Privacy policy

Purpose of this Notice

Terracarpet collects and further processes personal data of natural persons in accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter "GDPR") and Law 4624/2019, as applicable.

The purpose of this information note is to inform users of this Website about the processing of their personal data.

1. Definitions

For the purposes of understanding this document, the following terms have the following meanings:

• "Personal Data": any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
• " Special categories of personal data": personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation.
• "Processing": any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adapting or altering, retrieving, consulting, using, disclosing by transmission, disseminating or otherwise making available, aligning or combining, restricting, erasing or destroying.
• "Controller": the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, or the specific criteria for its appointment may be laid down by Union or Member State law.
• "Processor": a natural or legal person, public authority, agency, or other body that processes personal data on behalf of the controller.
• "Data subject": the natural person whose personal data are being processed, e.g. customers, service users, etc.
• "Existing Legislation": The applicable national and EU legislation on personal data protection, specifically the General Data Protection Regulation (EU) 2016/679 (hereinafter "GDPR"), Law 4624/2019, Law 3671/2006, the case law of the Court of Justice of the European Union (hereinafter "CJEU"), as well as the Decisions, Guidelines and Opinions of the European Data Protection Board (hereinafter referred to as "EDPB") and the Hellenic Data Protection Authority (hereinafter referred to as "HDPA").

2. Personal Data

Personal Data collected and further processed by Terracarpet through its website www.terracarpet.gr (hereinafter referred to as the "Website"):

2.1. Data we collect automatically through the use of the Website:

When you use this Website, we collect information automatically, some of which may constitute personal data. This includes stuff like language settings, IP address, location, device settings, device operating system, activity data, time of use, referrer URL, status report, user information (information about your browser version), operating system, browsing outcome (simple visitor or registered customer), browsing history, type of data you viewed. We may also collect data through cookies.

For more information on the use of cookies, please refer to Terracarpet's Cookie Policy for this Website.

2.2. Redirection to Third Party/Organization Websites – Disclaimer for Third Party Websites

The Website contains links that redirect users to Third Party/Organization websites. Terracarpet does not control and is not responsible for the content posted on these websites or on further links that appear on them, nor for the way in which they process personal data.

3. Recipients

In order to achieve the processing purposes mentioned above, authorized personnel of Terracarpet have access to the personal data processed for the above purposes.

Furthermore, in order to achieve the processing purposes mentioned above, third parties (Processors) also have access to personal data, who are contractually bound by Terracarpet to ensure confidentiality and compliance with all obligations under the GDPR.

4. Transfer of Personal Data outside the EEA

Personal data processed for the above purposes is not transferred to a third country or international organization.

5. Data Retention Period

The personal data of data subjects is collected and retained for a predetermined and limited period of time, depending on the purpose of the processing, after which the data is deleted from Terracarpet's records. When processing is required by provisions of the applicable legal framework or a specific retention period is provided for, personal data will be stored for as long as required by the relevant provisions.

In the event of a contract being concluded, the personal data of the subjects shall be kept for as long as necessary for the performance of the contract and until the expiry of the limitation periods from the termination of the contract in any way.

The above periods are extended in the event of a dispute, exercise, establishment, and/or support of legal claims and, in general, legal actions until the issuance of a final court decision or other definitive resolution of the dispute.

6. Personal data security

To prevent unauthorized access, maintain data accuracy, and ensure the appropriate use of data subjects' personal data, Terracarpet takes reasonable measures to protect personal data in compliance with its obligations under Applicable Law. However, it should be noted that no method of transmission over the Internet or method of electronic storage is 100% secure. Nevertheless, all necessary digital data security measures (antivirus, firewall) are taken.

7. Automated decision-making

Terracarpet informs you that no automated decision-making processes, including profiling, are carried out.

8. Rights of Data Subjects

Terracarpet ensures that it is able to respond promptly to requests from data subjects to exercise their rights in accordance with current personal data protection legislation. In particular, each data subject has the following rights:

• To request access to their personal data.
• To request the correction of their personal data.
• To request the deletion of their personal data.
• To request restriction of the processing of their personal data.
• To request the portability/transfer of their personal data to the Data Subject themselves and/or to third parties. This right can only be exercised in the case of automated processing.
• To withdraw their consent at any time for the processing of their personal data where this was required. In this case, however, it does not affect the lawfulness of any processing carried out prior to the withdrawal of the data subject's consent.

Furthermore, each data subject has the right to object to the processing of personal data based on the public or legitimate interest of the controller or the legitimate interest of a third party at any time.

In the event that any of the above rights are exercised, Terracarpet will respond immediately in each case within thirty (30) days of the request being submitted, informing you in writing of the progress made in satisfying it.

For any complaints you may have regarding this notice or personal data protection issues, if we do not satisfy your request, you can contact the Hellenic Data Protection Authority via the following link: www.dpa.gr.

9. Data Protection Officer (DPO) Details

To exercise all of the above rights, as well as for any issue concerning the processing of your personal data by Terracarpet, you can contact the Data Protection Officer of the organization at info@terracarpet.gr.

February 2026