Privacy Policy | Personal Data Protection at SHOWOOD

Privacy Policy | Personal Data Protection at SHOWOOD

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights under the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

Introduction What data we process How we use it Your rights & Contact

1. Introduction

GDPR

1.1 Who we are

SHOWOOD operates in the import and distribution of treated and untreated timber products, as well as wooden garden products. The Company’s commercial activity began in late 2007 and today it operates facilities of 15,000 m². Our products are distributed throughout Greece directly by the Company and through selected partners (garden centres, timber merchants, etc.).

SHOWOOD implements a quality management system in accordance with ISO 9001:2015, providing services of high standards.

1.2 Personal data protection and processing

“Personal data” means any information relating to an identified or identifiable natural person. Processing includes, indicatively: collection, recording, storage, organisation, use, disclosure, erasure, or destruction.

Our aim: to provide clear information about how your personal data are processed and to enable you to make informed decisions regarding your relationship with SHOWOOD.

1.3 Purpose of this Privacy Policy

  • To inform you which personal data we collect and process, for what purposes, by what means, and for how long.
  • To ensure you understand your rights and our obligations regarding accountability and security.
  • To provide a clear mechanism for consent where required and the ability to withdraw such consent at any time.

Note: This Privacy Policy was published on 10 May 2019 and replaces any previous version.

2. What personal data we process

Personal data

When you contact us, visit our website, place orders, or request cooperation, we may request information such as: name, address, email, telephone number, etc., depending on the nature of our relationship.

You may also voluntarily provide additional personal data (e.g., when sending a CV) or further information (e.g., tax or commercial details) in the context of receiving information or exploring a potential cooperation.

How we collect information

  • Information you provide to us when communicating with us or using our website, electronically or otherwise.
  • Information we receive from your use of our services or services of our partners.
  • Use of technologies such as cookies (see section 7).
Analytics: The website does not collect visitor information beyond what is collected via Google Analytics, which has been configured not to record the visitor’s IP address.

Lawful basis

Article 6
  • Contract: to perform an order/service.
  • Legal obligation: accounting/tax compliance.
  • Legitimate interests: security, fraud prevention, service improvement.
  • Consent: where required (e.g., marketing).
Retention: We retain personal data only for as long as necessary for the relevant purpose and/or as required by applicable law.

3. How we use personal data

Purposes

We use the information we collect, and in accordance with the preferences/consents you have provided, in order to:

  • process your order and complete product delivery,
  • provide personalised and up-to-date services and/or products,
  • contact you regarding services or products that may be of interest (where permitted and/or where you have consented),
  • process payments and prevent or detect potential fraud,
  • respond to questions and requests,
  • implement and comply with this Privacy Policy.

When you contact us, we may keep a record of communications in order to address any issues and improve customer service.

Security: We do not permit unauthorised parties to access your data. Access is limited and controlled.

4. Who we share personal data with

Disclosure

We do not disclose personal data outside our Company unless one of the following applies:

  • With your consent: where we have obtained your explicit consent.
  • External processing: to trusted service providers/partners (e.g., hosting, technical support, payment providers) under confidentiality, security, and data protection obligations.
  • Legal requirements: to competent public authorities where reasonably necessary to comply with laws, regulations, legal process, or governmental requests.
International transfers (outside the EEA), where applicable
Where service providers are located outside the EU/EEA, we implement appropriate safeguards as required by the GDPR (such as Standard Contractual Clauses or other lawful transfer mechanisms).

5. Your rights

GDPR

Under the GDPR, you have the following rights:

  • Right of access
  • Right to rectification
  • Right to erasure
  • Right to restriction of processing
  • Right to be informed regarding rectification/erasure/restriction
  • Right to data portability
  • Right to object
  • Right not to be subject to automated decision-making, including profiling
Complaint: You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA) (www.dpa.gr).

Our obligations

Security
  • Appropriate technical and organisational measures (confidentiality, integrity, availability).
  • Restricted access to authorised personnel only.
  • Contractual confidentiality commitments.
  • Review of collection, storage, and processing practices.
Children: Our services, products and website are not intended for children under 16 and we do not knowingly process their personal data.

6. Access requests (SAR)

1 month

You may request access to, rectification of, restriction of processing of, or erasure of your personal data. In such cases, you may be asked to complete a Subject Access Request (SAR). We will respond within one (1) month of receiving your request, subject to the conditions and exceptions provided under applicable law.

Download SAR Form (EN/GR) Contact us

Note: The exercise of rights is always subject to applicable legal requirements (e.g., tax, accounting, or employment laws).

7. Cookies

Cookies

We use cookies (session/transient, persistent/stored, etc.) to improve speed and the quality of service when you visit our website.

You may manage or disable cookies via your browser settings. Disabling cookies may reduce the performance of certain website features.

See also: our “Cookie Policy” page for further information.

8. Consent and withdrawal

Opt-in

Where required, we may request your explicit consent (opt-in) for the collection and processing of your personal data. Consent is provided for specific purposes and may be withdrawn at any time.

We collect and process personal data only where we have a lawful basis under the GDPR, including: consent, performance of a contract, compliance with a legal obligation, protection of vital interests, performance of a task carried out in the public interest/official authority, or legitimate interests (provided such interests are not overridden by your rights and freedoms).

9. Contact details

SHOWOOD
  • Company: SHOWOOD IKE
  • Data Controller: Giovanna Tsiori
  • Address: 186 Karamanli Ave., 136 78 Acharnes, Greece
  • Email: info@showood.gr
  • Telephone: +30 2102478811
  • Fax: +30 2102478812
  • Website: https://showood.gr/en/
Contact form Continue shopping