1. Introduction

This Privacy Policy explains how our company Simbaco.gr collects, uses, and protects users' personal data in accordance with the General Data Protection Regulation (GDPR – EU 2016/679) and Greek legislation.

By using our website and services, you accept this policy.

2. Data Controller

The controller of your personal data is:

Simbaco
Kalamata, 24100
info@simbaco.gr

3. What data we collect

We only collect data that is absolutely necessary:

3.1 During the ordering process

• Full name

• Shipping & billing address

• Email

• Phone

• Payment details (via third-party providers; we do not store them ourselves)

3.2 Automatic usage data (cookies & analytics)

• IP address

• Browser information

• Pages you visit

• Functional and statistical cookies

3.3 Contact information

• Message content

• Contact email

• Full name (if provided)

4. What we use the data for

We only use personal data for:

• Order processing and customer service

• Pricing and financial management

• Shipping products through courier companies

• Contact regarding the order or any questions you may have

• Improving user experience through analytics

• Compliance with legal obligations

We do not use the data for unwanted advertising.

5. Legal basis for processing

In accordance with the GDPR, we process data on the following legal bases:

• Contract execution (e.g., shipping orders)

• Consent (e.g., acceptance of cookies, newsletter)

• Legitimate interest (basic website functionality)

• Legal obligation (tax compliance)

6. Who we share data with

Your personal data may only be disclosed to:

• Courier companies for the transport of orders

• Payment providers (e.g., banks, Stripe, Viva Wallet, etc.)

• Hosting providers for the operation of the website

• Accountant/tax advisor for tax purposes

We do not sell, rent, or exchange personal data.

7. Data retention period

We only keep data for as long as necessary:

• Order details: up to 5 years (tax liability)

• Contact details: up to 12 months

• Cookies: according to their duration (e.g., 30 days)

• Customer accounts: until the user requests deletion

8. Cookies

The website uses cookies for:

• Functionality (e.g., shopping cart)

• Statistics (Google Analytics or others)

• User preferences

During the first visit, the following appears cookie consent banner.
You may change or withdraw your consent at any time.

(If you want, I can write you a full Cookie Policy.)

9. How we protect data

We take all necessary technical and organizational security measures:

• Encryption (SSL)

• Secure payment providers

• Access only by authorized persons

• Regular backups

• Protection against malicious attacks

10. Your rights under the GDPR

Users have the right to:

• Ask access in their data

• Ask correction or completion

• Ask deletion ("right to be forgotten")

• Ask processing restriction

• Ask data portability

• Oppose processing for specific purposes

• Withdraw consent for cookies or newsletters

For any requests, please contact:
info@simbaco.gr

11. Data transfers outside the EU

We do not transfer data outside the European Union unless we use services that comply with the GDPR (e.g., Google, Meta), with appropriate safeguards.

12. Changes to the Privacy Policy

We may update this policy from time to time.
The date of the last update is shown at the bottom of the page.

13. Contact

For any questions regarding your personal data:
info@simbaco.gr