Privacy Policy

Last updated: 26 August 2026

1. Who we are

ERYCANDLES A.E. (“ERYCANDLES”, “we”, “us”) operates the B2B website b2b.erycandles.gr and is the controller of the personal data described in this notice.

Address: Volou 3, 18346 Moschato, Attica, Greece

Telephone: +30 210 9270981

Email: info@erycandles.gr

2. Scope of this policy

This policy applies to visitors to our website, wholesale customers, prospective customers and the representatives or contact persons of companies and other professional customers. The B2B store is intended for business use and is not directed to children.

3. Personal data we may collect

Depending on how you interact with us, we may collect:

• identity and business information, such as your name, company name, professional role, VAT or tax details and account credentials;

• contact and billing information, such as email address, telephone number, billing address and delivery address;

• order and transaction information, including products, quantities, prices, invoices, payment status, delivery instructions, returns and claims;

• communications you send to us through forms, email, telephone or product enquiries;

• technical and usage information, such as IP address, device and browser information, log data, pages viewed and cookie preferences;

• any other information you choose to provide when requesting a quotation, custom product or private-label project.

Payment transactions may also be processed directly by payment service providers, banks or IRIS. Their own privacy terms may apply to that processing.

4. How we obtain personal data

We normally collect personal data directly from you when you create or use an account, place an order, contact us, subscribe to communications or use the website. We may also receive necessary information from the company you represent, payment providers, banks, transport providers or other parties involved in fulfilling your order.

5. Why we process personal data and our legal bases

We process personal data only where we have an appropriate legal basis, including:

• to take steps at your request and perform a contract, such as creating an account, assessing an order, processing payment, issuing documents, arranging collection or delivery and providing customer support;

• to comply with legal obligations, including accounting, tax, invoicing and regulatory requirements;

• for our legitimate interests, such as operating and securing the website, preventing fraud, managing customer relationships, improving our products and services, establishing or defending legal claims and maintaining business records;

• with your consent, where required, for optional marketing communications or non-essential cookies and similar technologies.

Where we rely on legitimate interests, we consider the impact on the individuals concerned and do not use that basis where their rights and interests override ours.

6. Who may receive personal data

We may share only the data necessary for the relevant purpose with:

• hosting, e-commerce platform, IT support, security and website service providers;

• payment service providers, banks and financial institutions;

• couriers, freight transport agencies and other delivery providers;

• accountants, auditors, legal advisers, insurers and professional consultants;

• public authorities, courts or regulators where disclosure is required by law or necessary to protect legal rights;

• a successor or purchaser in connection with a lawful corporate transaction, subject to appropriate confidentiality and data-protection safeguards.

Service providers acting on our behalf are expected to process personal data only under appropriate instructions and safeguards.

7. International transfers

Some service providers may process data outside the European Economic Area. Where the GDPR requires safeguards for such a transfer, we seek to use an applicable lawful transfer mechanism and appropriate contractual or organisational protections.

8. How long we keep data

We retain personal data only for as long as necessary for the purpose for which it was collected. The period depends on the customer relationship, account activity, order fulfilment, warranty or claim handling, and the periods required by accounting, tax and other applicable laws. We may keep limited information for longer where necessary to establish, exercise or defend legal claims. Data based solely on consent is deleted or no longer used for that purpose after consent is withdrawn, unless another lawful basis requires retention.

9. Security

We use appropriate technical and organisational measures intended to protect personal data against unauthorised access, alteration, disclosure, accidental loss or destruction. No online system is completely risk-free, and customers are responsible for keeping their account credentials confidential and notifying us if they suspect unauthorised use.

10. Your data-protection rights

Subject to the conditions and limits of applicable law, you may request access to your personal data, correction of inaccurate data, deletion, restriction of processing, data portability or object to processing based on legitimate interests. You may object at any time to direct marketing. Where processing is based on consent, you may withdraw consent at any time without affecting processing carried out before withdrawal.

To exercise a right, contact info@erycandles.gr. We may ask for information necessary to verify your identity and protect your data. You also have the right to lodge a complaint with the Hellenic Data Protection Authority at www.dpa.gr.

11. Cookies and analytics

The website uses cookies and similar technologies for essential functions and may use analytics or other optional technologies. Where consent is required, non-essential technologies are used according to the choices available through the cookie banner or preference controls. You can change your browser settings or the available cookie preferences, although disabling essential cookies may affect website functions.

12. Marketing communications

If you request or consent to marketing communications, we may use your contact details for that purpose. You can withdraw your consent or unsubscribe at any time. Service messages relating to an account, quotation or order are not marketing communications.

13. Third-party links

Our website may contain links to third-party websites or services. Those parties are responsible for their own privacy practices, and we recommend reviewing their notices before providing personal data.

14. Changes to this policy

We may update this policy when our practices, services or legal obligations change. The current version and its update date will be published on this page.

15. Contact

For privacy questions or requests, contact ERYCANDLES A.E. at info@erycandles.gr or +30 210 9270981.