This Privacy Notice is provided in accordance with Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data (General Data Protection Regulation – “GDPR”) and the Cyprus Law 125(I)/2018 Providing for the Protection of Natural Persons With Regard to the Processing of Personal Data and for the Free Movement of Such Data.
For all questions relating to this Privacy Notice or to exercise any of your rights, please contact us using the details above.
• Data categories: name, postal address, e‑mail address and any additional information you provide in the order form.
• Purpose: processing and dispatch of our free products/promotional items.
• Legal basis: Article 6(1)(b) GDPR (performance of a contract).
• Data categories: IP address, date and time of access, browser type and version, operating system, referrer URL and other technical data.
• Purpose: ensuring the technical availability, stability and security of our website.
• Legal basis: Article 6(1)(f) GDPR (legitimate interests). Our legitimate interest is the reliable operation and security of our website.
Our website uses cookies to extend functionality and improve usability. We employ the following types of cookies:
• Strictly necessary cookies (legal basis: Article 6(1)(f) GDPR).
• Analytics and marketing cookies, used only with your consent (legal basis: Article 6(1)(a) GDPR). You can withdraw your consent at any time via our cookie banner. These practices follow the requirements of Article 5(3) of Directive 2002/58/EC (e‑Privacy Directive) as implemented in Cyprus by Law 112(I)/2004.
We share personal data with service providers only to the extent necessary to fulfil your order (e.g. postal or courier services). Where required, data may also be processed by our hosting provider acting on our behalf under a data‑processing agreement compliant with Article 28 GDPR.
Legal basis: Article 6(1)(b) or (f) GDPR.
We retain personal data only for as long as necessary to provide our services or as required by statutory retention obligations. Order data are generally deleted after completion of the order unless longer retention is required by law. Server log files are stored for security purposes and are anonymised or deleted after a few weeks.
We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, destruction or manipulation. These measures are reviewed regularly and adjusted to the state of the art.
You have the following rights under the GDPR:
• Right of access (Article 15).
• Right to rectification (Article 16).
• Right to erasure (“right to be forgotten”, Article 17).
• Right to restriction of processing (Article 18).
• Right to data portability (Article 20).
• Right to object (Article 21).
• Right to withdraw consent at any time (Article 7(3)).
If you have any questions or wish to exercise your rights, please contact us at the address provided in Section 1.
You can lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement. In Cyprus the competent authority is the Office of the Commissioner for Personal Data Protection, 1 Iasonos Street, 1082 Nicosia (www.dataprotection.gov.cy, e‑mail: [email protected]).
We may update this Privacy Notice from time to time to comply with legal requirements or to reflect changes in our services. The current version will always be available on our website. (Last updated: [June 2025])