PRIVACY POLICY

1. INTRODUCTION & DATA CONTROLLER IDENTIFICATION This Privacy Policy outlines how ANTHRAX SPORTSWEAR I.K.E. (hereinafter referred to as the “Company”, “we”, “us”, or “our”), based in Thessaloniki, Greece (Tax Identification Number: 119044233, Z’ Public Tax Office of Thessaloniki), collects, processes, and protects your personal data when you use the website www.anthraxvertical.com (the “Website”) and our associated services.

As the Data Controller, the Company is committed to protecting your privacy and ensuring your personal data is handled in strict compliance with the European General Data Protection Regulation (EU) 2016/679 (GDPR) and the applicable Greek legislation (Law 4624/2019).

2. WHAT PERSONAL DATA WE COLLECT Depending on your interaction with our Website, we collect various types of information, including:

  • Identity & Contact Data: First name, last name, email address, billing address, shipping address, and telephone number.

  • Account Data: If you create an account to save your customized designs or track orders, we collect your username, password, order history, and saved preferences.

  • Financial & Transaction Data: Details regarding the products you have ordered. Please note that the Company does not store full credit card numbers or sensitive payment details; these are processed securely by our third-party payment gateways.

  • Technical & Usage Data: Internet Protocol (IP) address, browser type and version, time zone setting, operating system, and information on how you navigate and interact with our Website, collected via cookies and tracking pixels.

3. HOW WE COLLECT YOUR DATA We collect personal data through the following methods:

  • Direct Interactions: When you create an account, place an order, subscribe to our newsletter, fill out a contact form, or communicate with us directly.

  • Automated Technologies: As you interact with our Website (built on the WooCommerce/WordPress platform), we automatically collect Technical Data regarding your equipment and browsing actions via cookies, server logs, and similar technologies.

4. PURPOSE AND LEGAL BASIS FOR PROCESSING We process your personal data based on the following legal grounds outlined in the GDPR:

  • Performance of a Contract (Art. 6(1)(b)): To process and deliver your custom apparel orders, manage payments, and provide post-purchase customer support.

  • Consent (Art. 6(1)(a)): To send you promotional emails, newsletters, and to utilize non-essential tracking cookies (e.g., for analytics and advertising) only after you have opted in.

  • Legitimate Interests (Art. 6(1)(f)): To analyze website traffic, improve our user experience, prevent fraud, and ensure the security of our IT systems.

  • Legal Obligation (Art. 6(1)(c)): To comply with Greek and EU tax, accounting, and consumer protection laws.

5. DATA SHARING & THIRD-PARTY PROCESSORS To operate our e-commerce business effectively, we may share your data with trusted third-party processors who are also strictly bound by GDPR compliance:

  • Payment Gateways: We use Stripe, Klarna, PayPal, and Piraeus Bank to securely process your payments. These providers operate as independent or joint data controllers for your financial data.

  • E-commerce Infrastructure: Our Website is hosted and operated using the WordPress and WooCommerce platforms, which facilitate the management of your account and orders.

  • Logistics Partners: Your name, address, and phone number are shared with shipping and courier services (e.g., ELTA, Express Couriers) solely for the purpose of delivering your order.

  • Analytics & Marketing: We utilize Google Analytics and the Meta (Facebook) Pixel to understand consumer behavior, measure the effectiveness of our campaigns, and serve relevant advertisements. We also share data with our email marketing service providers to deliver newsletters to subscribed users.

6. DATA RETENTION We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

  • Customer Accounts & Orders: Data related to your account and purchases is kept for a period of up to ten (10) years to comply with Greek tax and commercial laws.

  • Marketing Data: If you have subscribed to our newsletter, we will retain your email address until you choose to unsubscribe or withdraw your consent.

7. YOUR RIGHTS UNDER THE GDPR Under certain circumstances, you have the following rights under data protection laws in relation to your personal data:

  • Right of Access: Request a copy of the personal data we hold about you.

  • Right to Rectification: Request correction of incomplete or inaccurate data.

  • Right to Erasure (“Right to be Forgotten”): Request the deletion or removal of personal data where there is no good reason for us continuing to process it.

  • Right to Restriction of Processing: Request the suspension of the processing of your personal data.

  • Right to Data Portability: Request the transfer of your personal data to you or a third party in a structured, machine-readable format.

  • Right to Object: Object to the processing of your personal data where we are relying on a legitimate interest, or where we are processing it for direct marketing purposes.

8. CONTACT INFORMATION To exercise any of the rights mentioned above, or if you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, please contact our data protection team directly at info@anthraxvertical.com