Privacy Policy of e-karotsi.gr

e-karotsi.gr is provided by STANIMEROS PANTELEIMON, a sole trader based in Thessaloniki, Greece (ΓΕΜΗ 183133106000, VAT EL165099427). We decide why and how your data is used (the "controller"). Contact: hello@stanimeros.com.

This is what e-karotsi.gr handles. Each item is explained in the sections below.

You sign in with an account created in the app, handled by Firebase Authentication. We store your name, email and account ID.

To process and deliver your orders we use your name, address, phone number and email.

Firebase Cloud Messaging sends push notifications to your device. We store a notification token for your device. You can turn notifications off at any time in your device settings.

e-karotsi.gr uses Firebase Analytics to see how the app is used. It records app interactions, device and app identifiers (on Android this can include the advertising ID), and your approximate country. We use it in aggregate to fix problems and improve the app, not for advertising.

Firebase Crashlytics sends us a report when the app crashes. It includes your device model, operating system version and the state of the app at the time.

Under the GDPR we rely on these legal bases:

• • Contract, Art. 6(1)(b): to provide the features you asked for and your account.
• • Consent, Art. 6(1)(a): for the device permissions you allow, such as notifications or location. You can withdraw consent at any time in your device settings.
• • Legitimate interests, Art. 6(1)(f): crash reports, aggregated usage analytics and security, so we can keep the service working and improve it.
• • Legal obligation, Art. 6(1)(c): records we must keep by law, such as accounting records.

We use these providers to run e-karotsi.gr. Some process data on our behalf. Others, such as the app stores, process it under their own policies.

Google Firebase and Google Cloud, for:

• • Firebase Authentication: sign-in and accounts
• • Cloud Firestore: database for app data
• • Firebase Cloud Messaging: push notifications
• • Firebase Analytics: usage analytics
• • Firebase Crashlytics: crash reports

Google processes this data under its Privacy Policy.

We do not sell your personal information or use it for advertising.

Some of the providers above, such as Google, may process data in the USA. These transfers rely on the EU-US Data Privacy Framework or Standard Contractual Clauses.

• • Account and app data: until you delete it or your account. We handle deletion requests within 30 days.
• • Crash reports: about 90 days.
• • Usage analytics: up to 14 months.
• • Data on your device: until you clear it or uninstall the app.
• • Records we must keep by law are kept for the required period.

Giving us data is not a legal requirement. Some features need it, and without it those features will not work.

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

You can ask us to:

• • give you access to your data
• • correct it
• • delete it
• • restrict how we use it
• • stop using it for certain purposes (object)
• • give you a copy you can move elsewhere (portability)

You can withdraw your consent at any time. You can object at any time to processing based on legitimate interests, such as analytics and crash reports.

To use these rights, email hello@stanimeros.com or use the data deletion page. We reply within one month. You can also complain to the Hellenic Data Protection Authority at www.dpa.gr.

Data is encrypted in transit (HTTPS) and stored with Google Cloud/Firebase, which encrypts data at rest. We limit access to what is needed to run the service. No system is completely secure.

e-karotsi.gr is not intended for children under 15. We do not knowingly collect their data. If you think a child has given us data, contact hello@stanimeros.com and we will remove it.

If we change this policy, we update the date at the top of this page.

Questions about this policy or your data: hello@stanimeros.com.

Thessaloniki, Greece