Privacy Policy

Privacy Policy | hairmony.gr

INTRODUCTION

The company "GIORGOS KARDARAS HAIRWORKSHOP EE," operating under the trade name "HAIRMONY GR" (Business Registry No. 087083302000, Tax ID 999446458), based at Geroulanou 17-19, 16452, Argyroupoli, Attica, operates the online store hairmony.gr and prioritizes the protection of the personal data of its users and customers. This Privacy Policy informs you about the types of personal data we collect through our website or other means (e.g., phone or email communication), as well as how we process it.

1. Scope of This Privacy Policy

The Company is the data controller for personal data collected in the course of providing its services. This Privacy Policy applies to all users (registered and unregistered) who wish to receive services from the Company, including those who use the Company's services without creating an account on its website.

As stated in our Terms of Use, the Company's services are intended for a general audience and are not directed at children; accordingly, we do not knowingly collect or process personal data from children under the age of 16.

2. What Personal Data We Collect

HAIRMONY collects the following categories of data:

Registration data: first name, last name, email address, home address, and postal code, when you create an account on hairmony.gr.

Order data: full name, contact phone number, shipping address, and receipt type (retail receipt or invoice), which are necessary to complete and deliver your order.

Invoice data: in the case of an invoice request, business name, Tax ID, tax office, and registered business address.

Contact data: name and email address, when you sign up for HAIRMONY's newsletter.

Information collected automatically through cookies and related technologies, as described in detail in HAIRMONY's Cookie Policy.

HAIRMONY does not collect or store bank card details. Payments made by card or PayPal are processed exclusively through a secure third-party payment provider environment, which maintains its own privacy policy; HAIRMONY does not have access to your card or payment account details.

Additionally, we do not request, and we recommend you do not share with us, sensitive personal data such as health information, racial or ethnic origin, or religious or political beliefs.

3. Purposes for Which We Use Your Personal Data

HAIRMONY processes your personal data in order to:

• Process and complete your orders, including shipping and delivery of products.
• Provide customer service and respond to your inquiries or complaints.
• Issue the required tax documents and maintain relevant accounting records.
• Send you, with your explicit consent, informational material, offers, and news via newsletter.
• Protect HAIRMONY's legitimate interests, including fraud prevention and the establishment, exercise, or defense of legal claims.
• Comply with obligations arising from applicable law and respond to lawful requests from competent authorities.

4. Legal Basis for Processing

Processing your personal data is necessary to provide the requested services, and in certain cases (such as for ordering and delivering a product) collecting your data is required, as the Company's services could not otherwise be provided.

Processing may also be necessary for the Company's legitimate interests or to comply with its legal and/or regulatory obligations.

Furthermore, the Company processes your personal data to send you commercial/promotional communications, following prior notice and your explicit consent.

Below is an explanatory table on this matter:

5. How We Protect Your Personal Data

HAIRMONY implements appropriate technical and organizational security measures to protect your personal data from loss, theft, unauthorized access, disclosure, or alteration. For example, online transactions are carried out through a secure banking environment and SSL (Secure Socket Layer) encryption technology, as described in detail in HAIRMONY's "Transaction Security" section. Access to your personal data is limited to authorized personnel, to the extent necessary for performing their duties.

6. Who May Access Your Personal Data

The Company may disclose your personal data to the following recipients, to the extent necessary for the purposes described in this Policy:

• Partner courier companies (e.g., ACS Courier, BOX NOW), for delivery of your order.
• Online payment service providers (e.g., Viva Wallet, PayPal), for processing your transaction.
• Partner businesses that support the operation of the Website (e.g., hosting providers, accounting support).
• Competent judicial, police, or other administrative authorities, upon their lawful request and in accordance with applicable law.

HAIRMONY has taken the necessary measures to ensure that its staff and partners are bound by confidentiality obligations when processing your personal data.

7. How Long We Retain Your Data

Your personal data is retained for as long as necessary to fulfill each processing purpose, and in any case for a minimum period of five (5) years.

Specifically:

• Order and invoice data: retained for the period required by tax and related legislation (generally, at least five (5) years).
• User account data: retained for as long as the account remains active, until you request its deletion.
• Newsletter subscription data: retained until you withdraw your consent or request removal from the recipient list.
• Data related to communications/requests: retained for as long as necessary to complete the handling of your request.

We may retain certain data for longer periods if required for the establishment, exercise, or defense of legal claims. Once the purpose of processing has been fulfilled, the data is securely deleted or anonymized.

8. Transfer of Personal Data to Third Countries

As a general rule, your personal data is not transferred outside the European Economic Area (EEA). To the extent that certain partner service providers (e.g., payment providers) may process data outside the EEA, HAIRMONY ensures that appropriate safeguards are in place, such as the European Commission's standard contractual clauses, or transfers to countries recognized as providing an adequate level of data protection.

9. Your Rights Regarding Your Personal Data

Under the GDPR, you have the following rights regarding your personal data, provided the legal conditions are met:

• Right to access your personal data and receive a copy of it.
• Right to rectify any inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"), when there is no longer a legal basis for processing.
• Right to object to processing, particularly when based on legitimate interest or carried out for direct marketing purposes.
• Right to restrict processing, under specific conditions.
• Right to data portability for data you have provided to us, in a structured, machine-readable format.
• Right to withdraw your consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

You may exercise any of the above rights by submitting a request to info@hairmony.gr. HAIRMONY will make every effort to respond to your request within one (1) month of receipt, a period which may be extended by a further two (2) months in cases of particular complexity, with prior notice to you.

10. Updates to This Privacy Policy

This Privacy Policy may be revised periodically to remain compliant with applicable law and HAIRMONY's practices. Any material changes will be posted on this page before taking effect. We recommend checking this page periodically.

11. Data Protection Authority

If you believe your data protection rights have been violated, you have the right to file a complaint with the Hellenic Data Protection Authority (HDPA), whose contact details are available at www.dpa.gr.

12. Contact Us

For any questions regarding this Privacy Policy, as well as to exercise your rights, you can contact us:

• By email: info@hairmony.gr
• By post: HAIRMONY, Geroulanou 17-19, Argyroupoli, 16452

Last updated: August 2026