Last updated: April 6, 2026
1. Introduction
The sole proprietorship under the name KLITSIDIS ALEXANDROS (hereinafter "the Business", "we", "us", "our"), operating in the beekeeping and honey trade sector through the website honeyeklekton.gr, is committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), Greek Law 4624/2019, and all applicable legislation.
This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have in relation to your data.
2. Data Controller
3. What Data We Collect
Depending on how you interact with our website, we may collect the following categories of data:
3.1 Data You Provide Directly
- Identification data: full name, shipping and billing address, Tax ID (for invoice issuance)
- Contact data: email address, telephone number
- Order data: products purchased, quantities, order history
- Payment data: payment method (we do not store full card details; these are handled exclusively by our payment processor)
- Communication data: messages sent via the contact form, email, or telephone
3.2 Data Collected Automatically
- Technical data: IP address, browser type and version, operating system, screen resolution
- Browsing data: pages visited, time spent on pages, traffic source, links clicked
- Cookies and similar technologies: device identifiers, session cookies, and persistent cookies (see Section 8)
3.3 Data from Third Parties
- Payment confirmation from payment service providers
- Delivery status information from courier and shipping companies
4. Purposes and Legal Bases for Processing
| Purpose of Processing |
Legal Basis (GDPR) |
| Processing and managing orders |
Performance of a contract (Article 6(1)(b)) |
| Issuing invoices and receipts |
Legal obligation (Article 6(1)(c)) |
| Shipping products |
Performance of a contract (Article 6(1)(b)) |
| Customer support and responding to inquiries |
Performance of a contract / Legitimate interest (Article 6(1)(b), 6(1)(f)) |
| Sending newsletters and promotional communications |
Consent (Article 6(1)(a)) |
| Website improvement and user experience optimization |
Legitimate interest (Article 6(1)(f)) |
| Statistical traffic analysis |
Consent (Article 6(1)(a)) |
| Tax compliance and bookkeeping |
Legal obligation (Article 6(1)(c)) |
| Fraud prevention and website security |
Legitimate interest (Article 6(1)(f)) |
| Managing returns and complaints |
Performance of a contract / Legal obligation (Article 6(1)(b), 6(1)(c)) |
5. Data Retention Periods
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:
- Order and invoicing data: 10 years from the end of the fiscal year (as required by Greek tax law)
- Contact form data: 2 years from the last communication, unless a commercial relationship arises
- Newsletter data: until you withdraw your consent
- Analytics cookies: see Section 8
- Customer account data: until you delete your account, subject to any statutory retention obligations
After the retention period expires, data is securely deleted or anonymized.
6. Recipients and Data Transfers
Your personal data may be shared with the following categories of recipients, solely for the purposes described in Section 4:
- Payment service providers: for processing electronic payments
- Courier and shipping companies: for delivering your orders
- Hosting providers: Webflow and its associated servers
- Email marketing providers: for sending newsletters (only with your consent)
- Accountant / Accounting firm: for tax compliance purposes
- Public authorities: where required by law (e.g., tax authorities, AADE)
6.1 Transfers Outside the EEA
Some of our service providers (e.g., Webflow, Google Analytics) may process data in countries outside the European Economic Area (EEA). In such cases, we ensure appropriate safeguards are in place in accordance with Article 46 GDPR, including:
- Adequacy decisions by the European Commission (e.g., EU-US Data Privacy Framework)
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Binding Corporate Rules (BCRs)
You may request a copy of these safeguards by contacting us.
7. Your Rights (Articles 15–22 GDPR)
As a data subject, you have the following rights:
- Right of access (Article 15): to obtain confirmation of whether we process your data and to receive a copy of it
- Right to rectification (Article 16): to request correction of inaccurate data or completion of incomplete data
- Right to erasure (Article 17): to request deletion of your data where there is no legal obligation to retain it
- Right to restriction (Article 18): to request restriction of processing under specific conditions
- Right to data portability (Article 20): to receive your data in a structured, commonly used, machine-readable format (e.g., CSV, JSON)
- Right to object (Article 21): to object to processing based on legitimate interest or for direct marketing purposes
- Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing
- Right regarding automated decision-making (Article 22): we do not make decisions based solely on automated processing, including profiling
To exercise any of these rights, contact us at chris@honeyivira.gr or +30 6979966297. We will respond within 30 days. For complex requests, this period may be extended by an additional 60 days, in which case you will be notified in a timely manner.
If you believe that the processing of your data violates your rights, you have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA):
8. Cookie Policy
Our website uses cookies and similar technologies. Cookies are small text files stored on your device when you visit our website.
8.1 Cookie Categories
| Category |
Purpose |
Duration |
Legal Basis |
| Strictly Necessary |
Website functionality, shopping cart, security |
Session or up to 12 months |
Legitimate interest |
| Functional |
Storing language and region preferences |
Up to 12 months |
Consent |
| Analytics / Statistics |
Traffic measurement, Google Analytics |
Up to 26 months |
Consent |
| Marketing |
Personalized advertising, remarketing |
Up to 13 months |
Consent |
Upon your first visit, a cookie consent banner will request your permission for non-essential cookies. You may change your preferences at any time through the cookie settings on our website or through your browser settings.
9. Data Security
We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, destruction, or alteration, including:
- SSL/TLS encryption across all pages of the website
- Secure hosting through Webflow with SOC 2 certification
- Use of PCI DSS-compliant payment service providers
- Restricted data access limited to authorized personnel only
- Regular assessment and updating of security measures
10. Children's Data
Our website and services are not directed at individuals under 16 years of age. We do not knowingly collect data from minors. If we become aware that we have collected data from a minor without parental or guardian consent, we will delete it immediately. If you believe a child has provided us with personal data, please contact us.
11. Third-Party Links
Our website may contain links to third-party websites (e.g., social media platforms, payment providers). We are not responsible for the privacy practices of those websites. We encourage you to read their privacy policies before providing any personal data.
12. Direct Marketing
We will send you promotional communications (newsletters, offers) only if you have given your explicit consent. You may withdraw your consent at any time by:
- Clicking the "Unsubscribe" link in any email
- Sending an email to chris@honeyivira.gr
- Calling +30 6979966297
13. Google Analytics
Our website may use Google Analytics, a web analytics service provided by Google LLC. Google Analytics uses cookies to collect anonymous statistical data. We have enabled IP anonymization so that your full IP address is not stored. Google Analytics is used only with your consent. You may also opt out of data collection by installing the Google Analytics Opt-out Browser Add-on.
14. Social Media
Our website may contain buttons or links to social media platforms (Facebook, Instagram, etc.). These buttons do not automatically transmit data to the respective platforms unless you click on them. Your interaction with those platforms is governed by their own privacy policies.
15. Changes to This Privacy Policy
We reserve the right to amend this Privacy Policy at any time. Any changes will be posted on this page with an updated date. In the event of material changes, we will notify you via email or through a prominent notice on our website. We recommend checking this page regularly.
16. Governing Law
This Privacy Policy is governed by Greek law, the General Data Protection Regulation (EU) 2016/679, and Greek Law 4624/2019. The competent courts for any dispute are the courts of Serres, Greece.
Contact Us
For any questions regarding the protection of your personal data or the exercise of your rights, you may contact us:
.svg)