Last updated: 8/3/2026

This Privacy Policy explains how Oilmania (“we”, “us”, “our”) collects, uses, stores and protects personal data when you visit oilmania.gr (the “Website”), contact us, create an account or purchase products through our online store.

We process personal data in accordance with applicable data-protection legislation, including Regulation (EU) 2016/679, the General Data Protection Regulation (“GDPR”), and applicable Greek data-protection legislation.

1. Who Is Responsible for Your Personal Data?

The data controller responsible for the processing of personal data through this Website is:

Business / Legal Name: [[[FULL LEGAL BUSINESS NAME]]]
Trading Name: [[[TRADING NAME / BRAND NAME]]]
Registered Address: [[[FULL BUSINESS ADDRESS]]]
Country: Greece
VAT Number (ΑΦΜ): [[[VAT NUMBER]]]
G.E.MI. Number (Γ.Ε.ΜΗ.), if applicable: [[[GEMI NUMBER]]]
Email: [[[PRIVACY / CUSTOMER SERVICE EMAIL]]]
Telephone: [[[BUSINESS PHONE NUMBER]]]
Website: [[[WEBSITE URL]]]

If you have any questions regarding this Privacy Policy or the processing of your personal data, you may contact us using the details above.

2. What Personal Data We Collect

The personal data we collect depends on how you interact with the Website.

We may collect the following categories of personal data.

Information You Provide When Placing an Order

When you purchase a product, we may collect:

  • first and last name;
  • billing address;
  • shipping address;
  • email address;
  • telephone number;
  • company name, where provided;
  • VAT or tax information, where required;
  • products ordered;
  • quantities ordered;
  • order value;
  • shipping method;
  • payment method;
  • payment status;
  • order notes that you choose to provide;
  • order history; and
  • information necessary for issuing receipts or invoices.

We collect this information in order to process and fulfil your order.

Payment Information

Payments are processed using:

[[[PAYMENT PROVIDER(S) – e.g. Viva.com, Stripe, PayPal, bank transfer, cash on delivery, etc.]]]

Where electronic payments are processed through a third-party payment provider, certain personal and transaction information may be transmitted to that provider in order to:

  • process the payment;
  • authenticate the transaction;
  • prevent fraud;
  • process refunds; and
  • comply with financial and legal obligations.

Where payment-card details are entered directly into the secure payment environment of the payment provider, we do not normally receive or store your complete payment-card number or card security code.

[[[CONFIRM THE ABOVE WITH THE ACTUAL PAYMENT GATEWAY BEFORE PUBLISHING.]]]

Payment providers process certain information in accordance with their own privacy policies and legal obligations.

Shipping and Delivery Information

To deliver your order, we may process and share information including:

  • your name;
  • shipping address;
  • postal code;
  • city or region;
  • telephone number;
  • email address, where necessary;
  • order or shipment reference number; and
  • other information reasonably required to complete delivery.

Our current shipping or courier provider(s) are:

[[[COURIER / SHIPPING PROVIDER(S)]]]

The relevant information is shared only where necessary to arrange, manage and complete delivery.

Contact Form and Communications

When you contact us through our contact form, email, telephone or another communication method, we may collect:

  • your name;
  • email address;
  • telephone number, where provided;
  • the contents of your message;
  • information concerning an order or product;
  • attachments that you voluntarily provide; and
  • any other information you choose to include in your communication.

We use this information to respond to your enquiry, provide customer service and resolve issues relating to our products or services.

Please avoid sending sensitive personal information through the contact form unless it is genuinely necessary.

Technical and Security Information

When you access the Website, certain technical information may be processed automatically by our Website, hosting infrastructure or security systems.

This may include:

  • IP address;
  • date and time of access;
  • browser type;
  • device type;
  • operating system;
  • requested pages or resources;
  • HTTP request information;
  • server and security logs; and
  • information required to identify or prevent malicious activity.

This information is processed where necessary for the operation, stability and security of the Website.

Cookies

The Website uses cookies and similar technologies, including cookies that are necessary for the operation of our WooCommerce online store.

Information about the cookies used by the Website is available in our Cookie Policy:

https://oilmania.gr/cookies-policy/

At present, we do not use cookies for behavioural advertising, remarketing or visitor profiling.

3. Why We Process Your Personal Data

We process personal data only where there is an appropriate legal basis for doing so.

The principal purposes and legal bases are described below.

Processing and Fulfilling Orders

We process information such as your name, contact details, billing information, delivery information and order details in order to:

  • receive and process your order;
  • receive or verify payment;
  • deliver the purchased products;
  • communicate with you about the order;
  • manage cancellations, withdrawals and returns;
  • issue refunds where applicable; and
  • provide customer service relating to your purchase.

The primary legal basis for this processing is that it is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.

Legal basis: Article 6(1)(b) GDPR.

Compliance With Legal Obligations

We may process and retain certain information where necessary to comply with legal obligations relating to:

  • accounting;
  • taxation;
  • invoices and receipts;
  • financial records;
  • consumer protection;
  • regulatory requirements; and
  • other obligations imposed by applicable law.

Legal basis: Article 6(1)(c) GDPR.

Customer Service and General Enquiries

Where you contact us regarding an existing or potential order, processing may be necessary for the performance of a contract or to take steps before entering into a contract.

For other general enquiries, we may process the information necessary to respond to your communication on the basis of our legitimate interest in communicating with customers, potential customers and Website visitors and operating our business effectively.

Legal basis: Article 6(1)(b) GDPR and/or Article 6(1)(f) GDPR, depending on the circumstances.

Website Security and Fraud Prevention

We may process technical information, logs, IP addresses and transaction-related information where necessary to:

  • protect the Website;
  • detect fraudulent transactions;
  • prevent unauthorised access;
  • investigate security incidents;
  • prevent abuse; and
  • maintain the integrity of our systems.

Legal basis: Article 6(1)(f) GDPR, based on our legitimate interest in protecting our Website, customers and business.

Establishing or Defending Legal Claims

Where necessary, we may retain or process relevant information for the establishment, exercise or defence of legal claims.

Legal basis: Article 6(1)(f) GDPR and, where applicable, Article 6(1)(c) GDPR.

4. Marketing Communications

At present, we do not use customer contact details collected through checkout or our contact form to send unrelated promotional newsletters or marketing communications unless the customer has separately requested or consented to receive them or another lawful basis applies.

Placing an order does not automatically subscribe a customer to marketing communications.

If marketing communications are introduced in the future and consent is required, customers will be provided with an appropriate method of providing and withdrawing that consent.

Transactional communications that are necessary for an order, such as order confirmations, shipping information, payment notifications and messages concerning returns or refunds, are not promotional newsletters and may be sent where necessary to fulfil the customer’s order.

5. Analytics and Advertising

At present, we do not use Google Analytics, Meta Pixel or similar technologies to profile Website visitors for analytics or advertising purposes.

We also do not currently use behavioural advertising or remarketing technologies to track visitors across unrelated websites.

If analytics, advertising or tracking technologies are introduced in the future, this Privacy Policy and our Cookie Policy will be updated as necessary and consent will be obtained where required by law.

6. Who We Share Personal Data With

We do not sell or rent customers’ personal data.

We may share personal data only where reasonably necessary for operating the Website, fulfilling orders, complying with the law or protecting our legitimate interests.

Recipients may include the following.

Website Hosting Provider

Our Website is hosted by:

Hostinger © (hostinger.com)

The hosting provider may process technical information and data stored by the Website as part of providing server, hosting, backup and security services.

Payment Providers

Payment and transaction information may be shared with:

[[[PAYMENT PROVIDER(S)]]]

only to the extent necessary for processing payments, authentication, fraud prevention, refunds and related services.

Courier and Delivery Providers

Delivery information may be shared with:

[[[COURIER / DELIVERY PROVIDER(S)]]]

to the extent necessary to fulfil and deliver your order.

Accounting and Tax Services

Relevant order, invoice and transaction information may be provided to:

[[[ACCOUNTANT / ACCOUNTING PROVIDER – OPTIONAL TO NAME SPECIFIC PROVIDER]]]

and to applicable tax or governmental systems where legally required.

Email Provider

Communications sent to or from us may be processed through our email service provider:

[[[EMAIL PROVIDER – e.g. Microsoft 365, Google Workspace, hosting email, etc.]]]

Website and Technical Service Providers

Authorised website administrators, developers, technical-support providers or IT service providers may have limited access to Website systems and personal data where that access is necessary to maintain, secure or support the Website.

Such access should be limited to what is reasonably necessary for the services provided and subject to appropriate confidentiality and data-protection obligations.

Public Authorities and Legal Requirements

We may disclose personal data to public authorities, courts, law-enforcement authorities, tax authorities, regulators or professional advisers where:

  • we are legally required to do so;
  • disclosure is necessary to comply with a lawful request;
  • it is necessary to establish, exercise or defend legal claims; or
  • disclosure is otherwise permitted or required by applicable law.

7. WooCommerce and WordPress

The Website is built using WordPress and WooCommerce.

WooCommerce is used to provide the ecommerce functionality necessary to manage products, customer orders, checkout and related store operations.

Personal data entered during checkout is stored within the Website’s ecommerce system and associated database as necessary to process and maintain orders.

The use of WordPress or WooCommerce does not by itself mean that all customer information is automatically sent to their respective developers.

However, additional plugins, extensions or connected services may transmit information to third parties depending on how they are configured.

We therefore assess the external services connected to the Website and disclose relevant data sharing in this Privacy Policy where appropriate.

8. How Long We Keep Personal Data

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and to comply with applicable legal obligations.

Different categories of information may therefore have different retention periods.

Order and Transaction Records

Information relating to completed purchases, invoices, receipts and financial transactions may be retained for the period required by applicable Greek accounting, taxation, consumer-protection and other legal obligations.

Relevant records may also be retained for an appropriate period where necessary for the establishment, exercise or defence of legal claims.

Once information is no longer required, it may be deleted or anonymised where appropriate.

Failed, Cancelled and Pending Orders

Information associated with unsuccessful, cancelled or incomplete orders will be retained only for a reasonable period necessary to manage those orders, prevent fraud, troubleshoot payment or technical issues and maintain appropriate business records.

Where appropriate, WooCommerce’s personal-data retention settings may be used to automatically remove or anonymise this information after the configured retention period.

Customer Accounts

Where customer accounts are enabled, account information may be retained while the account remains active and for a reasonable period afterwards where necessary for legal, security or administrative purposes.

Customers may request deletion of their account information, subject to information that we are legally required or otherwise lawfully permitted to retain.

Contact Form and Customer-Service Communications

General enquiries and customer-service communications are retained only for as long as reasonably necessary to respond to and resolve the matter.

Communications may be retained for longer where they relate to:

  • an order;
  • a complaint;
  • a refund;
  • a dispute;
  • a legal obligation; or
  • a potential legal claim.

Server and Security Logs

Technical and security logs are retained only for a reasonable period necessary for Website operation, troubleshooting, security and fraud prevention, subject to the practices of our hosting and technical providers.

We periodically review whether personal information continues to be necessary and delete or anonymise information where appropriate and legally permitted.

9. International Transfers of Personal Data

Some of our service providers may process personal data outside Greece or outside the European Economic Area (“EEA”).

Where personal data is transferred to a country outside the EEA that has not been recognised as providing an adequate level of data protection, appropriate safeguards will be used where required by applicable law.

These safeguards may include:

  • an adequacy decision adopted by the European Commission;
  • Standard Contractual Clauses approved by the European Commission; or
  • another legally recognised transfer mechanism.

[[[IF ALL RELEVANT PROVIDERS PROCESS DATA EXCLUSIVELY WITHIN THE EEA, THIS SECTION CAN BE SIMPLIFIED AFTER CONFIRMING WITH THE PROVIDERS.]]]

10. Security of Personal Data

We take reasonable technical and organisational measures designed to protect personal data against:

  • unauthorised access;
  • accidental loss;
  • alteration;
  • disclosure;
  • destruction; and
  • misuse.

These measures may include secure HTTPS connections, access controls, authentication mechanisms, software updates, backups and security measures provided by our hosting and technology providers.

Access to personal data is limited to persons who reasonably require access for business, technical, accounting, order-fulfilment or legal purposes.

However, no website, internet transmission or electronic storage system can be guaranteed to be completely secure.

11. Your Rights Under the GDPR

Depending on the circumstances, you may have the following rights in relation to your personal data.

Right of Access

You may request information about whether we process personal data concerning you and request access to that information.

Right to Rectification

You may ask us to correct inaccurate personal data or complete information that is incomplete.

Right to Erasure

You may request deletion of your personal data in circumstances where the GDPR provides this right.

The right to erasure is not absolute. We may need to retain certain information where processing is required to comply with a legal obligation or where another lawful exception applies.

For example, we may be legally required to retain certain invoice or transaction records even after an account-deletion request.

Right to Restriction of Processing

You may request restriction of the processing of your personal data in circumstances provided by the GDPR.

Right to Data Portability

Where the relevant legal requirements are satisfied, you may request personal data that you provided to us in a structured, commonly used and machine-readable format and may have the right to transmit that information to another controller.

Right to Object

Where we process your personal data on the basis of legitimate interests, you may have the right to object to that processing based on your particular situation.

You have the right to object at any time to the processing of personal data for direct-marketing purposes.

Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

12. How to Exercise Your Rights

To exercise any applicable data-protection right, please contact us at:

Email: [[[PRIVACY / CUSTOMER SERVICE EMAIL]]]

or:

Postal Address:
[[[FULL BUSINESS ADDRESS]]]
Greece

Please provide sufficient information to allow us to identify you and understand your request.

We may request reasonable additional information where necessary to verify your identity before providing access to or modifying personal data.

Requests are handled in accordance with the time limits and requirements established by the GDPR.

Exercising your data-protection rights is generally free of charge. However, the GDPR permits a reasonable fee or refusal in certain cases involving manifestly unfounded or excessive requests.

13. Right to Lodge a Complaint

If you believe that your personal data has been processed in violation of applicable data-protection law, you have the right to lodge a complaint with a competent supervisory authority.

For businesses established in Greece, the relevant supervisory authority is:

Hellenic Data Protection Authority
(Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα)

1–3 Kifisias Street
115 23 Athens
Greece

You may also contact us first at [[[PRIVACY / CUSTOMER SERVICE EMAIL]]] so that we have the opportunity to address your concern.

Contacting us first does not affect your right to lodge a complaint with a competent supervisory authority.

14. Information Concerning Other People

If you provide us with personal information concerning another person—for example, when ordering a product to be delivered to another recipient—you should provide only information reasonably necessary to complete the order.

We will use the recipient’s information for purposes such as preparing and delivering the order and communicating regarding delivery where necessary.

You should ensure that you are entitled to provide the relevant information to us.

15. Children’s Privacy

Our Website and online store are intended for general consumers and are not specifically directed at children.

We do not knowingly request personal data from children where such information is not necessary for a legitimate transaction or service.

If you believe that personal data relating to a child has been provided to us inappropriately, please contact us at [[[PRIVACY / CUSTOMER SERVICE EMAIL]]].

16. External Links

The Website may contain links to websites or services operated by third parties.

We are not responsible for the privacy practices of independently operated third-party websites.

If you follow a link to another website, you should review the privacy information provided by that website.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including when:

  • our Website or ecommerce functionality changes;
  • we introduce new service providers;
  • payment or delivery providers change;
  • analytics, marketing or advertising technologies are introduced;
  • our data-processing practices change; or
  • applicable legal requirements change.

The most recent version will be published on this page together with the date on which it was last updated.

Where a change materially affects how we process personal data and applicable law requires additional notice or consent, we will take the appropriate steps.

18. Contact Us

For questions about this Privacy Policy, the processing of your personal data or the exercise of your data-protection rights, please contact:

[[[FULL LEGAL BUSINESS NAME]]]
[[[FULL BUSINESS ADDRESS]]]
Greece

VAT Number (ΑΦΜ): [[[VAT NUMBER]]]
G.E.MI. Number (Γ.Ε.ΜΗ.), if applicable: [[[GEMI NUMBER]]]
Email: [[[PRIVACY / CUSTOMER SERVICE EMAIL]]]
Telephone: [[[BUSINESS PHONE NUMBER]]]
Website: [[[WEBSITE URL]]]

For information concerning cookies and similar technologies used by the Website, please see our Cookie Policy:

https://oilmania.gr/cookies-policy/