peristeri, Attica, at 15 Empedokleous Street, Postal Code 12131, with VAT number 802271264, GEMI 173372603000. For communication, the company can be reached via email at info@kombucha-hellas.gr or by phone at 6955501050 (hereinafter referred to as the “COMPANY”).

The use of a credit card, for which identification documents of the legal cardholder are required, is fully secured in all cases.

The purpose of the basic processing of data is to execute the contract and complete the specific order, communicate with the user/customer, send informational messages regarding the stages of order processing, provide clarifications related to the order, and deliver the order to the location chosen by the user/customer. The visitor/registered user is informed that providing the above mandatory personal data, as well as transaction details, is necessary and a prerequisite for the proper execution of the order contract and delivery of products and services. For this reason, the consent of the user/customer is not required for this specific processing.

Every user-customer using the website is informed that their personal data related to the receipt, processing, and delivery of orders will be processed for the purpose of serving users/customers, both by our authorized employees and by third-party recipients and/or processors acting on our behalf in the context of fulfilling an order. These third-party recipients include shipping companies and internet service providers with whom the COMPANY collaborates.

No further processing or transfer of users’/customers’ data will be carried out by the COMPANY or its online store, except for the processing described under item b below, for which the COMPANY has obtained prior consent from the users/customers, or when required by law or by competent supervisory or judicial authorities.

b. Processing that requires consent

For sending commercial informational and promotional messages to the registered user/customer, the registered user/customer must have previously given explicit consent. The purpose of processing the registered user’s/customer’s data in this case is to send commercial promotional messages from the website to the registered user/customer, provide special offers and discounts from the online store, and offer new or alternative products. You have the right to withdraw this consent at any time and stop receiving such communications.

Any document or proof that verifies and confirms the identity of the customer remains strictly confidential and is reviewed only by the company’s designated data controller. By providing your personal data, you consent to its use by the company’s employees for the purposes described above. The company requires its employees and website maintainers to provide users/customers with the level of security outlined in this Privacy Policy. Under no circumstances can the company share your personal data with others without your prior consent, except when required by law.

This website uses cookies to collect information. Cookies are small data files placed on a user’s computer or other devices (such as smartphones or tablets) while browsing a website. They allow the website to operate smoothly without technical issues, remember user preferences, recognize frequent visitors, facilitate access, and collect information to help improve website content They are also used to tailor products and services offered and advertised to the user, both on the website and through social media channels. User consent is required to activate cookies.

We do not use cookies to gather information about your visits to other websites, nor to verify personal details, except for the information you have voluntarily provided to us. Even if you choose not to allow the use of cookies beyond the strictly necessary ones, you can still enjoy the full functionality of our website.

With your permission, we may use precise geolocation data and device identification through scanning. You can click to give your consent for us to process your data as described above. Alternatively, you can access more detailed information and modify your preferences before giving consent or choose to refuse consent altogether. Please note that some processing of your personal data may not require your consent, but you have the right to object to such processing. Your preferences will only apply to this website. You can always update your preferences by returning to this website or by visiting our privacy policy page.

Data Subject Rights

Regarding the protection of your personal data, you have the following rights:

Right of access, i.e., the right to be informed whether personal data concerning you is being processed
Right to rectification, i.e., the right to request the correction of inaccurate personal data.
Right to erasure, i.e., the right to request the deletion of personal data concerning you.
Right to restriction of processing, i.e., the right to request that the processing of your personal data be limited when the accuracy of the data is contested, the processing is unlawful, or for other reasons.
Right to data portability, i.e., the right to request to receive the personal data concerning you in a structured, commonly used, and machine-readable format, and
Right to object to the processing of your personal data, unless there are compelling and lawful grounds for the processing that override your interests, rights, and freedoms.

In the event that a registered user/customer exercises any of the rights mentioned above, the COMPANY will take all possible measures to fulfill the request within one (1) month of its submission. In this case, the registered user/customer is informed that the minimum necessary personal data will be retained to safeguard the legitimate interests of the company.

Right to lodge a complaint

According to Regulation No. 679/2016 and national legislation, you have the right, if you believe your rights regarding the protection of your personal data are being violated, to file a complaint with the Data Protection Authority, located in Athens (1-3 Kifisias Avenue, Postal Code 115 23), by phone at 2106475600, fax at 2106475628, or via email at contact@dpa.gr

DATA RETENTION PERIOD

The user’s/customer’s data will be retained and processed by the COMPANY until the completion of the specific order.

The data of a registered user/customer will be retained and processed until the user/customer requests the deletion of their account or, for data processing based on their consent, until they withdraw that consent for the purposes of the COMPANY’s services. However, certain necessary personal data related to their transactional relationships with the COMPANY, as well as information regarding their consent and withdrawal of consent for data processing, will be retained to ensure proof of the legality of the COMPANY’s data processing and to protect the legal rights of the parties involved.

Personal data is also retained for as long as required by tax legislation.