PRIVACY POLICY

PERSONAL DATA PROTECTION STATEMENT OF THE COMPANY TAGTOUCH E.E.

Effective as of: 17/03/2026

Last update: 17/03/2026

The protection of your personal data is important to us. This personal data protection statement explains what kind of personal data we collect from you, for what purpose we process it, how we protect it, and what rights you have as a visitor and user of our online store.

Our website is in compliance with the General Data Protection Regulation 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data ("GDPR Regulation"), which is a directly binding legislative act, and with Law 4624/2019.

Who we are and how to contact us

The websites https://tagtouch.gr and https://accounttagtouch.gr belong to the company TAGTOUCH E.E., based in Agios Dimitrios, Attica, 2 Griva Digeni Street, which is also the Data Controller for the personal data we process. The Company has not appointed a Data Protection Officer, in accordance with Article 37 of the GDPR.

You can contact us for any inquiries or other questions regarding the collection and use of Personal Data or this privacy statement and for the exercise of your rights under personal data protection law at the email: info@tagtouch.gr

What is Personal Data and its processing?

Personal data (or personally identifiable information) is any information relating to an identified or identifiable natural person (referred to as a "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person,

Processing of personal data is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Personal Data we collect and the purposes of their collection and processing.

Like all businesses with an online presence, we also collect data so that our websites function effectively and offer you the best possible experience and the most relevant information and suggestions, according to your needs and preferences. Specifically, during the provision of services by us, we may collect and process the following personal data, depending on the respective functions or services you use:

  • When you register and create an account on our websites:

Identification details, such as your full name, your email address, residential address, your phone number, account username, password, and your registration date. These details are necessary to ensure your secure access to your account during future visits, to facilitate smooth browsing and completion of your purchases through our online store, as well as for you to have a complete view of your order history. Your registration is optional, and you can unsubscribe at any time by contacting us by phone at 2152158260 or via email: info@tagtouch.gr .

  • For the operation of the Digital Profile:

We collect and process the links and information that you choose to enter into your profile. The disclosure of this information to third parties (through scanning the TagTouch product) is based on your own initiative and consent.

  • Single Sign-On

It is noted that the websites https://tagtouch.gr (online store) and https://accounttagtouch.gr (digital profile management) use a common and unified database for the identification and login of users. Your profile data remains synchronized on both domains, allowing you to browse and manage our services without the need to create separate accounts. This processing is necessary for the proper execution of the contract between us and the provision of the TagTouch service.

  • For your subscription to the newsletter:

For your subscription to the newsletter, we only ask for your email address. The purpose of this collection is to send newsletters regarding new products, offers, discount events, or other news from our online store that may be of interest to you. Subscription is optional, and you can unsubscribe at any time by contacting us by phone at 2152158260 or via email: info@tagtouch.gr .

  • For placing an order and making purchases/transactions:

When you proceed with an order from our online store, we need certain basic details to be able to process it, complete it successfully and securely, as well as to improve your experience in our e-shop. The data collected includes, but is not limited to, identification details such as your full name, your phone number, email address, and shipping address. We also collect details related to the order itself, such as the products you have added to your cart, the order number and date, delivery status, the amount of the order and shipping costs, any cancellation or change requests, as well as the payment method you chose. In cases of refund requests, you may be asked for additional details, such as the IBAN, the beneficiary's name of the bank account, and the bank institution. It is noted that we do not have access to the full details of your bank card. At the same time, we may collect information related to your preferences in the e-shop, such as adding products to favorites, with the aim of improving your shopping experience.

  • For your participation in a contest via social media:

When you participate in contests we organize through our official accounts, we may process your basic personal details, such as your profile or username, as well as any other details you provide in the context of the participation (e.g., comment, like, tag). In case you are declared a winner, we may ask for additional details, such as your full name, email address, phone number, and shipping address, in order to contact you and send you the gift. In the context of transparency, adherence to the contest terms, but also for promotional reasons, the winner's name or username may be made public through a relevant post on our social media and/or our website. Your participation in the contest implies the acceptance of these terms. You have the possibility, at any time, to withdraw your participation in the contest by contacting us. This withdrawal does not affect the legality of the processing that has already taken place up to the moment of withdrawal.

  • For the issuance and use of a Gift Card:

When issuing a gift card through our online store, both the purchaser and the recipient of the gift card log in to their account or enter the required details so that the card can be sent and redeemed. The purchaser is obliged to state the recipient's email address after having first secured their explicit consent for the provision of this information. In any case, the purchaser bears sole responsibility for any violation of the recipient's personal data or rights. During the processing of the gift card, we collect information such as the card amount, the date of issue and use, as well as the products purchased with it. This data is used exclusively for the issuance, tracking, and redemption of the gift card, as well as for the proper completion of the relevant process.

  • For your participation in the Rewards Program:

Your participation in the Rewards Program requires the creation of an account on our website and your login as a user. Through this participation, data is recorded such as the points accumulated from your purchases, the points you redeem, the point balance, the dates of accumulation and redemption, as well as the products purchased through point redemption. This data is collected in order to ensure the proper functioning of the Rewards Program and to provide you with the corresponding benefits for your purchases. You have the possibility at any time to request your unsubscription from the Rewards Program and the deletion of your account on our website by contacting us.

  • Data we collect through cookies and Google Analytics tools:

During your browsing on our website, as well as during your visit to our accounts on social media, we collect certain data through cookies and analysis tools (such as Google Analytics). This data includes, but is not limited to, the duration of the visit, the type of device or browser, the IP address in anonymized form, your preferences on social media, the products you have placed in the cart, as well as information regarding product viewing. The collection of this data allows us to analyze the use of the website, identify technical problems, improve our services, and adapt our content according to your preferences and interests. For the collection of data through cookies (except for the strictly necessary ones), we ask for your explicit consent upon your entry to the website. You can withdraw your consent to the use of Cookies at any time. For more information regarding the management of Cookies, visit the relevant section of our website, Cookies Policy.

  • Data collected when you rate our products or services:

When you submit a rating for a product or service, we may collect data such as your name, the rating you provide, the content of the rating, as well as the time of submission. This data is published along with the rating, provided that the content does not violate third-party rights, is not offensive or inappropriate, and adheres to the platform's terms of use. The purpose of collecting and publishing ratings is to inform other users, strengthen transparency, and improve our products and services.

Legal basis for the Collection of your Personal Data

The collection and processing of your personal data is done with transparency, legality, and respect for your privacy, and serves specific purposes, which are based on the following legal bases:

  • Fulfillment of Contractual Obligations The processing of certain personal data of yours is necessary in order for us to be able to respond with accuracy, consistency, and safety to our contractual obligations arising from the distance sales contract between us and/or for the fulfillment of your requests prior to its conclusion. In this context, we process the data you provide us during the placement of your order, with the purpose of confirming, processing, and sending the order, communicating with you regarding its progress (such as shipping stages or potential delays), providing clarifications or information regarding the availability and technical characteristics of the products upon your request, managing cancellations or refund requests, facilitating registered users through account creation with pre-filled billing and shipping information and the ability to view order history, recording and managing your participation in the Rewards Program for the purpose of accumulating and redeeming points and providing corresponding benefits, as well as managing your participation in contests organized through our accounts, provided that you have chosen to participate. Such processing is absolutely necessary for the proper and responsible provision of our services.
  • Compliance with Legal Obligations Certain personal data of yours may be retained or disclosed in the context of compliance with obligations imposed by applicable law, such as for tax and accounting purposes or for responding to requests from public, judicial, or supervisory authorities, when this is required by law.
  • Data Processing based on your Consent The processing of certain personal data of yours is based exclusively on your explicit and free consent, which you have the possibility to withdraw at any time, without affecting the legality of the processing that has already taken place up to the moment of withdrawal. The cases of processing based on consent are as follows:
  • User Registration The creation of an account and user registration on our website is not mandatory. However, if you choose to create an account, you consent to the entry of your necessary personal details, with the purpose of the safe and effective provision of our services, as well as the optimization of the user experience. Your registration allows, among other things, the saving of your preferences to facilitate future purchases, as well as access to your order history. You have the possibility to withdraw your consent at any time by requesting your unsubscription by contacting us.
  • Newsletter Subscription Your subscription to the Company's newsletter is optional. If you choose to subscribe to the newsletter, you explicitly consent to the collection and processing of your email address, with the purpose of sending informational material regarding new products, offers, promotional and other activities. You can withdraw your consent at any time by requesting your unsubscription from the newsletter by contacting us.
  • Participation in Contests: Your participation in contests that we may organize, through our official social media accounts, requires the processing of personal data necessary for the conduct of the contest. By participating, you consent to the processing of said data for purposes such as recording the participation, communicating with the winners, and sending the gifts. In case you are declared a winner, you may be asked for additional details necessary for the delivery of the gift. You have the right to withdraw your consent at any time and retract your participation by contacting us.
  • Rating and Publishing Comments for Products: The entry of comments or product ratings by users is done voluntarily and the posting of these is and remains public. By submitting your comment, you explicitly consent to the public display of the content you enter, with the purpose of providing useful information to other users and contributing to the improvement of our products and services. You have the possibility to request the deletion or modification of your rating by contacting us at any time.
  • Use of Cookies and Analysis Tools (e.g., Google Analytics):
    For the improvement of browsing and the provision of personalized content, we ask for your consent for the activation of cookies (other than the strictly necessary) and the use of analysis tools. You can manage your preferences and withdraw your consent at any time. For more information regarding the management of cookies, visit the relevant section of our website, Cookies Policy.
  • Participation in the Rewards Program: The collection and processing of personal data for tracking your points and providing benefits is done only if you have given your consent for the creation of an account and your registration as a user of our website. You can withdraw your participation and the relevant consent at any time by contacting us.

In any case, the protection of your privacy and respect for your personal data are a top priority for us. The withdrawal of your consent does not affect the legality of actions that have been performed prior to it.

Information regarding your Rights.

The legislation provides data subjects with the right to submit a request to the data controller for access to and rectification or erasure of personal data or restriction of processing concerning the data subject, or the right to object to processing, as well as the right to data portability, as well as the withdrawal of any consent you have given, with future effect.

For related matters, you can contact the "Hellenic Data Protection Authority: 1-3 Kifisias Ave., 115 23 Athens, Greece"

Details regarding the rights of the data subject:

Right of access by the data subject

The data subject has the right to obtain from the data controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information:

- the purposes of the processing,

- the categories of personal data concerned,

- the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations,

- where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period,

- the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing,

- the right to lodge a complaint with a supervisory authority,

- where the personal data are not collected from the data subject, any available information as to their source,

- the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) of the GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

Where personal data are transferred to a third country or to an international organisation, the data subject shall have the right to be informed of the appropriate safeguards pursuant to Article 46 relating to the transfer.

The controller shall provide a copy of the personal data undergoing processing. For any further copies requested by the data subject, the controller may charge a reasonable fee based on administrative costs. Where the data subject makes the request by electronic means, and unless otherwise requested by the data subject, the information shall be provided in a commonly used electronic form.

The right to obtain a copy referred to in paragraph 3 shall not adversely affect the rights and freedoms of others.

Right to rectification

The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Right to erasure (‘right to be forgotten’)

The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies:

- the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed,

- the data subject withdraws consent on which the processing is based,

- the data subject objects to the processing and there are no overriding legitimate grounds for the processing,

- the personal data have been unlawfully processed,

- the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject,

- the personal data have been collected in relation to the offer of information society services referred to in Article 8(1) of the GDPR.

The right to erasure does not apply to the extent that processing is necessary:

- for exercising the right of freedom of expression and information,

- for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller,

- for reasons of public interest in the area of public health in accordance with points (h) and (i) of Article 9(2) as well as Article 9(3) of the GDPR,

- for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes.

- for the establishment, exercise or defence of legal claims.

Right to restriction of processing

The data subject shall have the right to obtain from the controller restriction of processing where one of the following applies:

- the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data,

- the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead,

- the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims,

- the data subject has objected to processing pursuant to Article 21(1) of the GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject.

Right to data portability

The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where:

- the processing is based on consent pursuant to point (a) of Article 6(1) or point (a) of Article 9(2) or on a contract pursuant to point (b) of Article 6(1) of the GDPR and

- the processing is carried out by automated means.

Right to object

The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is carried out by automated means.

Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing.

Where the data subject objects to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.

Right to withdraw consent

You may withdraw your consent at any time, in cases where you have already provided your consent for the processing of your personal data. However, this will not affect the lawfulness of any processing carried out before the withdrawal of your consent.

Right to lodge a complaint

You have the right to lodge a complaint with the Hellenic Data Protection Authority (postal address: 1-3 Kifissias Ave., 115 23 Athens, tel. 2106475600, email contact@dpa.gr), hyperlink www.dpa.gr, if you believe, for example, that the processing of personal data is unlawful, or if you believe that your personal data are being infringed in any way or are not secure.

Transfer of data to third countries

Our company does not transfer your data to third countries.

Transfer of data to third parties

The personal data we collect and process may be shared with the following third-party partners and service providers, who assist in the smooth operation and support of our service:

  • Partner courier companies for the delivery of your orders.
  • Technical support and website management providers.
  • Payment service providers for the secure processing of your financial transactions.
  • Data analytics, storage and security service providers, as well as social media platforms, to enhance our functionality and improve your experience.
  • Customer Relationship Management (CRM/ERP) services used for managing customer data and improving service.
  • Advertising service providers (e.g., Google).

All our third-party partners are committed to maintaining strict privacy policies and using your data exclusively for the purposes they have been entrusted with, in accordance with applicable personal data protection legislation.

Furthermore, your data may be disclosed to competent authorities upon their request and in accordance with legal requirements.

How long do we store Personal Data?

Your personal data are retained only for as long as is strictly necessary to fulfill the purposes for which they were collected, as well as to comply with any legal obligations. Specifically:

  • User account data: These data are retained as long as you remain an active registered user on our website. In case of account deletion, the relevant data are deleted as soon as possible.
  • Communication and service data: For the effective handling of your requests and inquiries, we retain your personal data for as long as required, and in any case no longer than one (1) year after the completion of the communication.
  • Product review data: Comments and reviews you provide are public and are retained until you request their deletion.
  • Loyalty Program participation data: The data collected are retained until you withdraw your consent and unsubscribe from the Loyalty Program and delete your account on our website.
  • Contest participation data: These data are retained for one (1) year after your entry. In case you were declared a winner and received a prize from your participation, your data are retained until the receipt of the prize and in any case no longer than five (5) years from the completion of the transaction.
  • Newsletter data: The data collected for sending newsletters are retained until you request your removal from the recipient list.
  • Sales contract data: Data required for the execution of the contract and the processing of your financial transactions are retained for the period required to fulfill our contractual obligations and to serve tax and accounting purposes, and in any case no longer than five (5) years after the completion of each transaction.

Upon expiry of the above time periods, or in the event that you request the deletion of your personal data and there is no pending legal case or legitimate interest, your data will be deleted as soon as possible, always complying with the requirements of applicable legislation. At the same time, we note that in certain cases, your personal data may be retained for a longer period if required by law or necessary for the exercise or defense of legal rights.

How we secure Personal Data

Taking into account the latest developments, the cost of implementation and the nature, scope, context and purposes of processing, as well as the risks of varying likelihood and severity for the rights and freedoms of natural persons resulting from the processing, our company effectively implements appropriate technical and organisational measures, both at the time of the determination of the means for processing and at the time of the processing itself, in such a way that legal requirements are met and the rights of data subjects are protected in accordance with our company's security policy.

Links to other websites

Our website may contain links or references to other third-party websites, as well as to our official social media accounts (e.g., Facebook, Instagram). This privacy policy does not cover the privacy policy of those websites, nor does it apply during your browsing and use of them. We recommend that you consult the respective privacy policies of Facebook and Instagram to be fully informed regarding the processing of your personal data while browsing and using those websites.

What happens when we change this privacy statement?

We may update this statement from time to time for any reason. We will inform you of any changes by posting the new statement here or, if the changes to the statement are material in relation to the information we collect from you, by posting a prominent notice on our website or, if necessary, by sending an email to the address you have provided before these changes take effect. If required, we will seek your consent.

Acceptance of the Privacy Policy

By browsing and using our websites, you unconditionally accept the terms of this Privacy Policy, which is an integral part of the Cookie Policy, the Terms of Use and Transactions of the websites https://tagtouch.gr and https://accounttagtouch.gr, the Gift Card Terms of Use, the Loyalty Program Terms of Use, the Terms of Participation in Promotional Activities and Contests, as well as the Returns, Delivery and Payment Policy.