spiti8 respects your privacy and protects the personal data collected through its website and services.
Personal data is processed in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the applicable Greek legislation on personal data protection.
Data Controller
spiti8
Perdika 8, Athens, Greece
Email: spiti8project@gmail.com
Personal Data We Collect
Depending on how you use the website, we may collect:
- Full name
- Email address
- Telephone number
- Billing information
- Information related to purchases and bookings
- Information submitted through contact forms
- IP address and basic technical data
- Information collected through cookies, according to your consent preferences
How We Use Your Data
We use personal data for the following purposes:
- Processing and managing bookings
- Completing purchases
- Sending confirmations and information related to purchased services
- Responding to enquiries and contact requests
- Complying with accounting, tax and legal obligations
- Maintaining the security and proper operation of the website
Depending on the circumstances, processing is based on the performance of a contract, compliance with legal obligations, legitimate interests or your consent.
Payments
Online payments are processed through Stripe.
spiti8 does not store your full credit or debit card details. Payment information required to complete a transaction is processed by the payment provider in accordance with its own security and privacy policies.
WooCommerce
The website uses WooCommerce to manage purchases and bookings.
When an order is placed, information such as your name, email address, telephone number, billing details, purchased service, order amount and order status may be stored.
Sharing of Personal Data
We do not sell or trade personal data.
Information may only be shared when necessary with service providers such as:
- Payment providers
- Website hosting providers
- Technical service providers
- Email service providers
- Accounting or tax professionals
- Competent public authorities where required by law
Data Retention
Personal data is retained only for as long as necessary for the purpose for which it was collected or for as long as required by applicable accounting, tax or other legal obligations.
Your Rights
Under the GDPR, where applicable, you have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your data
- Request restriction of processing
- Object to certain processing activities
- Request data portability
- Withdraw your consent at any time where processing is based on consent
To exercise any of these rights, please contact:
You also have the right to lodge a complaint with the Hellenic Data Protection Authority.
Data Security
We take reasonable technical and organisational measures to protect personal data against loss, unauthorised access, alteration or disclosure.
Cookies
The website uses cookies and similar technologies.
Some cookies are strictly necessary for:
- Website functionality
- Shopping cart functionality
- Checkout
- Security
- Session management
- Storing cookie consent preferences
Non-essential cookies, including analytics or marketing cookies, are only used where legally permitted and, where required, after obtaining your consent.
You can manage or change your cookie preferences through the cookie consent tool available on the website.
Third-Party Services
Some website functions may be provided by third-party services, such as payment providers or embedded content providers.
These third parties operate according to their own privacy policies and terms of service.
Changes to This Privacy Policy
This Privacy Policy may be updated when our services, website functionality, technologies or legal requirements change.
The latest version will always be available on this page.
Contact
For any questions regarding this Privacy Policy or the processing of your personal data, please contact:
spiti8
Perdika 8, Athens, Greece
Email: spiti8project@gmail.com