GREF INNOVATION
Last Updated: October 12, 2026
1. Introduction
GREF Innovation respects the privacy of its website visitors, customers, and business partners and is committed to protecting their personal data.
This Privacy Policy explains how we collect, use, process, store, and protect personal information when you visit or make purchases through our online store.
All personal data is processed in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Greek and European data protection legislation.
2. Data Controller Information
The entity responsible for processing your personal data is:
- Legal Name: GREF INDUSTRIES L.P.
- Trading Name: GREF Innovation
- Registered Address: 95 Sevastoupoleos Street, Athens, 11526, Greece
- Telephone: +30 210 710 3958
- Email: info@gref-innovation.gr
- General Commercial Registry (G.E.MI.) Number: 190786402000
- Website: www.gref-innovation.gr
For any questions or requests concerning the processing of your personal data, please contact us using the details above.
3. Personal Data We Collect
When you visit or use our online store, we may collect the following categories of personal data:
Personal Identification and Contact Information
- Full name
- Email address
- Telephone number
- Billing and shipping addresses
Order and Transaction Information
- Products purchased and quantities ordered
- Order history
- Payment method and transaction status
- Shipping and delivery details
- Product returns and refund information
Business Customer and B2B Partner Information
- Company name
- VAT number and invoicing information
- Business activity details
- Contact details of authorized company representatives
- Information required to establish and manage commercial partnerships
Technical and Browsing Information
- IP address
- Browser type and device information
- Connection and technical data
- Website usage and navigation data
- Cookies and similar tracking technologies, depending on your consent preferences
We collect only personal data that is relevant and necessary for the purposes described in this Privacy Policy.
4. Purposes and Legal Bases for Processing
We process personal data for the following purposes:
Order Processing and Contract Fulfillment
To receive, process, confirm, fulfill, ship, and deliver orders, manage payments, handle returns, and provide customer support.
Legal basis: Performance of a contract or taking steps prior to entering into a contract.
Customer Account Management
To create and manage customer accounts, provide access to order history, and maintain account functionality.
Legal basis: Performance of a contract.
Legal, Tax, and Accounting Obligations
To issue invoices, maintain accounting records, and comply with applicable tax, financial, and legal obligations.
Legal basis: Compliance with a legal obligation.
Customer Service and Business Communication
To respond to inquiries, provide technical assistance, manage complaints, and communicate with customers and business partners.
Legal basis: Performance of a contract or legitimate interests, depending on the nature of the communication.
Website Security and Fraud Prevention
To protect our online store, prevent fraudulent transactions, detect unauthorized activity, and maintain system security.
Legal basis: Legitimate interests and, where applicable, compliance with legal obligations.
Marketing and Promotional Communications
To provide information about new products, special offers, product launches, and company activities.
Legal basis: Consent where required, or another lawful basis permitted under applicable electronic marketing legislation.
Website Analytics and Service Improvement
To evaluate website performance, understand user interactions, and improve the browsing and shopping experience.
Legal basis: Legitimate interests where legally permitted, or consent where required, particularly for non-essential cookies and tracking technologies.
5. Payment Processing
Payments made through our online store are processed by the available third-party payment service providers.
During the payment process, the information necessary to complete the transaction is securely transmitted to the relevant payment provider.
GREF Innovation does not seek to collect or store complete payment card details, including full card numbers or CVV security codes.
We may receive limited payment-related information, such as transaction confirmations, payment status, failed transaction notifications, and refund details.
Payment service providers process personal data in accordance with their own privacy policies and applicable legal obligations.
6. Sharing Personal Data with Third Parties
To operate our online store and provide our services, we may share necessary personal data with trusted third-party service providers.
These may include:
- Shipping companies, courier services, and logistics providers.
- Banks and electronic payment processors.
- Website hosting providers and technical support partners.
- E-commerce, ERP, and accounting software providers.
- Accountants and professional advisers.
- Email communication, marketing, and analytics service providers, where applicable.
We disclose only the information reasonably necessary for each service or legal obligation.
Where service providers process personal data on our behalf, appropriate contractual data protection arrangements are implemented as required by the GDPR.
GREF Innovation does not sell or rent customers' personal data to third parties.
7. Cookies and Tracking Technologies
Our online store uses cookies and similar technologies to support essential website functionality and, where applicable, improve our services.
Cookies may fall into the following categories:
Strictly Necessary Cookies
These cookies are required for essential functions, including shopping cart functionality, account authentication, security, and checkout operations.
Analytics Cookies
These cookies help us understand how visitors use our website and improve its performance.
Functional Cookies
These cookies enable the website to remember certain user preferences and settings.
Advertising and Marketing Cookies
Where used, these cookies help measure advertising performance and deliver more relevant promotional content.
Non-essential cookies are activated only after obtaining the required consent.
Visitors may accept, reject, or modify their preferences for non-essential cookies through our cookie consent management system.
Additional information regarding specific cookies, third-party providers, and retention periods is available in our separate Cookie Policy.
8. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with applicable legal obligations.
In particular:
- Order and transaction data: Retained for the periods required by applicable tax, accounting, and commercial legislation.
- Customer account information: Retained while the account remains active or while another lawful reason for retention exists.
- Customer correspondence: Retained for the time necessary to resolve inquiries, provide support, and address related legal claims.
- Marketing information: Retained until consent is withdrawn or an objection is made, unless another lawful reason justifies limited retention.
Once the applicable retention period has expired, personal data is securely deleted or anonymized, unless further retention is legally required.
9. Data Security
GREF Innovation implements appropriate technical and organizational measures to protect personal data against unauthorized access, accidental loss, misuse, alteration, and unauthorized disclosure.
These measures may include:
- Secure connections and encrypted data transmission.
- Access controls and restricted system permissions.
- Appropriate technical security safeguards.
- Authorized personnel access.
- Security incident management procedures.
Access to personal data is limited to authorized individuals who require such information to perform their responsibilities.
Although we take reasonable measures to protect personal information, no internet-based system can guarantee absolute security.
10. Your Rights Under the GDPR
Under the GDPR, individuals have the following rights, subject to applicable legal conditions:
Right of Access
You may request confirmation of whether we process your personal data and obtain a copy of that information.
Right to Rectification
You may request the correction of inaccurate personal data or the completion of incomplete information.
Right to Erasure
You may request the deletion of your personal data where the relevant legal conditions are met.
Right to Restriction of Processing
You may request that the processing of your personal data be restricted in certain circumstances.
Right to Data Portability
Where applicable, you may request to receive your personal data in a structured, commonly used, machine-readable format or have it transferred to another controller.
Right to Object
You may object to processing based on legitimate interests under the conditions provided by law. You may object at any time to the processing of your personal data for direct marketing purposes.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Where applicable, you also have rights relating to automated individual decision-making.
To exercise any of these rights, please contact us at:
We will respond to your request within the time limits established by the GDPR, generally within one month. This period may be extended where permitted by law.
Certain requests, including requests for deletion, may be subject to limitations where we are legally required to retain specific information.
11. Marketing Communications and Newsletter
Visitors and customers may choose to receive information about new products, special offers, product releases, and company news from GREF Innovation.
Marketing communications are sent in accordance with applicable data protection and electronic communications legislation.
Recipients may unsubscribe from promotional communications at any time using the unsubscribe link, where provided, or by contacting us directly.
Unsubscribing from marketing communications does not affect essential service-related messages concerning orders, payments, deliveries, or customer support.
12. International Data Transfers
In connection with certain technology providers and service partners, personal data may be transferred to countries outside the European Economic Area (EEA).
Where such transfers take place, we comply with the requirements of the GDPR and implement appropriate safeguards.
These may include European Commission adequacy decisions or approved Standard Contractual Clauses, where required.
For further information regarding applicable safeguards for international data transfers, please contact us.
13. Children's Privacy
Our online store is primarily intended for adult consumers, businesses, and professional customers.
We do not knowingly seek to collect personal data from minors without an appropriate lawful basis.
If we become aware that personal data has been collected in violation of applicable data protection legislation, we will take appropriate corrective measures.
14. Third-Party Websites
Our website may contain links to third-party websites or external services.
GREF Innovation does not control the privacy practices, security policies, or content of independently operated third-party websites.
We encourage visitors to review the privacy policies of external websites before providing personal information.
15. Right to Lodge a Complaint
If you believe that the processing of your personal data violates applicable data protection legislation, you have the right to lodge a complaint with the relevant supervisory authority.
In Greece, the competent authority is:
Hellenic Data Protection Authority (HDPA)
Website: www.dpa.gr
You may also contact GREF Innovation directly so that we can investigate and address your concerns.
16. Changes to This Privacy Policy
GREF Innovation reserves the right to update or modify this Privacy Policy when necessary to reflect changes in our services, data processing activities, or applicable legislation.
The latest version will always be available on our website, together with its most recent update date.
Where legally required, we will provide additional notice or request renewed consent.
17. Contact Information
For any questions, concerns, or requests relating to this Privacy Policy or the processing of personal data, please contact:
GREF Innovation
GREF INDUSTRIES L.P.
95 Sevastoupoleos Street, 11526 Athens, Greece
Email: info@gref-innovation.gr
Telephone: +30 210 710 3958
Website: www.gref-innovation.gr
At GREF Innovation, protecting your personal data is an essential part of the trust we strive to build and maintain with every customer and business partner.