Privacy Policy

GPSCOM ("we") is the controller of personal data collected through PTT.gr. We process data under the General Data Protection Regulation (EU) 2016/679 (GDPR) and Greek law.

1. Controller

• GPSCOM · VAT no. to be completed
• Address: to be completed
• Data protection email: support@ptt.gr

2. What we collect

• Orders: name, delivery and billing address, email, phone, VAT number and company name for invoices, products and amounts.
• Customer account: email, password (stored only as a hash), addresses.
• Quote requests and the contact form: name, company, email, phone and your message.
• Newsletter: your email, only if you subscribe.
• Reviews: the display name you choose, your email for verification, the review text.
• Technical data: IP address, device and browser type, pages visited and the source of the visit, for security and to run the website.

We never see or store card details; the payment provider processes them directly.

3. Why we use it and the legal basis

• Fulfilling your order, delivery, invoicing and support (contract).
• Accounting and tax obligations, such as sending documents to myDATA (legal obligation).
• Answering quote requests and questions (pre-contract steps or legitimate interest).
• A reminder about an unfinished order and a review request after delivery (legitimate interest; you can object at any time).
• Newsletter and advertising cookies (consent, which you can withdraw at any time).
• Security, fraud prevention and non-advertising traffic statistics (legitimate interest).

4. Who receives it

We share data only as far as needed, with:

• couriers (e.g. ACS, BOX NOW), for delivery;
• payment providers (e.g. Viva, Stripe), for payment;
• our e-invoicing provider and the Greek tax authority (myDATA);
• our website hosting provider and email delivery provider;
• Google, to protect the contact form (reCAPTCHA) and, only with your consent, for analytics and advertising;
• accountants, legal advisers and public authorities when the law requires it.

We do not sell personal data. Where a provider is outside the EEA, transfers use GDPR safeguards (e.g. standard contractual clauses).

5. How long we keep it

• Orders and invoices: for as long as tax and accounting law requires.
• Customer account: until you ask us to delete it.
• Contact and quote requests: up to 3 years after the last contact.
• Newsletter: until you unsubscribe.
• Technical logs and traffic statistics: for a limited period, then deleted automatically.

6. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent at any time. Send your request to support@ptt.gr; we reply within one month.

You can also complain to the Hellenic Data Protection Authority (www.dpa.gr).

7. Security

The website runs only over HTTPS, passwords are stored as hashes and access to the admin is restricted. No system is completely secure; if a breach affects you, we will tell you as the law requires.

8. Cookies

For the cookies we use and how to control them, see the Cookie Policy.

9. Children

The shop is for adults. We do not knowingly collect data from children under 15.

10. Changes

If we change this policy, we will publish the new version here with a new date.

Contact