Privacy & Cookie Policy

1. ABOUT THIS POLICY

This Privacy & Cookie Policy explains how TEPHRΛ collects, uses and protects personal data when you visit this website, contact us, request an appointment, subscribe to communications, communicate with Customer Care, apply for a position, or otherwise interact with TEPHRΛ through our digital channels.

The data controller is:

TEPHRA L.P.
Voukourestiou 41
10673 Kolonaki, Athens
Greece

VAT / AFM: 802648778
General Commercial Registry (G.E.MI.) Number: 180204703000

Privacy / GDPR contact:
[email protected]

Customer Care:
[email protected]

Telephone:
+30 210 014 1400

2. INFORMATION WE MAY COLLECT

Depending on how you interact with us, we may collect:

your name and contact details;
information you provide when requesting an appointment or contacting Customer Care;
the content of messages or enquiries you send to us;
information necessary to respond to requests concerning products, availability, visits or services;
newsletter subscription and communication preferences;
information submitted in connection with a job application;
technical information generated when you use the website, including browser type, device information, IP address and server logs;
cookie and analytics information where permitted and enabled.

We do not intentionally request sensitive personal data through the website unless it is necessary for a specific lawful purpose. Please avoid sending information that is not necessary for your request.

3. HOW WE USE PERSONAL DATA

We may use personal data to:

respond to enquiries and requests;
arrange or manage appointments and visits;
provide Customer Care;
communicate about product availability or other matters you have asked us about;
manage newsletter subscriptions and communications;
review and manage job applications;
operate, secure and maintain the website;
understand website performance and usage through Google Analytics where the required consent has been provided;
prevent misuse, fraud or technical abuse;
comply with legal, tax, accounting or regulatory obligations;
establish, exercise or defend legal claims.

4. LEGAL BASES

Depending on the context, we process personal data because:

processing is necessary to take steps at your request or to perform a contract with you;
processing is necessary to comply with a legal obligation;
processing is necessary for our legitimate interests, including operating and securing the website, responding to customers, protecting our business, managing recruitment and improving our services, where those interests are not overridden by your rights;
you have given consent, particularly for optional cookies, analytics or direct marketing where consent is required.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

5. SERVICE PROVIDERS AND RECIPIENTS

Personal data may be accessed by authorised TEPHRΛ personnel who need it for their work and, where necessary, by selected service providers supporting our operations.

Our current technical infrastructure includes:

GoDaddy, used for website hosting and related infrastructure;
Cloudflare, used for website delivery, performance and security;
Google Analytics, used to understand website usage and performance where the required consent has been provided.

We may also use providers of email communications, accounting, legal, IT, cybersecurity, recruitment or other professional services where necessary.

Service providers processing personal data on our behalf are expected to process it only for the relevant purpose and subject to appropriate contractual and security safeguards.

TEPHRΛ does not sell personal data.

6. INTERNATIONAL DATA TRANSFERS

Some technology or service providers may process personal data outside Greece or outside the European Economic Area.

Where applicable data-protection law requires safeguards for an international transfer, we rely on a lawful transfer mechanism, such as an adequacy decision, approved contractual safeguards or another mechanism permitted by law.

7. DATA RETENTION

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and for any additional period required by applicable law.

Retention depends on the type of information and the reason it is processed. For example:

routine enquiries are kept only as long as necessary to respond and manage relevant follow-up;
appointment information is retained only as long as necessary for the appointment and related customer service;
transaction, tax and accounting records may be retained for the period required by law;
information required for legal claims may be retained for the relevant limitation period;
newsletter information is retained while the subscription remains active and as necessary to maintain opt-out records;
unsuccessful job applications are not retained for consideration for future positions and are deleted after the relevant recruitment process, subject only to any limited retention required by law or for the establishment, exercise or defence of legal claims;
CCTV footage is governed by the separate CCTV Privacy Notice below.

8. YOUR DATA-PROTECTION RIGHTS

Subject to the conditions of applicable law, you may have the right to:

request access to your personal data;
request correction of inaccurate or incomplete personal data;
request deletion of personal data;
request restriction of processing;
object to processing based on legitimate interests;
receive certain personal data in a portable format;
withdraw consent where processing is based on consent;
object to direct marketing at any time.

To exercise a privacy right, contact:

[email protected]

We may need to verify your identity before completing a request.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA):

https://www.dpa.gr/

9. SECURITY

We use reasonable technical and organisational measures designed to protect personal data against accidental or unlawful loss, misuse, alteration, disclosure or access.

No internet transmission or storage system can be guaranteed to be completely secure.

10. THIRD-PARTY WEBSITES AND SERVICES

This website may contain links to third-party websites, services or social-media platforms.

Those services operate independently from TEPHRΛ and are responsible for their own terms and privacy practices. We recommend reviewing their policies before providing personal data to them.

This website also contains links to the separate TEPHRΛ online store at:

https://thetephra.com/

Purchases made through that online store are subject to the terms, privacy information, shipping terms, returns policy and other policies presented on the online store itself.

11. COOKIES AND SIMILAR TECHNOLOGIES

Cookies are small files or similar technologies that may be stored on or accessed from your device when you visit a website.

Strictly necessary technologies may be used where required for website operation, security, network delivery or storage of your privacy choices.

Cloudflare may process technical information required to provide website security, performance and network services.

Google Analytics is used to understand website usage and performance. Analytics cookies or comparable optional technologies are enabled only after the required consent has been obtained.

You can manage optional cookies through the cookie-consent controls provided on the website.

More information is provided in the Cookie Preferences section below.