Privacy Policy

This policy describes how the PM Filter online store collects and processes your personal data, in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Greek Law 4624/2019.

1. Data controller

• Business name: Panagiotis Michailidis
• Address: Maiandrou 43, Evosmos, 56224, Thessaloniki, Greece
• VAT: 016468567
• GEMI No.: 57994504000
• Email: info@pmfilters.gr
• Phone: 2310 707095

2. What data we collect

• Account data: your name, email address, password (stored only in encrypted/hashed form) and your account preferences.
• Order data: the products you order, your order history, the payment method you selected and any order notes.
• Addresses: delivery addresses and contact details (phone number) used to ship your orders.
• Favorites: the products you save to your favorites list.
• Withdrawal requests: when you use our online withdrawal function, your name, email address, order number, the content of your withdrawal statement, the time of submission and your IP address.
• Technical data: data strictly necessary for the operation and security of the store (e.g. server logs).

Card data: Card payments are processed by the payment service provider Viva.com (Vivabank Single Member Banking S.A.) on the payment page it hosts itself. Your card details are entered there only and are never transmitted to our servers and are never stored by us.

3. Purposes and legal bases of processing

• Fulfilling orders and operating your account (account creation, cart, orders, deliveries, returns): performance of a contract — Article 6(1)(b) GDPR.
• Issuing invoices/receipts and tax compliance: compliance with a legal obligation — Article 6(1)(c) GDPR.
• Handling withdrawal requests (receiving your statement, sending the acknowledgement of receipt and keeping proof of it, as required by consumer protection law): compliance with a legal obligation — Article 6(1)(c) GDPR.
• Sending transactional emails (e.g. order confirmation, password reset): performance of a contract — Article 6(1)(b) GDPR.
• Security and fraud prevention: legitimate interest — Article 6(1)(f) GDPR.
• Marketing communications (only if you have opted in via your account settings): consent — Article 6(1)(a) GDPR, which you may withdraw at any time.

4. Recipients of the data

Your data is shared only with third parties necessary for the operation of the store:

• Viva.com — Vivabank Single Member Banking S.A., a credit institution established in Greece and licensed by the Bank of Greece — for processing card payments.
• Resend (email delivery provider) — for sending transactional emails (e.g. order confirmations, password reset).
• Courier companies — receive your name, address and phone number in order to deliver your orders.
• Hosting/infrastructure providers — for operating the online store.

Viva.com is a credit institution established in Greece, that is, within the European Economic Area. Some other providers, such as Resend, are established outside the EEA or may process data outside the EEA. In such cases the transfer takes place with appropriate safeguards under Chapter V GDPR (e.g. standard contractual clauses or an adequacy decision). We do not sell or share your data with third parties for advertising purposes.

5. Retention periods

• Account data: for as long as you keep an account; deleted upon your deletion request, subject to any statutory retention obligations.
• Orders and invoices: for as long as required by tax legislation.
• Withdrawal requests: together with the order they relate to, for the same period as orders and invoices.
• Favorites and cart: for as long as you keep an account or until you remove them.

6. Your rights

Under the GDPR you have the following rights:

• Access to the data we hold about you (Article 15).
• Rectification of inaccurate or incomplete data (Article 16).
• Erasure (“right to be forgotten”, Article 17).
• Restriction of processing (Article 18).
• Portability of your data (Article 20).
• Objection to processing based on legitimate interest, and to direct marketing (Article 21).
• Withdrawal of consent at any time, without affecting the lawfulness of prior processing.

To exercise your rights, contact us at info@pmfilters.gr. We will respond within one (1) month at the latest.

You also have the right to lodge a complaint with the Greek data protection authority, the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα) (Kifissias 1-3, 115 23 Athens, Greece, www.dpa.gr).

7. Cookies and local storage

PM Filter uses only strictly necessary cookies and browser storage, that is, only what is required for the store to work at your request: keeping you signed in, keeping your cart, remembering your language and your selected vehicle. Under Article 4(5) of Greek Law 3471/2006 (which transposes Article 5(3) of the ePrivacy Directive 2002/58/EC), such cookies do not require your consent, which is why the store does not show a cookie consent banner.

We do not use analytics, advertising, social media or any other tracking cookies, and no third-party scripts are loaded on our pages. Fonts are served from our own servers. If we ever decide to introduce analytics or any other non-essential cookies, we will ask for your consent first and will not set them unless you agree.

Local storage entries stay in your browser and are not sent to us automatically or shared with third parties.

Card payment: when you pay by card you are redirected to the payment page of Viva.com, which sets its own cookies on its own domain, as needed to complete the transaction and prevent fraud. Those cookies are controlled by Viva.com and are described in Viva.com’s own privacy and cookie policy.

You can delete or block cookies at any time from your browser’s settings. If you block the cookies above, signing in and the cart will not work.

8. Security

We take appropriate technical and organisational measures to protect your data (encrypted connections, password hashing, restricted access). No system is completely secure; in the event of a data breach you will be notified where required by law.

9. Minors

The store is intended for persons over 18 years of age and we do not knowingly collect data from minors.

10. Changes to this policy

We may update this policy from time to time. The current version is always published on this page together with its last-updated date.