1. Data controller

The controller responsible for the processing of your personal data via koul-co.com is:

Company Name

Evaggelos Koulakiotis of Emmanouil

Title

KOUL-CO

Address

Bozi , 570 01 Thermi Thessaloniki

TIN

038654953

Phone

694 583 7016

Email

evkoulakiotis@gmail.com

Processing is carried out in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and Law 4624/2019.

2. 2. What data we collect

When placing an order: full name, shipping and billing addresses, telephone number, email, the products purchased, and the payment method. If you request an invoice, your tax details are also included. We neither view nor store your card details; these are processed directly by the payment provider.

When requesting a quote via the configurator: full name, email, telephone number (optional), your instrument options, and any comments you include.

When you create an account: your account details and your order history.

When you create an account: your account details and your order history.

When you browse the website: technical data, such as IP address, device and browser type, as well as cookies (see section 7).

3. 3. Why we use them

To fulfill your order: processing, shipping, invoicing, customer service, and warranty. Legal basis: performance of the contract (Article 6(1)(b) GDPR).

To respond to a request for a quote and to communicate with you regarding the construction of your instrument. Legal basis: steps taken prior to entering into a contract, at your request (Article 6(1)(b) GDPR).

To comply with our tax and accounting obligations. Legal basis: compliance with a legal obligation (Article 6(1)(c) GDPR).

For website security, e.g., protection against repeated failed login attempts. Legal basis: our legitimate interest (Article 6(1)(f) GDPR).

For non-essential cookies, only if you provide your consent (Article 6(1)(a) GDPR), which you may withdraw at any time.

We do not use your data for automated decision-making or profiling. We do not send you promotional messages without your consent.

4. 4. How long do we keep them?

Order and invoicing details: for the period prescribed by tax legislation.

Requests for quotations that did not result in an order: up to 12 months from the last communication, after which they are deleted.

User account: until you request its deletion, subject to requirements applicable for tax purposes.

Security logs (e.g., IP addresses of failed login attempts): for a short period, as long as necessary to protect the website.

5. 5. Who we share them with

We do not sell or rent your data. We share it only as necessary with partners who help us operate and are committed to protecting it:

Papaki: hosting of the website and the database.

Google (Gmail): sending and receiving emails, such as order confirmations and quote requests.

Courier companies: full name, address, and telephone number for the delivery of the order.

Payment providers: for the secure processing of card payments.

iubenda: διαχείριση της συγκατάθεσής σας για τα cookies.

jsDelivr and Pexels: distribution of software libraries and images on certain pages. When these load, your browser communicates with their servers and transmits your IP address to them.

Accountant: for our tax obligations.

We may also transmit data to public authorities when required by law.

6. 6. Transfer outside the EU

Certain partners, such as Google, may process data outside the European Economic Area. In such cases, the transfer takes place subject to the safeguards provided for by the GDPR, such as an adequacy decision by the European Commission or standard contractual clauses.

7. Cookies

The website uses essential cookies for its operation, such as the shopping cart and logging into your account. These do not require consent. Any other cookie is activated only if you accept it via the relevant message during your first visit. You can change your preferences at any time through the cookie settings or your browser.

8. Security

We implement appropriate technical and organizational measures to protect your data, such as encrypted connections (HTTPS), restricted access to website administration, and protection against repeated login attempts. No system on the internet is completely secure, but we will notify you without delay should an incident affecting your data occur.

9. 9. Your rights

You have the right to request access to your data, rectification, erasure, restriction of processing, and portability to another provider, as well as to object to processing based on our legitimate interest. Where processing is based on your consent, you may withdraw it at any time.

To exercise your rights, please email us at evkoulakiotis@gmail.com. We will respond to you within one month.

If you believe that the processing of your data violates the law, you have the right to lodge a complaint with the Hellenic Data Protection Authority (1-3 Kifisias Ave., 115 23 Athens).

10. 10. Minors

The website is not intended for individuals under the age of 15, and we do not knowingly collect their data. If you believe a minor has provided us with information, please contact us so that we may delete it.

11. 11. Changes

We may update this policy, for example, when adding new services. The current version is always posted on this page, along with the date of the last update.

12. Contact

For any questions regarding your data: evkoulakiotis@gmail.com · 694 583 7016