Categories
Privacy Policy
This Privacy Policy explains how CLEANSMART O.E., acting as data controller, collects and uses personal data when you visit cleansmart.gr, create an account, make a purchase or contact us.
Processing is carried out in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), Greek Law 4624/2019 and the applicable legislation on electronic communications.
Quick navigation
Data controller • Data we collect • Purposes and legal bases • Recipients • Retention • Your rights • Cookies
1. Data controller
CLEANSMART O.E.
VAT No.: 800564410
G.E.MI. No.: 129566901000
Address: 102 Lavriou Avenue, 19002 Paiania, Attica, Greece
Telephone: +30 210 6646 518 – +30 210 6646 515
Email for data protection matters: info@cleansmart.gr
2. Scope and sources of data
This Policy covers browsing the website, creating and using an account, orders and transactions, delivery, returns, customer service, technical support requests and optional marketing communications.
Data is obtained primarily from you, from the website’s automatic operation and, where necessary for the transaction, from partners involved in the payment or delivery of an order.
3. Categories of personal data
- Identity and contact data: full name, business name, VAT and invoicing details, address, telephone number and email.
- Account data: account identifier, settings and information relating to secure access.
- Order and transaction data: products, amounts, order number and status, delivery information, invoices and receipts, returns, and warranty or service requests.
- Payment data: information required to select, confirm and manage payment.
- Communication and support data: messages, emails, contact forms and customer-service request history.
- Technical data: IP address, browser and device type, identifiers, connection data and security logs.
- Choices and consent records: newsletter preferences and cookie choices.
4. Purposes and legal bases for processing
Account, order, payment, delivery, return and after-sales support
Processing necessary to take steps before entering into and to perform a contract (Article 6(1)(b) GDPR).
Issuing and retaining accounting records and complying with tax and regulatory requirements
Processing necessary for compliance with a legal obligation (Article 6(1)(c) GDPR).
Customer service, system security, fraud prevention and the establishment, exercise or defence of legal claims
CleanSmart’s legitimate interests in operating its business securely and properly and protecting transactions, balanced against your rights and interests (Article 6(1)(f) GDPR).
Newsletter and non-essential cookies
Consent, where required (Article 6(1)(a) GDPR and applicable electronic communications legislation). You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
5. When providing data is necessary
Fields marked as required are necessary to create an account, complete a purchase, issue the legally required document or deliver an order. If they are not provided, it may not be possible to provide the relevant service or complete the transaction.
Providing data for newsletters and non-essential cookies is optional and is not a condition of making a purchase.
6. Payments
Depending on the method you select, payment and transaction data is processed by banks or payment service providers. The available method and related information are displayed at checkout and on the Payment Methods page.
CleanSmart processes the information necessary to confirm and manage payment, fulfil the order and comply with its legal obligations.
7. Recipients and processing partners
Data is accessible only to authorised persons and, to the extent necessary, to partners supporting CleanSmart’s operations and transactions, such as:
- e-commerce, hosting, IT infrastructure and business systems providers,
- banks and payment service providers,
- couriers, carriers, BOX NOW and other delivery partners, depending on the method selected,
- accountants, tax advisers, legal advisers and technical consultants,
- public, administrative or judicial authorities where disclosure is required by law.
Partners are bound by confidentiality and data-protection obligations according to their role. CleanSmart does not sell personal data.
8. Transfers outside the European Economic Area
Some providers may process data outside the European Economic Area. Where such a transfer takes place, a lawful GDPR mechanism is used, such as an adequacy decision, Standard Contractual Clauses or another permitted safeguard, together with supplementary measures where required.
9. Retention periods
Data is retained only for as long as necessary for the purpose for which it was collected and for as long as required by CleanSmart’s legal obligations. In particular:
- order, payment and accounting-document data is retained for the periods required by accounting, tax and other applicable legislation,
- account data is retained while the account remains active and, after closure, for as long as necessary for legal obligations or claims,
- support requests are retained for as long as necessary to resolve the request and support related claims,
- newsletter data is retained until you withdraw consent or object, while the minimum information necessary to respect your choice may be retained,
- the duration of cookies and related technologies is described in the Cookie Policy and consent management tool.
At the end of the relevant period, data is deleted or anonymised unless further retention is required by law or for the establishment, exercise or defence of a legal claim.
10. Data security
CleanSmart applies appropriate technical and organisational measures, taking into account the nature of the processing and the relevant risk, to protect data against unauthorised access, loss, alteration or unlawful use.
Although reasonable safeguards are applied, no system can guarantee absolute security. Users should keep their account credentials confidential and inform us if they suspect unauthorised use.
11. Your rights
Subject to the conditions of the GDPR, you may exercise the following rights:
- information about and access to personal data concerning you,
- rectification of inaccurate or completion of incomplete data,
- erasure or restriction of processing where the legal conditions are met,
- data portability where applicable,
- objection to processing based on legitimate interests or for direct marketing,
- withdrawal of consent at any time where processing is based on consent.
To exercise a right, email info@cleansmart.gr and clearly describe your request. Additional information may be requested only where necessary to verify your identity. CleanSmart responds without undue delay and normally within one month, subject to any extension permitted by the GDPR.
If you believe that processing infringes data-protection law, you may lodge a complaint with the Hellenic Data Protection Authority. This right does not limit any other administrative or judicial remedy available to you.
13. Updates to this Policy
CleanSmart may update this Policy when its services, processing activities or the legal framework change. The current version is always published on this page and, where required, additional notice will be provided by an appropriate means.
