Privacy notice

This page explains what personal data we process when you visit ochima.gr or send us an enquiry, why we process it, how long we keep it and what rights you have.

1. Who we are

The controller is ΑΝΑΣΤΑΣΙΑΔΗΣ ΠΑΝΤΕΛΗΣ & ΣΙΑ Ε.Ε., a limited partnership trading as Ochima.

• Address: 1i Eisodos Kavalariou, 57200 Lagkadas, Greece
• Phone: +30 23940 53020
• Email: info@ochima.gr

For any question about your personal data, email us at info@ochima.gr. We have not appointed a Data Protection Officer (DPO), because the law does not require one for a business like ours.

2. What we process and why

The website consists of plain (static) pages only. Its server does not receive, process or store your messages or contact details. You send us enquiries by email, or make them by phone.

Emails and enquiries

The website’s enquiry buttons (such as ‘Become a customer’ and ‘Request a price’) and sending the enquiry list open your own email program with a ready-made message to info@ochima.gr: a subject and a short template. You check the message, change it if you wish and send it from your own email account. If you don’t send it, we receive nothing.

When you email us, we receive:

• your email address and the sender name your email program shows;
• the date and time the email was sent;
• whatever you choose to write, and the product list if you send it. The template suggests your business name, the name of the contact person, your type of business, your town or region, your phone number and, optionally, your business’s tax number (ΑΦΜ).

Purpose: to reply to your enquiry, send you our price list or a quote and, if you wish, start working together.

Legal basis: our legitimate interest in communicating with trade customers and prospective customers (Article 6(1)(f) of the General Data Protection Regulation, GDPR). If you are a sole trader asking for a quote, the processing is also necessary for steps taken before entering into a contract (Article 6(1)(b) GDPR).

The same purpose and legal basis apply when you email us without using the website’s buttons, or call us.

Your emails go straight to our mailbox, hosted by Papaki (see section 4). They don’t pass through the website, and the website keeps no copy. Any copy kept in your own email account is subject to your own email provider’s terms.

We don’t use your details for newsletters or marketing emails. If we ever do, we will first ask for your separate consent.

Server logs

Like every website, our hosting provider’s server records, for each visit, the IP address, the date and time, the page requested, the page you came from and your browser type. These records are used only for the security and proper running of the website, not for statistics or to identify visitors.

Legal basis: our legitimate interest in the security and operation of the website (Article 6(1)(f) GDPR). The logs are deleted automatically after 7 days.

Enquiry list

The enquiry list (‘+ Add to list’) is stored only in your browser, on your device (local storage). It reaches us only if you send it to us by email yourself, and you can empty it at any time. It isn’t used for anything else and doesn’t let us identify you.

Our Instagram page

The website has a plain link to our Instagram page. Nothing loads from Instagram until you click it. When you visit our Instagram page, Meta Platforms Ireland Ltd. processes your data under its own privacy policy. For the visitor statistics Instagram shows us, Meta and we may be joint controllers (Article 26 GDPR). If you message us on Instagram, we use your message only to reply.

3. Cookies and storage on your device

This website uses no cookies. We use no analytics, advertising or tracking tools, and we load no content from third parties: our fonts are on our own server and no map is embedded from another website. The ‘Open in Google Maps’ link takes you to Google only if you click it; from then on, Google’s privacy policy applies.

The website language follows the page address (English pages start with /en/). We don’t store your choice.

The only thing that may be stored on your device is the enquiry list, and only if you use it. That is why the website doesn’t ask for cookie consent.

4. Who has access to your data

Your data is seen only by the people at our company who handle enquiries. We also use the following providers, who process data only on our behalf and on our instructions (Article 28 GDPR):

• alwaysdata (ALWAYSDATA SARL, France): hosting of the website (static pages only), on servers in Paris.
• Papaki (Enartia S.A., Greece): our email service for info@ochima.gr, where we receive and keep your emails.
• The person who maintains the website technically on our behalf, only when needed for support.
• Our accountant, only if we start working together and invoicing is needed.

The website’s code is kept on GitHub (GitHub, Inc., USA). GitHub does not process any data about visitors or enquiries.

We don’t sell, rent or pass on your data to third parties for marketing.

5. Transfers outside the European Union

We don’t transfer personal data outside the European Economic Area. The providers listed above are based in the European Union and store data within it.

6. How long we keep your data

• Emails with enquiries that don’t lead to business: deleted 24 months after our last contact.
• Customers: for as long as we work together and, after that, for as long as commercial and tax law requires.
• Server logs: 7 days.
• Enquiry list: in your browser, until you empty it or clear your browsing data.

7. What details we need

Sending us any details is up to you: you decide what to write. The email template suggests the details listed in section 2; your tax number is optional. Because we sell to trade customers only, if you don’t tell us which business you represent, we may not be able to send you prices or a quote until you do. We make no automated decisions and do no profiling.

8. Your rights

You have the right:

• to know what data we hold about you and to receive a copy (access);
• to have incorrect or incomplete data corrected (rectification);
• to have your data deleted (erasure);
• to have the processing restricted (restriction);
• to object to processing based on our legitimate interest (objection);
• to receive the data you gave us in a machine-readable format, where the processing is based on a contract (portability).

To exercise your rights, email us at info@ochima.gr. It’s free of charge. We reply within one month; if a request is complex, this can be extended by two further months, and we will tell you if so. We may ask for information to confirm that the request comes from you.

9. Right to complain

If you believe that the processing of your data breaks the law, you can complain to the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα, ΑΠΔΠΧ):

• Address: Kifisias Avenue 1-3, 115 23 Athens, Greece
• Phone: +30 210 6475600
• Email: complaints@dpa.gr
• Website: www.dpa.gr

We would appreciate it, though, if you contacted us first, so that we can try to resolve the matter.

10. Changes

When anything changes in the way we process data, we update this page. The date below shows the current version.