1. Who we are
The online shop grifon.gr is owned and operated by GRIFON SPIRIDAKIS OE, which decides how and why your personal details are used.
- Registered office: Linoperamata, Gazi, Heraklion, Crete, 71500, Greece
- Tax ID (ΑΦΜ): 802712744 · VAT: EL802712744 · Heraklion Tax Office · General Commercial Registry (ΓΕΜΗ): 181397127000
- Telephone: +30 2810 821627, +30 2810 821730, +30 6936 545855 (Monday–Friday, 8:00–16:00)
- Email address: info@grifon.gr
For anything concerning your details, write to us at info@grifon.gr.
2. What this text covers
It covers the details you give or leave behind when you visit grifon.gr, open an account, request wholesale access, place an order or contact us. The shop is aimed exclusively at businesses; we do not sell to private consumers and we do not knowingly collect details of minors.
3. What we keep, why, and on what legal ground
| What we keep | Why | On what legal ground |
|---|---|---|
| First name, surname, email address and password, when you open an account | So that you have an account and can place orders | Performance of the contract with you |
| Company name, address, city, postcode, country, Tax ID (ΑΦΜ), contact name and telephone number of your business, and optionally two documents (company certificate, invoice), when you submit a wholesale application | So that we can confirm you are a business and open wholesale prices for you | Steps taken before the contract, at your own initiative |
| The status of your application and the reason, if it is not accepted | So that we can reply to you and know what has been decided | Our legitimate interest in managing our network of partners |
| Orders: products, amounts, billing and delivery address, telephone number, carrier | So that we can process and deliver the order | Performance of the contract with you |
| Invoices and tax records, together with your Tax ID (ΑΦΜ) | So that we can issue and keep the accounting documents | An obligation imposed on us by law |
| Card payment: the card details go directly to the card payment provider (Cardlink, Eurobank). We only see whether the payment went through | So that the order can be paid | Performance of the contract with you |
| Messages sent through the contact forms: name, email address, telephone number, and in three forms also Tax ID (ΑΦΜ) and address, your message and the files you attach (CV, price list, prospectus, other attachments) | So that we can answer your request | Our legitimate interest in serving everyone who writes to us |
| Newsletter: your email address, and the date and connection address of your sign-up | So that we can send you news and offers | Your consent, which you may withdraw whenever you wish |
| Technical operating data: the visit cookie, the automatic check of the forms and of the checkout against automated programs (Google reCAPTCHA), the history of the changes made to your details | So that the basket works, so that we are not attacked and so that we can see what changed | Our legitimate interest in keeping the shop running and secure |
| Traffic statistics through Google Analytics, with an anonymised connection address and, when you are logged in, with an identifier of your account | So that we can see which pages are read and improve the shop | Your consent to cookies |
Decisions to approve or reject a wholesale application are taken by a person. The form check scores every submission automatically, only in order to tell automated programs apart.
4. What we do not keep
We do not store card details. We do not ask for gender, date of birth, marital status, interests, education or occupation. There is no public profile and no user name, and no customer comments or reviews are published. We do not monitor your correspondence.
5. Who we give details to
Inside the company, your details are seen only by the staff who handle applications, orders and customer service. Outside the company we give them only:
- To the transport companies that carry out the delivery — Geniki Taxydromiki, ELTA Courier, Multimodal Shipping — and only what they need: name, address, telephone number.
- To our banks, when you pay by deposit or transfer.
- To the card payment provider (Cardlink, Eurobank's partner), which carries out the charge.
- To Google, for the traffic statistics and for the form check.
- To the external accounting firm we work with, for the company's accounting documents and books.
- To the company that provides us with the shop software, for maintenance and for synchronising its services.
- To the public authorities, when the law requires it or in order to defend our rights.
The shop and its database are not hosted with an outside company: they are on a server belonging to the business itself, in Greece.
We do not sell or rent out your details. We do not give them to third parties for their own advertising.
6. Sending details outside the European Union
Google is a company based outside the European Union, so part of the details may be processed outside the EU as well. These transfers are covered by the standard contractual clauses approved by the European Commission, which the company applies in its terms of use. The card payment provider (Cardlink, Eurobank's partner) is based within the European Union.
7. How long we keep them
- Your account: for as long as you keep it. When you ask for deletion, the request is checked and — provided there is no legal reason to keep it — the account and its details are deleted completely.
- Orders, invoices and tax documents: five years, as tax law requires.
- Wholesale application and the documents you uploaded: for as long as we work together. If the application is rejected, they are deleted.
- Form messages: two years. CVs and attachments: one year, unless you ask us to keep them longer.
- Newsletter: until you unsubscribe from it.
- The visit cookie: 20 days. Your answer to the cookie message: up to one year (some browsers, such as Safari, limit it to a few days).
- Live chat conversations: one year.
We keep details beyond the above only when the law requires it or when they are needed for a court case.
8. Security
We take the necessary technical and organisational measures so that your details are not lost, are not altered and do not fall into the wrong hands. The connection to the shop is encrypted. You are responsible for keeping your password secret — we will never ask you for it, except when you log in to the shop. No transmission over the internet is completely secure and we cannot guarantee otherwise.
9. Your rights
You have the right:
- to find out what details we keep about you and to receive a copy,
- to correct anything that is wrong or out of date,
- to ask for them to be deleted,
- to ask for their use to be restricted,
- to receive them in a form that can be transferred elsewhere,
- to object to their use when it is based on our legitimate interest,
- to withdraw your consent whenever you wish — without this affecting what was done before.
You can do most of this yourself from the "My Account" page, where you can see, download and request deletion of your details. For anything else, write to us at info@grifon.gr. We reply within one month and free of charge. If we are not sure who is making the request, we may ask you for something extra to confirm it.
If you believe that we have not respected your rights, you can lodge a complaint with the Hellenic Data Protection Authority: Kifisias 1-3, 115 23 Athens · telephone +30 210 6475600 · contact@dpa.gr · www.dpa.gr.
10. Cookies
The shop uses cookies: some are necessary for the page and the basket to work, others give us traffic statistics. Exactly which ones they are, what each of them does, how long it lasts and how you change your mind is explained in the Cookie Policy, at the bottom of every page.
11. Details of other people
If you give us details of another person — for example an employee or a representative of your business — please make sure first that you have their consent to pass them to us and for us to use them as this text describes.
12. Links to other websites
The shop contains links to third-party websites. We do not control and are not responsible for their practices. Read their own policy before you give them any details.
13. Changes to this text
We may update this policy. The new version is published on this page and applies from the day it is published. Please let us know if any of the details we keep about you needs correcting.