Privacy Policy

The protection of your personal data is important to us. This Privacy Policy explains how GALANOS KYRIAKOS M.E.P.E. collects, uses, stores and protects the personal data of visitors and users of skgalanos.gr, in accordance with Regulation (EU) 2016/679 – General Data Protection Regulation (GDPR) and applicable Greek and European data protection legislation.

Last updated: 30 September 2026

1. Data Controller

The controller responsible for the processing of personal data is:

GALANOS KYRIAKOS M.E.P.E.
VAT No.: 801545491
G.E.MI. No.: 158872207000
Address: 3 Gymnastiriou Street, Nikaia, Attica, 18454, Greece
Email for privacy-related matters: info@skgalanos.gr

2. Personal Data We Collect

Depending on how you use the website, we may collect the following categories of personal data:

• first and last name,
• email address,
• telephone number,
• company or business name,
• VAT number and other professional information provided during registration,
• location or other information provided when creating an account,
• username and account information,
• information about products and quantities included in an enquiry or pre-order,
• information you provide when contacting us by email, telephone, WhatsApp or Viber,
• technical information such as IP address, device type, browser, operating system and date and time of access,
• website usage and browsing information when you have provided the required consent for analytics or marketing technologies.

We do not request special categories of sensitive personal data through the website.

3. User Registration and Accounts

The website allows users, primarily professional customers seeking access to wholesale information and pricing, to create an account.

During registration, we may request information such as your first and last name, email address, telephone number, company, VAT number, location, username and other information necessary for creating and operating your account.

User accounts are activated automatically.

The processing of this information is necessary to create and manage your account, provide the relevant website services and take steps at your request before entering into a commercial transaction.

4. Shopping Cart and Pre-Order Requests

The website includes a shopping cart function which is used to submit an enquiry or pre-order and not to complete an online purchase or online payment.

Submitting a pre-order does not automatically constitute a completed commercial transaction. Following submission, the company contacts the interested customer in order to confirm the products, quantities, availability, commercial terms, payment method and delivery arrangements.

No online card payment or other direct electronic payment is processed through skgalanos.gr and no invoice is automatically issued by the website.

Information submitted as part of a pre-order is used solely to manage the request, communicate with the customer and, if the request results in a transaction, to administer and perform the resulting commercial relationship.

5. Product Delivery and Carriers

Following a purchase enquiry or pre-order, the company and the customer communicate directly in order to determine the delivery method and the transport company or freight carrier that will be used.

Where necessary for delivery, only the personal data required to perform the shipment and delivery may be disclosed to the selected carrier.

6. Communications

The website does not provide a separate contact form. Communication with the company takes place by email, telephone, WhatsApp or Viber.

When you contact us, we process the information you provide solely in order to respond to your request, provide information or manage a potential commercial relationship.

7. Newsletter and AcyMailing

The website uses AcyMailing to manage newsletter subscriptions and distribute informational or commercial communications.

Newsletter subscriptions are made directly by users through the relevant option on the website and are based on the user’s consent.

For this purpose, we may store your email address as well as technical information relating to the subscription, delivery or management of the newsletter.

You may withdraw your consent at any time by using the unsubscribe link included in our newsletters or by contacting us at info@skgalanos.gr.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

8. Google Analytics 4

The website uses Google Analytics 4 (GA4) to obtain statistical information about website usage, including visits, pages viewed, traffic sources, device types and other interaction data.

Where required by applicable law, cookies or similar technologies used for analytics purposes are activated only after the user has provided the relevant consent through the website’s cookie consent mechanism.

This information is used to understand website performance, improve functionality and user experience and evaluate the effectiveness of marketing activities.

9. Google Ads and Conversion Tracking

The website uses Google Ads services and conversion tracking technologies in order to measure the effectiveness of advertising campaigns.

Depending on the applicable settings and the user’s consent choices, these technologies may process information about visits to the website, devices used, actions performed and interactions with advertisements.

Advertising cookies and other non-essential advertising technologies are activated only in accordance with the user’s consent choices and applicable legal requirements.

10. Meta / Facebook Pixel

The website uses the Meta Pixel (Facebook Pixel) to measure advertising effectiveness, generate statistical information and, where permitted, create or use audiences for advertising purposes.

Through this technology, information relating to the user’s device, website visits, pages viewed and certain actions performed on the website may be transmitted to Meta.

The Meta Pixel is used for non-essential purposes only after the user’s relevant consent has been obtained where required.

11. Google Search Console

We use Google Search Console to monitor the website’s visibility and performance in Google’s organic search results and to identify technical issues.

The information we receive through Google Search Console mainly consists of aggregated information relating to search performance and is not used by us to directly identify individual website visitors.

12. Google reCAPTCHA

We use Google reCAPTCHA to protect the website against spam, fraudulent or automated registrations, abusive submissions and other malicious activity.

When this service is used, technical information such as the IP address, browser and device information, time spent on the website and interaction data may be processed in order to determine whether an action is being performed by a genuine user or an automated system.

This processing is intended to protect the website, prevent fraud and abuse and safeguard our information systems.

13. Cookies and Similar Technologies

The website uses cookies and similar technologies for proper operation, user sessions and account functionality, statistical analysis and, where relevant consent has been provided, advertising and marketing purposes.

Strictly necessary cookies are used for website functionality and security and do not require consent where they are technically necessary.

Analytics, advertising and other non-essential cookies or technologies are used in accordance with the choices you make through the website’s consent management mechanism.

Further information is available in the website’s separate Cookies Policy.

14. Legal Bases for Processing

Depending on the purpose, we process personal data on one or more of the following legal bases:

• Performance of a contract or steps prior to entering into a contract, including account creation, pre-order requests and communications regarding products or commercial cooperation.
• Consent, particularly for newsletters, analytics, advertising cookies and other non-essential technologies.
• Legitimate interests, including the security of our systems, prevention of fraud and abuse and the establishment, exercise or defence of legal claims.
• Compliance with a legal obligation, where the retention or processing of information is required by tax, accounting or other applicable legislation.

15. Recipients and Service Providers

Personal data may be accessed, only where necessary, by:

• authorised company personnel,
• website hosting and technical support providers,
• email and newsletter service providers,
• Google in connection with Analytics, Ads and reCAPTCHA services,
• Meta Platforms in connection with the Meta Pixel,
• transport companies or freight carriers selected for a specific delivery,
• accountants, tax advisers, lawyers or other professional advisers where necessary,
• public authorities where disclosure is required by law.

Service providers processing information on our behalf are required to process such data only for the agreed purposes and in accordance with applicable data protection requirements.

16. Transfers Outside the European Economic Area

Certain technology providers, including Google and Meta, operate internationally and may process data in countries outside the European Economic Area.

Where such transfers take place, appropriate safeguards provided for under the GDPR are used, which may include European Commission adequacy decisions, Standard Contractual Clauses or other lawful transfer mechanisms, as applicable.

17. Data Retention

Personal data is retained only for as long as necessary for the purpose for which it was collected or for as long as required by applicable law.

In particular:

• User account information is retained while the account remains active or until deletion is requested, unless there is a lawful reason for further retention.
• Newsletter information is retained until consent is withdrawn, the user unsubscribes or the email address is identified as no longer functional.
• Enquiry and pre-order information is retained for as long as required to manage the request and, if it results in a commercial transaction, in accordance with applicable tax and accounting obligations.
• Technical and statistical information is retained in accordance with the settings and retention periods of the relevant services.

18. Data Security

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, disclosure or destruction.

Depending on the circumstances, such measures include controlled access, account and system security measures, secure connections and regular technical maintenance of our systems.

Although we take reasonable steps to protect personal data, no method of electronic transmission or storage can provide an absolute guarantee of security.

19. Your Rights

Under the GDPR, and subject to the conditions provided by applicable law, you have the right to:

• Access personal data concerning you.
• Rectify inaccurate or incomplete personal data.
• Request erasure of your personal data where the legal requirements are met.
• Restrict processing.
• Data portability where this right applies.
• Object to processing based on legitimate interests.
• Object at any time to direct marketing.
• Withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us at info@skgalanos.gr.

For the protection of your information, we may request reasonable additional information to verify the identity of the person making the request before responding to a data protection request.

20. Right to Lodge a Complaint

If you believe that the processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with the Hellenic Data Protection Authority.

If you wish, you may first contact us at info@skgalanos.gr so that we can review and address your concern.

21. Automated Decision-Making

We do not use personal data collected through the website to make decisions which produce legal effects or similarly significantly affect you and which are based solely on automated processing.

22. Third-Party Links and Services

The website may contain links to third-party services such as WhatsApp, Viber, Google or social media platforms.

When you select such a link and access a third-party service, the processing of your personal data is governed by that provider’s own terms and privacy policy.

23. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to the website, the services we use or applicable legal requirements.

The current version will always be published on this page together with the date on which it was last updated.

24. Contact

If you have any questions regarding this Privacy Policy or the processing of your personal data, you may contact us at:

GALANOS KYRIAKOS M.E.P.E.
3 Gymnastiriou Street, Nikaia, Attica, 18454, Greece
Email: info@skgalanos.gr