We respect your privacy. This policy describes what personal data we collect, why, how we use it, and your rights under the EU General Data Protection Regulation (GDPR — Reg. 2016/679) and Greek law 4624/2019.
1. Data Controller
PlantBox
Legal name: Vasileios Tsipas
ΑΦΜ / VAT: 049188574
Registered address: Rethi, Corinthia 20400, Greece
Email: info@plantbox.gr
2. Data we collect
We only collect data that you provide to us or that is necessary for the site to function:
- Contact form: company name, contact person, email, phone, message/order details.
- Technical data: IP address, browser type, pages visited. Used briefly for security (Cloudflare Turnstile) and — only if you consent — for analytics (Google Analytics).
3. Purpose and legal basis
- Responding to your inquiry and preparing a quote — Article 6(1)(b) GDPR (pre-contractual measures).
- Protection against form abuse — Article 6(1)(f) GDPR (legitimate interest in security).
- Site analytics — Article 6(1)(a) GDPR (your consent via the cookie banner).
4. Processors we use
We use the following providers as data processors:
- Vercel Inc. — site hosting (EU region).
- Supabase Inc. — form submission handling.
- Resend — transactional email delivery.
- Cloudflare — Turnstile (bot protection).
- Google LLC — Google Analytics 4 (consent-based only.)
5. International transfers
Where data is transferred outside the EEA, we rely on the European Commission's Standard Contractual Clauses or equivalent legal mechanisms.
6. Retention
- Form submissions: up to 24 months from last contact.
- Analytics: per Google Analytics retention (up to 14 months).
- Security logs: up to 30 days.
7. Your rights
You have the right to request:
- Access to your data (Art. 15).
- Rectification or erasure (Art. 16–17).
- Restriction of processing (Art. 18).
- Data portability (Art. 20).
- Objection to processing (Art. 21).
- Withdraw consent at any time — without affecting the lawfulness of prior processing.
To exercise these rights, email info@plantbox.gr. We respond within 30 days.
8. Complaints
You can lodge a complaint with the Hellenic Data Protection Authority: www.dpa.gr.
9. Cookies
For details on cookies, see our Cookies Notice.
10. Changes to this policy
We may update this policy. The date at the top of the page reflects the current version.