Privacy Policy

The provisions herein govern thalassabotanica.site, corresponding customer orders, and related correspondence. External resources referenced on this platform operate under separate privacy protocols for which we assume no editorial control.

The statutory data controller is Thalassa Botanica Ι.Κ.Ε., located at Roosevelt 22, 412 22 Larissa, Greece. Formal inquiries concerning record handling may be directed to [email protected] or initiated by telephone at +30 978 581 656.

We restrict data collection strictly to information required for each declared operational purpose.

3.1 Information you provide directly

Customer full names, shipping destinations, email addresses, and telephone contacts gathered during procurement, alongside feedback and written inquiries. These are retained as mandated by fiscal record-keeping laws, with inquiry records archived for up to 3 years following our final communication.

3.2 Payment and transaction data

Transaction identifiers, product selections, billed totals, selected payment terms, and fulfillment status. Payment card or banking credentials are never requested or handled on this site. All records are retained for the statutory accounting period.

3.3 Automatically collected information

Internet protocol addresses, hardware and browser identifiers, navigation history, source addresses, and session timestamps, captured via server diagnostics and cookies detailed below. Server records persist for 30 days, while consolidated analytics remain for up to 14 months.

3.4 Marketing and advertising data

Information detailing promotional references, external links, or notices that directed you to our catalogue, retained solely for commercial attribution for up to 90 days.

3.5 Data supplied by external fulfillment partners

Consignment tracking records from logistics couriers and settlement confirmations transmitted by payment institutions, correlated directly with your order reference.

3.6 Children

This publication is not intended for individuals below 18. We do not deliberately retain information pertaining to minors; guardians wishing to have inadvertent submissions purged should contact [email protected].

Full recipient names, postal destinations, email addresses, and contact numbers are essential to fulfill orders and provide logistics notifications; without them, checkout cannot proceed. Supplementary submissions remain entirely discretionary.

• To prepare, pack, dispatch, and document botanical orders, as well as to administer physical returns and corresponding reimbursements.
• To respond to technical inquiries and transmit dispatch notifications by email or short message service.
• To maintain digital integrity, detect irregularities, and evaluate browsing patterns across our catalogue.
• To circulate curated announcements exclusively upon prior request, each dispatched note including an option to decline future mailings.
• To satisfy statutory obligations, notably standard commercial auditing and book-keeping rules.

Personal information is never traded or rented. Transmission is confined to contracted specialists who handle data solely according to our written specifications.

6.1 Payment processing

Selected payment processors receive only the data strictly necessary to settle accounts and balance transactions.

6.2 Shipping and fulfilment partners

Postal and courier couriers receive your name, dispatch address, and phone number to ensure parcel arrival and resolve transit queries.

6.3 Service providers

Infrastructure hosts, mail distribution platforms, and correspondence management tools process information strictly under our direction.

6.4 Advertising and analytics partners

Statistical and promotional identifiers, activated strictly following explicit authorization, convey browsing metrics to external providers as set forth in our Cookie Policy.

6.5 Legal and regulatory disclosures

Records may be disclosed when required by judicial mandate or when necessary to substantiate our legal position in disputed transactions.

6.6 Business transfers

Should our corporate structure undergo a sale or consolidation, customer records will transfer to the successor under identical privacy safeguards.

Certain partners process records beyond the boundaries of Greece. In such instances, we employ formal adequacy determinations or standard contractual clauses to preserve identical safety standards.

Pursuant to the General Data Protection Regulation (GDPR), you hold data subject rights under Articles 15-22 GDPR.

8.1 Inspection, rectification, erasure, and record portability

You may request access to your archived files, amend inaccuracies, demand erasure, obtain an export in a readable digital standard, contest processing, or retract prior consent without invalidating prior lawful handling.

8.2 Marketing choices

Each promotional dispatch features an opt-out mechanism, and discretionary analytics or advertising cookies can be modified within our banner preferences at will.

8.3 Exercising your rights

Direct requests to [email protected]. We may request verification of identity and will furnish our response within 30 days. You retain the right to petition the supervisory authority within Greece.

Our catalogue is delivered through encrypted HTTPS connections. Order records are preserved within restricted systems accessible solely to personnel fulfilling specified duties. Payment card information is neither received nor held on our servers.

Commercial orders and billing records remain archived for the period demanded by fiscal law prior to disposal. Correspondence files are retained for up to 3 years from the latest interaction, server logs for 30 days, aggregated metrics for up to 14 months, and mailing consents until formally revoked.

Hyperlinks leading toward external networks, partner gateways, or payment services operate under distinct data governance terms outside our administrative oversight.

We revise this notice to reflect shifts in statutory regulations or internal procedures. The prevailing version remains accessible on this page, marked with its most recent revision date.