Last updated: 7 September 2026
1. Introduction
“MERKOUROGLOU P.C.” respects the privacy of visitors and registered users of www.merkouroglou.gr and processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), Greek Law 4624/2019 and other applicable legislation.
2. Data controller
The data controller is:
MERKOUROGLOU P.C. (ΜΕΡΚΟΥΡΟΓΛΟΥ ΙΚΕ)
Greek Tax Identification Number: 801034802
100 NATO Avenue, P.C. 19300, Aspropyrgos, Attica, Greece
Telephone: +30 210 3211494, +30 210 5596700
Email: This email address is being protected from spambots. You need JavaScript enabled to view it.
3. Who this policy applies to
This policy applies to website visitors, business users who create an account to access the online catalogue and product prices, people who contact the company and newsletter subscribers.
4. Personal data we collect
Depending on how you use the website, we may collect:
- Account information: name, username, email address and encrypted password.
- Business information: business name, Greek tax identification number, city, country, postal code, telephone number and, optionally, website address.
- Communication data: the details and content you provide when communicating with us.
- Newsletter data: email address, subscription or unsubscribe status and time, and technical information required to demonstrate consent.
- Technical data: IP address, device and browser type, operating system, access date and time, referring address, pages viewed and security logs.
- Cookie and analytics data: only in accordance with your consent choices, as described in our Cookie Policy.
The website has no shopping cart or online order form. A registered account only provides access to the catalogue and product prices.
5. Purposes and legal bases
- Account creation and administration: to provide access to the professional catalogue and prices. The legal basis is performance of a contract or steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).
- Verification of professional status and catalogue protection: based on our legitimate interest in making commercial information and prices available only to authorised business users (Article 6(1)(f) GDPR).
- Responding to communications and requests: to handle enquiries, on the basis of pre-contractual steps or our legitimate interest in effective communication.
- Newsletter delivery: only with your consent (Article 6(1)(a) GDPR). You may withdraw it at any time through the unsubscribe link or by contacting us.
- Analytics through Google Analytics: only if you accept analytics cookies. The legal basis is your consent.
- Security and technical operation: to prevent abuse, troubleshoot errors and protect systems and accounts, based on our legitimate interests and, where applicable, compliance with legal obligations.
- Legal compliance: where processing is necessary for tax, accounting, legal or other statutory obligations (Article 6(1)(c) GDPR).
6. Newsletter and AcyMailing
Our newsletter is managed through AcyMailing. Subscription data is used solely to send updates and manage your preferences. Every newsletter includes an unsubscribe option. Withdrawal of consent does not affect the lawfulness of processing performed before withdrawal.
7. Google Analytics and Google Search Console
With your consent, we use Google Analytics to understand how the website is used and to improve its operation and content. Google Analytics may collect technical data and identifiers through cookies. Further information is provided in our Cookie Policy.
We also use Google Search Console for aggregated reports about the website’s performance in search results. Search Console does not itself place cookies on the devices of website visitors.
8. Recipients and processors
Data may be accessed only by authorised company personnel and, to the extent necessary, by hosting, technical support, security, email/newsletter and analytics service providers. Providers act under appropriate contractual and organisational safeguards. Data may also be disclosed to public authorities, courts or advisers where required by law or necessary for the establishment, exercise or defence of legal claims. We do not sell personal data.
9. Transfers outside the European Economic Area
The use of Google services may involve processing outside the European Economic Area. Where such a transfer occurs, the safeguards required by law are applied, such as an adequacy decision or the European Commission’s Standard Contractual Clauses, together with appropriate supplementary measures where required.
10. Retention
We retain personal data only for as long as necessary for the purpose for which it was collected and to comply with legal obligations:
- Account data is retained while the account remains active and for a reasonable period after deactivation where needed for security, dispute resolution or legal obligations.
- Newsletter data is retained until consent is withdrawn or the user unsubscribes. A minimal suppression record may be retained to ensure that messages are not sent again without consent.
- Communications and technical logs are retained for as long as necessary for support, security and the establishment, exercise or defence of legal claims.
- Cookies are retained for the periods stated in the Cookie Policy.
At the end of the applicable retention period, data is securely erased or anonymised.
11. Security
We apply technical and organisational measures appropriate to the nature and risk of the processing, such as access controls, encrypted connections, password protection, software updates, backups and event logging. No transmission or storage method can guarantee absolute security.
12. Your rights
Subject to the conditions of the GDPR, you have the rights to information, access, rectification, erasure, restriction of processing, data portability, objection to processing based on legitimate interests, and withdrawal of consent. You also have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects. The website does not use such automated decision-making.
To exercise a right, contact This email address is being protected from spambots. You need JavaScript enabled to view it.. We may request reasonable information to verify your identity. We will respond within the time limits set by the GDPR.
13. Right to lodge a complaint
If you believe that the processing of your data infringes the law, you may lodge a complaint with the Hellenic Data Protection Authority at www.dpa.gr/en. You may also contact the supervisory authority of your habitual residence, place of work or place of the alleged infringement.
14. Third-party links
The website may contain links to third-party websites. We are not responsible for their privacy practices and recommend that you review their respective policies.
15. Changes to this policy
This policy may be updated to reflect changes to our services or the law. The latest version will be posted on the website together with its last-updated date.
16. Contact
For questions about this policy or the processing of personal data, contact MERKOUROGLOU P.C. at This email address is being protected from spambots. You need JavaScript enabled to view it..
