Privacy Policy

1. Data controller

The controller of your personal data is:

Company

K.BENEKOS A.ARLETOS G.P. (trading as A&M Pallet)

Reg. No. (GEMI)

167972629000

Registered office

9th km Ioannina - Athens National Road, Ioannina, Greece

Email

info@ampallet.gr

Telephone

26512 10150 (Ioannina) · 26616 01384 (Corfu)

For any matter concerning your personal data, please contact us at info@ampallet.gr.

2. What data we collect

Our website has no contact form, no sign-up form, no user accounts and no online shop. We neither ask for nor collect personal data through its pages.

We collect data only when you contact us, or when we go on to do business together:

• Contact details you give us — name, company name, phone number, email address, delivery address — when you call or email us.
• The content of our correspondence — the enquiry, quote or order we discuss with you.
• Invoicing details — company name, VAT number, tax office, registered address and business activity, when an invoice is issued.
• Server log data — IP address, date and time, the page requested and browser type. These are recorded automatically by our hosting provider for security and operational purposes, without any action on our part.

We do not process special categories of data (such as health data or beliefs) and we never ask you to send us such information.

3. Purposes and legal basis for processing

Answering enquiries and preparing quotes

Article 6(1)(b) GDPR — steps taken at your request prior to entering into a contract.

Fulfilling orders, buying or selling pallets, delivery

Article 6(1)(b) GDPR — performance of a contract.

Invoicing and keeping accounting/tax records

Article 6(1)(c) GDPR — compliance with a legal obligation.

Security, stability and protection of the website against abuse

Article 6(1)(f) GDPR — our legitimate interest in protecting our infrastructure.

We do not use your data for automated decision-making or profiling, nor do we send marketing messages without your explicit consent.

4. Who has access to your data

We do not sell, rent or trade personal data. Access, and only as far as necessary, may be given to:

• our staff who handle orders and correspondence;
• our accountant, for issuing invoices and meeting our tax obligations;
• our website hosting provider, in respect of server log data;
• transport companies, limited to the details required for delivery;
• public authorities, where required by law or court order.

Anyone processing data on our behalf is contractually bound to use it solely for the purpose assigned to them and to keep it confidential.

5. Transfers outside the European Economic Area

As a rule, your data is kept within the EU/EEA. The website embeds Google Maps in its contact section; when the map loads, Google may process technical data outside the EEA on the basis of the European Commission’s Standard Contractual Clauses. See our cookie information for details.

6. How long we keep your data

Correspondence that did not lead to business

up to 12 months from our last contact.

Details of active customers and suppliers

for as long as our working relationship lasts, and a reasonable period thereafter.

Invoices and accounting records

for as long as tax law requires — a minimum of five (5) years.

Server logs

in line with our hosting provider’s policy, typically a few months.

Once these periods expire, the data is deleted or anonymised.

7. Your rights

As a data subject you have the right to:

• access the data we hold about you and obtain a copy of it;
• have inaccurate data corrected and incomplete data completed;
• erasure (the "right to be forgotten"), where no lawful ground for keeping it remains;
• restrict processing;
• data portability — to receive your data in a structured, commonly used format;
• object to processing based on our legitimate interest;
• withdraw your consent at any time where processing is based on it, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of the above, email us at info@ampallet.gr. We reply within one (1) month of receiving your request; this may be extended by a further two months for complex requests, in which case we will let you know. Exercising your rights is free of charge.

8. Right to lodge a complaint

If you believe the processing of your data breaches the law, you have the right to lodge a complaint with the supervisory authority:

Hellenic Data Protection Authority

1-3 Kifisias Ave., 115 23 Athens, Greece · tel. +30 210 6475600 · www.dpa.gr

9. Data security

We take reasonable technical and organisational measures to protect your data: an encrypted connection (HTTPS) across the whole site, access to our records limited to those who need it for their work, and regular updates to the software we use. No method of transmission or storage is completely secure, but we are committed to acting promptly in the event of an incident and to notifying you where the law requires it.

10. Children

Our website and services are aimed at businesses and adults. We do not knowingly collect data from children under 16. If we find that we have received such data, we delete it.

11. Changes to this policy

We may update this policy to reflect changes in how we operate or in the law. The version in force is always the one on this page, with the last-updated date shown at the top. We suggest you check it from time to time.