Privacy Policy

This policy describes how the PM Filter online store collects and processes your personal data, in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Greek Law 4624/2019.

1. Data controller

• Business name: Panagiotis Michailidis
• Address: Maiandrou 43, Evosmos, 56224, Thessaloniki, Greece
• VAT: 016468567
• GEMI No.: 57994504000
• Email: info@pmfilters.gr
• Phone: 2310 707095

2. What data we collect

• Account data: your name, email address, password (stored only in encrypted/hashed form) and your account preferences.
• Order data: the products you order, your order history, the payment method you selected and any order notes.
• Addresses: delivery addresses and contact details (phone number) used to ship your orders.
• Favorites: the products you save to your favorites list.
• Technical data: data strictly necessary for the operation and security of the store (e.g. server logs).

Card data: Card payments are processed by the payment service provider Viva.com (Vivabank Single Member Banking S.A.) on the payment page it hosts itself. Your card details are entered there only and are never transmitted to our servers and are never stored by us.

3. Purposes and legal bases of processing

• Fulfilling orders and operating your account (account creation, cart, orders, deliveries, returns): performance of a contract — Article 6(1)(b) GDPR.
• Issuing invoices/receipts and tax compliance: compliance with a legal obligation — Article 6(1)(c) GDPR.
• Sending transactional emails (e.g. order confirmation, password reset): performance of a contract — Article 6(1)(b) GDPR.
• Security and fraud prevention: legitimate interest — Article 6(1)(f) GDPR.
• Marketing communications (only if you have opted in via your account settings): consent — Article 6(1)(a) GDPR, which you may withdraw at any time.

4. Recipients of the data

Your data is shared only with third parties necessary for the operation of the store:

• Viva.com — Vivabank Single Member Banking S.A., a credit institution established in Greece and licensed by the Bank of Greece — for processing card payments.
• Resend (email delivery provider) — for sending transactional emails (e.g. order confirmations, password reset).
• Courier companies — receive your name, address and phone number in order to deliver your orders.
• Hosting/infrastructure providers — for operating the online store.

Viva.com is a credit institution established in Greece, that is, within the European Economic Area. Some other providers, such as Resend, are established outside the EEA or may process data outside the EEA. In such cases the transfer takes place with appropriate safeguards under Chapter V GDPR (e.g. standard contractual clauses or an adequacy decision). We do not sell or share your data with third parties for advertising purposes.

5. Retention periods

• Account data: for as long as you keep an account; deleted upon your deletion request, subject to any statutory retention obligations.
• Orders and invoices: for as long as required by tax legislation.
• Favorites and cart: for as long as you keep an account or until you remove them.

6. Your rights

Under the GDPR you have the following rights:

• Access to the data we hold about you (Article 15).
• Rectification of inaccurate or incomplete data (Article 16).
• Erasure (“right to be forgotten”, Article 17).
• Restriction of processing (Article 18).
• Portability of your data (Article 20).
• Objection to processing based on legitimate interest, and to direct marketing (Article 21).
• Withdrawal of consent at any time, without affecting the lawfulness of prior processing.

To exercise your rights, contact us at info@pmfilters.gr. We will respond within one (1) month at the latest.

You also have the right to lodge a complaint with the Greek data protection authority, the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα) (Kifissias 1-3, 115 23 Athens, Greece, www.dpa.gr).

7. Cookies

PM Filter uses only strictly necessary cookies, which are required for the store to function and do not require consent:

• Authentication cookie: an HTTP-only session cookie that keeps you signed in to your account.
• Language cookie: stores your language preference (Greek/English).
• Your cart contents and vehicle selection are stored locally in your browser (local storage) and are not shared with third parties.

We do not use any third-party advertising, analytics or tracking cookies. During card payment, Viva.com may use cookies on its own payment page that are necessary for completing the transaction and preventing fraud; details are provided in Viva.com’s privacy policy.

8. Security

We take appropriate technical and organisational measures to protect your data (encrypted connections, password hashing, restricted access). No system is completely secure; in the event of a data breach you will be notified where required by law.

9. Minors

The store is intended for persons over 18 years of age and we do not knowingly collect data from minors.

10. Changes to this policy

We may update this policy from time to time. The current version is always published on this page together with its last-updated date.