Privacy Policy
October 2026
This Privacy Policy explains how Th. Vrohidis S.A. (“we”) collects and processes your personal data when you visit our website, in accordance with the General Data Protection Regulation (GDPR).
Data controller
Th. Vrohidis S.A., 25 km Athens–Corinth, Mandra 196 00, Greece. Email: sales@vrohidis.gr · Phone: +30 210 5542306.
What data we collect
This website is a product catalogue: it does not process online sales and does not take payments. We collect personal data in five situations.
Contact form
- first and last name
- email address
- phone (optional)
- the content of your message
Trade account
If you apply for a wholesale account we collect:
- first and last name
- email address (which serves as your username)
- company name
- VAT number
- phone
- country
- any notes you add
- the language and date of your application
Orders and quotation requests
When you submit a request from your account we record the products and quantities, any notes you add, your company name, and the prices that applied at the moment of submission.
Photos for photo ceramics
When you order a photo ceramic you can upload photos and text (verses, names, dates), which usually concern other people, often deceased. We use them only to produce your order. They are stored in a private area of our server, outside the public media library, are accessible only to you and our staff, and are emailed to our order department. They are deleted automatically 6 months after the order is completed; files uploaded to a cart that was never submitted are also deleted after 6 months. You can ask for earlier deletion at sales@vrohidis.gr. By uploading such material you confirm that you are entitled to give it to us for this purpose.
Newsletter
If you subscribe to our newsletter (using the form at the bottom of every page or the pop-up), we record your email address, the language of the site you were using, where you signed up and the date you confirmed. The subscription is only completed when you click the link in the confirmation email (double opt-in).
The legal basis is your consent (Article 6(1)(a) GDPR). You can withdraw it at any time with the unsubscribe link in every email or by writing to us. We keep the data for as long as you are subscribed; after you unsubscribe we keep only your address on a suppression list, so that we do not email you again.
Emails are sent through Brevo (Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France), which processes the data on our behalf within the EU. We measure opens and clicks to improve our messages. We never send Brevo prices, discounts or order details.
Contract manufacturing enquiries
The contract manufacturing form collects your company name, contact name, phone, email, material, quantity, application and message. If you attach a technical drawing, that file is stored on our server and passed to our production team.
Website statistics
With your consent we use Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to understand how the catalogue is used: which pages are opened, from which country, on what kind of device, and how visitors move between pages.
This is the only processing on this website that rests on consent alone (Art. 6(1)(a) GDPR). Nothing is collected before you accept in the cookie banner, and you may withdraw at any time using the “Cookie preferences” link at the bottom of every page. Full detail is in our Cookie Policy.
Google Analytics 4 does not record IP addresses. The data is kept for 14 months. Google may process it outside the European Union, under the EU–US Data Privacy Framework and the European Commission’s standard contractual clauses. The same applies to our consumables catalogue supply.vrohidis.gr, which is measured separately and asks for its own consent.
Purpose and legal basis
Contact messages and contract manufacturing enquiries are used solely to answer you (your consent, and our legitimate interest in responding to enquiries). Trade account data is processed to assess your application, operate your account and handle your orders — the legal basis is performance of a contract or steps taken prior to entering one (Art. 6(1)(b) GDPR), together with our legitimate interest in verifying that an applicant is a trade buyer.
Retention
Contact messages are kept for as long as needed to deal with your enquiry and any follow-up. Trade accounts and order history are kept while the trading relationship is active and afterwards for as long as tax and commercial law requires. Applications that are declined, and the details submitted with them, are deleted. Technical drawings sent for contract manufacturing are deleted once they are no longer needed for the quotation or the order.
Recipients
We do not sell or rent your data. It may be processed by: our website hosting provider, for technical purposes only; our email delivery provider, so that our messages reach you; and — only if you consent to statistics — Google, as described above.
Your rights
You have the right to access, rectify, erase, restrict, port and object to the processing of your data. To exercise them, contact sales@vrohidis.gr.
Complaints
You have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).
