Privacy Policy

Each time you use the website www.biorganic-natural.gr and its online store, you are bound by the applicable Privacy Policy. Therefore, you should carefully read this text each time you use the website and ensure that you accept it. If you do not agree with the terms, you should not use our website.

We place special emphasis on the secure provision of our services and fully respect the privacy and confidentiality of your personal data. For this reason, we have invested time and resources to fully comply with the applicable national, European, and international legal framework, and in particular with the European Union's General Data Protection Regulation (GDPR) 679/2016, which came into effect in May 2018.

If you have any questions or concerns regarding the handling of your personal data, you can contact us by email at biorganic.natural@gmail.com or by phone at +30 2310 318070.

1.Introduction.

1.1. Privacy Protection. This Privacy Policy explains how and why Biorganic collects, processes, discloses, and protects the information it obtains when you visit the website or its online store.

1.2.Application of the Privacy Policy. The Privacy Policy applies to all individuals from whom, or for whose benefit, we collect information.

 1.3.Website Not Directed to Minors. Our website and online store are not intended for children or minors. If personal data of individuals under 18 years of age are processed without valid parental or legal guardian consent, we reserve the right to delete the data we have obtained.

2.Data Controller

The data controller is Boena Mevorah, who operates a sole proprietorship under the trade name 'BIORGANIC' (hereinafter 'Biorganic'), based in Greece, specifically in Thessaloniki, at 11 Georgiou Seferi Street, Postal Code 54250, with VAT number 145984609 – Tax Office Z’ Thessaloniki, contact phone +30 2310 318070, email: biorganic.natural@gmail.com.

3.Personal Data

3.1. Meaning.

3.1.1.Personal Data refers to any information relating to an identified or identifiable natural person. An identifiable natural person is one whose identity can be determined directly or indirectly, in particular by reference to an identification element such as name, address, identity number, credit card number, bank account information, social security number, or driver’s license number, location data, online identifier such as an IP address (Internet Protocol), or to one or more factors specific to the physical, physiological, genetic, psychological, economic, cultural, or social identity of that natural person.

3.1.2.Personal data does not include any information that, on its own, cannot identify you as a specific individual or entity (e.g., anonymized information), as well as data collected for statistical purposes.

3.2. Processing.

3.2.1.When you register on our website, we collect the information you provide, specifically your email address and password.

3.2.2.When you make a purchase through our online store, we collect the information you provide, including your first name, last name, country, address, city, postal code, email address, and phone number.

3.2.3.Any personal data you may provide anywhere on the pages of our website are subject to processing and are stored in a file under the responsibility of Biorganic, exclusively and solely for purposes concerning: a) the development, execution, and operation of the website, or the fulfillment of obligations arising from the purchase agreement for the products you have bought or any other agreements concluded between you and the data controller; b) the handling of your requests; c) providing, with your consent, information regarding the data controller’s products and services, which includes sending commercial correspondence via email or other equivalent electronic means (such as SMS); and d) generally improving the services provided by the data controller. Your personal data must not be used by any third party, except in cases provided by law and this policy.

3.2.4. If you have purchased a product, any personal data of a third party that you may have provided to us will be used for managing the delivery and/or verifying the correct delivery of the respective product, as well as for responding to any inquiries or servicing requests that either you or the third party may make.

3.2.5.We collect and process information that is considered personal data as well as other information that is not. Information that cannot identify you as a specific individual is used without restrictions and may be shared with third parties at our discretion.

3.2.6.When browsing the website, we do not collect or process sensitive personal data, such as health data, genetic or biometric data, data revealing sexual life, sexual orientation, racial or ethnic origin, political beliefs, religious or philosophical views, or membership in a trade union.

3.2.7.When you send a message through the contact form, we collect the information you provide, including your full name, phone number, and email address.

3.2.8.If you own a business and are interested in B2B cooperation (wholesale), when you send a message through the relevant contact form, we collect the information you provide, including your full name, phone number, email address, and VAT number.

3.2.9.The IP address (Internet Protocol) is not collected. An IP address is a number assigned to your computer when you use the Internet. No information about your actual location is collected.

3.2.10.Unless required by law, we will not obtain your consent before collecting your personal data from third parties. Instead, it will be assumed that you have previously given such consent to any third party from whom we obtain such information.

3.2.11.If you wish, we can use the personal data you provide when using our website to inform you via email about products that may interest you, special offers and discounts, and other announcements.

3.2.12.Only our authorized employees have access to your transaction information, and only when necessary, for example, to process your orders. In cases where we use third parties to support our systems, we ensure the confidentiality of your data.

3.2.13.We make reasonable efforts to process your personal data in accordance with the terms of this Privacy Policy and the Terms of Use.

3.3. Sharing.

• We do not share, disclose, or sell your personal data to others, except in cases described in this Privacy Policy and the Terms of Use.
• We may provide personal data to other parties in the following cases: a) you have given your explicit consent by clicking the relevant 'I Accept' box, b) disclosure is necessary to complete a requested service/transaction, c) we have received information from third parties (provided that you previously gave such consent to any third party from whom the data controller obtains such information), d) required by law, by court order, or at the request of any other competent governmental, judicial, police, administrative, or regulatory authority, pursuant to a lawful request and in accordance with applicable laws, e) necessary to protect our rights, f) the website is used in a manner that violates the Terms of Use or for purposes other than those specifically intended, or g) the terms of this Privacy Policy and/or the Terms of Use allow or provide for such disclosure.
• Third party services. In order to provide, improve, promote, and protect our services, we may need to use third-party services. These third parties may have access to, process, or store information solely to perform tasks for the purposes we have authorized, and we require them to provide at least the same level of data security as we do, as described in this Privacy Policy. Personal data may be disclosed to financial institutions or third-party service providers who assist in our business operations, always under conditions that fully ensure your personal information is not subject to any unlawful processing. For example, we may share data with:
• Mailchimp: For sending technical emails or newsletters, we use the mailing services provided by Mailchimp. You can withdraw your consent by unsubscribing from the newsletter. An unsubscribe link is included in every email/newsletter. For Mailchimp’s Privacy Policy, see: https://mailchimp.com/legal/privacy/.
• Goals.The personal data we process will be used exclusively for the specific, explicit, legitimate purposes explained to you above and not in a manner incompatible with them. Furthermore, the collection of data is limited only to what is adequate, relevant, and necessary for these purposes.
• Retention period. We retain your personal data and other information for a period of five (5) years from the completion of each transaction through our website. Exceptionally, personal data necessary for the invoicing of our products are retained for a period of ten (10) years due to applicable tax legislation. When we no longer need your personal data, we will destroy, delete, or anonymize the information without prior notice to you.

4.Security.

• We take the issue of protecting your anonymity and personal information very seriously. Your personal data and, more generally, the information collected about you are protected with appropriate, commercially reasonable safeguards and security measures in accordance with the most modern and advanced technological methods. These measures include commercially reasonable technical and procedural steps to protect your data from misuse, unauthorized access or disclosure, loss, alteration, or destruction.
• To prevent unauthorized access, promote data security, and encourage proper use of information, we and our providers use various tools (e.g., encryption technologies, passwords, physical and electronic security). However, 'absolute security' does not exist on the Internet or in data transmissions; therefore, we do not provide any guarantees. Third parties may illegally monitor or gain access to transmissions or private communications, and you should not expect that your personal data will remain completely private.
• Access to our website is controlled by a firewall, which allows customers/users to use certain services while preventing third parties from accessing systems and databases containing confidential data and information.
• The website uses the HTTPS (TLS) protocol.
• Your personal data are stored on an encrypted server with security protocols (SSL) and are accessible only by the data controller, and only when necessary, for example, to manage your requests.
• For security reasons, we do not disclose all of our security measures. Rest assured that we use commercially reasonable industry standards to protect your information.
• For your own security, you should handle all information you provide to us as confidential and personal, and not disclose it to third parties. Additionally, it is your sole responsibility to restrict or prevent access to your computer and browser.

5.Cookies.

• Cookies are used to collect information solely for the purposes described in this Policy.
• What are cookies; Cookies are pieces of information, in the form of very small alphanumeric text, stored on your computer with your consent, helping to ensure the more effective functioning of our website. Cookies in no way cause damage to users' computers or to the files stored on them.
• Opt-out option.Most web browsers automatically accept and collect cookies. However, you can adjust your browser settings so that it accepts all cookies, rejects all cookies, or notifies you when a cookie is set. Depending on your web browser’s security settings, you may have the option to reject all cookies. If you reject all cookies, you may not be able to use the website.
• More information on how to modify your browser settings or how to block or manage cookies can be found on the website https://www.allaboutcookies.org/ .
• Which cookies we use and why? For statistical purposes, we use Google Analytics cookies to understand how users visit and navigate our website and to identify areas that require improvement, such as navigation. The data collected are processed in a way that does not allow user identification (anonymized IP address). Google Inc. discloses this information to third parties only to the extent required by law. To opt out of Google Analytics, please visit the Google Analytics Opt-out Browser Add-on.
• For secure navigation on the website, we comply with European Directive 2002/58/EC on the protection of personal data and privacy in the electronic communications sector, as amended by European Directive 2009/136/EC.
• Your prior consent is required for the use of cookies. The only exception to this rule is cookies that serve the functional needs of the website (functional cookies) and are necessary for the display and effective operation of the website on your computer. By accepting the Terms of Use and this Policy, you are deemed to have consented to the use of cookies as described above.

6.Consent.

• We may obtain personal information about you from various sources or through different methods. For each source or method, the manner of obtaining consent may differ.
• By using our services and/or accessing our website, we assume that you have read the Terms of Use as well as the Privacy Policy. Furthermore, by providing information—whether it constitutes personal data or not—you declare that it is true and accurate and you explicitly consent, by clicking the relevant 'I Accept' boxes, to disclose and process it for the purposes stated, unless you expressly inform us that you no longer wish your information to be used. Your consent to this access/disclosure includes cases where, for the effective provision of services, providers may be located in the United States of America or other countries or regions outside the European Economic Area.
• In the event that you provide us with personal data of a third party, you are responsible for informing that person about the use of their data and for obtaining their explicit consent for the information to be provided for the purposes explained above. In any case, the Privacy Policy applies to any information obtained from a third party.
• You may withdraw your consent at any time by sending an email to biorganic.natural@gmail.com , without affecting the lawfulness of the processing based on your consent prior to its withdrawal.

7.Access to personal data.

• You have the right to obtain from us confirmation as to whether or not your personal data are being processed and, if so, you have the right to access your personal data, as well as:
  a) the purposes of the processing,
  b) the relevant categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be disclosed,
  c) where possible, the period for which the personal data will be stored or, when not possible, the criteria used to determine that period,
  d) the existence of the right to request from the data controller the rectification or erasure of personal data, the restriction of processing of personal data, or the right to object to such processing,
  e) the right to lodge a complaint with a supervisory authority,
  f) where the personal data are not collected from you, any available information as to their source,
  g) the existence of automated decision-making, including profiling, and meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.
• You may request that we provide you with a copy of the personal data being processed. For any additional copies requested, a fee of fifteen (15) Euros may apply.
• Any request for access to information should be addressed to us at the email address biorganic.natural@gmail.com.
• We will respond to your request within one (1) month.

8.Right to rectification, erasure, restriction of processing, data portability, objection, and complaint.

• We have undertaken the obligation to ensure the confidentiality of your personal data and to facilitate the exercise of your rights of access, rectification, erasure, restriction, portability, and objection by sending an email to the address biorganic.natural@gmail.com. If deemed necessary, we may request that you provide a photocopy of your identity card, passport, or other valid identification document.
• Right to rectification. You have the right to request from us the rectification, without undue delay, of any inaccurate personal data concerning you. In light of the purposes of the processing, you also have the right to request the completion of incomplete personal data, including by means of a supplementary statement.
• Right to erasure.

  You have the right to request from us the erasure of personal data concerning you without undue delay if:
  a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed,
  b) you withdraw the consent on which the processing is based and there is no other legal basis for the processing,
  c) you object to the processing and there are no overriding legitimate grounds for the processing,
  d) the personal data have been unlawfully processed,
  e) the personal data must be erased to comply with a legal obligation under Union law or the law of a Member State to which the data controller is subject,
  f) the personal data have been collected in relation to the offer of information society services.

  Requests for erasure of personal data are processed within one (1) month. In the case of public disclosure of personal data, Biorganic, taking into account available technology and implementation costs, takes reasonable measures, including technical measures, to inform data controllers processing the personal data that the data subject has requested erasure of any links to, copies, or replications of the personal data.

  It should be noted that there may be a delay in the deletion of your personal data from servers and backup storage, and personal data may be retained to allow Biorganic to comply with the law, protect its rights, or resolve disputes.

• Right to restriction of processing.

  You have the right to request from us the restriction of processing when one of the following applies:
  a) the accuracy of the personal data is contested by the data subject, for a period that allows the data controller to verify the accuracy of the personal data,
  b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests, instead, the restriction of their use,
  c) the data controller no longer needs the personal data for the purposes of processing, but the data are required by the data subject for the establishment, exercise, or defense of legal claims,
  d) the data subject has objected to the processing pursuant to Article 21(1) of the GDPR, pending verification of whether the legitimate grounds of the data controller override those of the data subject.

  When processing has been restricted, the personal data in question, aside from storage, may only be processed with the consent of the data subject, or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or a Member State. The data subject who has obtained the restriction of processing shall be informed by the data controller before the restriction is lifted.

• Right to data portability. You have the right to receive personal data concerning you, which you have provided to a data controller, in a structured, commonly used, and machine-readable format, as well as the right to transmit those data to another data controller without hindrance from the data controller to whom the personal data were provided, when:
  a) the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) of the GDPR, or on a contract pursuant to Article 6(1)(b) of the GDPR, and
  b) the processing is carried out by automated means.
• Right to object. You have the right to object, at any time and for reasons related to your particular situation, to the processing of personal data concerning you which is based on Article 6(1)(e) or (f) of the GDPR, including profiling based on those provisions. The data controller shall no longer process the personal data unless the data controller demonstrates compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or for the establishment, exercise, or defense of legal claims.
• You have the right to lodge a complaint with a supervisory authority, in particular in the Member State where you have your habitual residence, your place of work, or the place of the alleged infringement, if you consider that the processing of personal data concerning you violates Regulation 679/2016 (GDPR). In Greece, the competent supervisory authority is the Hellenic Data Protection Authority (Kifisias 1-3, P.C. 115 23, Athens, Tel: +30 2106475600, Fax: +30 2106475628, Email: complaints@dpa.gr). (https://www.dpa.gr/portal/page?_pageid=33,43321&_dad=portal&_schema=PORTAL )

9.Disclaimer for third-party websites.

• Links to third-party websites. When you visit the website, you may be directed to third-party websites that are not under the control of Biorganic. These links are provided for convenience in using the internet. We assume no responsibility whatsoever for the privacy policies or practices, or the content of these websites, and we expressly disclaim any liability for any loss or damage that may result from using these links. We encourage you to exercise caution when leaving our website and to read the privacy policies of each website that processes personal data.
• Social media platforms and widgets. We also maintain a presence on social media platforms such as Facebook and Instagram. Any information, communications, or data you submit to us through a social media platform is done at your own risk. We cannot control the actions of other users on these platforms or the actions of the platforms themselves. Your interactions with these features and platforms are governed by the privacy policies of the companies that provide them.
• We draw your attention to exercise caution when leaving this website and visiting another website that processes your personal data. Please carefully read the privacy policy of the other website.

10.User obligations.

• By using our website and online store, you agree to use any information in a manner consistent with the Terms and Conditions of Use and the Privacy Policy.
• The website user guarantees that the information provided is correct and accurate and undertakes to notify any changes or modifications thereto. For any loss or damage caused to the website or to any third party responsible for the website due to the provision of false, inaccurate, or incomplete information in the registration fields, the user shall bear exclusive responsibility.

11.Contact.

• We may send you emails regarding your order. These communications are considered part of the services and you cannot opt out of them.
• We may also send you promotional or advertising messages at regular intervals. These messages are sent only if you subscribe to them and for as long as you wish. You can opt out of receiving them by clicking the unsubscribe link (or a similar option) included in these communications.
• We use third-party service providers to assist us in managing communications and emails sent through the website. Any personal information disclosed through such communications will be governed by the privacy policy of the third-party providers.

12.Additional information.

When you post content on this website, it may include your personal data. You are solely responsible for the information that: a) you publish on the internet, b) you publish through this website, and/or c) you share with another website linked from this website.

13.Review / Modification of the Privacy Policy.

• We reserve the right to review or modify this Privacy Policy, the Terms of Use, as well as other online policies and agreements at any time and in any manner.
• We will inform you of such changes by posting the revised policies on our website.
• It is your responsibility to review the Terms and Privacy Policy periodically, as the Terms and Policy in effect at the time you use the website are the ones that apply.

14.Final Provisions.

If you have any concerns regarding our privacy practices or if you wish to modify, delete, or correct your personal data that is being processed, you can contact us via email at biorganic.natural@gmail.com or by postal mail at Georgiou Seferi 11, P.C. 54250, Thessaloniki – Greece.

Last updated on 12-11-2025 at 15:12.