UPDATED 16 OCTOBER 2026 · ENGLISH / ΕΛΛΗΝΙΚΑ
Privacy Policy
How Galanora handles business enquiries and website information.
1. Controller and contact
GALANORA PRIVATE COMPANY (ΓΑΛΑΝΩΡΑ ΙΔΙΩΤΙΚΗ ΚΕΦΑΛΑΙΟΥΧΙΚΗ ΕΤΑΙΡΕΙΑ), a Greek I.K.E., is the controller for the enquiries it receives. Registered office: Dodonis 33, 17563 Athens, Greece. GEMI: 195263301000. VAT / ΑΦΜ: 803357924. For privacy requests, use the contact email shown below or write to our registered office.
2. Information we handle
When you contact us, we receive your name, business email, company (if supplied), product interest, estimated quantity and message, together with any correspondence you choose to send. We do not request sensitive personal information. Please do not include it in your enquiry.
3. Purpose and lawful basis
We use enquiry details to respond, discuss sourcing requirements and manage business correspondence. For representatives contacting us on behalf of a business, our basis is our legitimate interest in professional communication (GDPR Article 6(1)(f)). Where an individual requests steps toward a contract in their own capacity, Article 6(1)(b) may apply. Legal recordkeeping obligations are handled under Article 6(1)(c). We do not add enquiry senders to a marketing list.
4. How the contact form works
When direct sending is available, the contact form submits your details to our Cloudflare-hosted service after Cloudflare Turnstile bot verification. The service validates the fields, applies submission limits and passes the enquiry through Zoho CPaaS / ZeptoMail using its EU email API to our company inbox. Your email address is used as Reply-To so we can reply to you. We do not maintain a separate website enquiry database or enable email open/click tracking. If direct sending is unavailable, the form instead clearly offers preparation of a draft in your own email application; you must send that draft yourself. A sending confirmation means the delivery provider accepted the message, not a guarantee of inbox arrival.
5. IP addresses and security
Cloudflare processes network and browser information to deliver the website and distinguish legitimate visitors from automated abuse. Our contact service temporarily uses the edge-provided IP address to derive a pseudonymous, hourly rotating security key for submission limits. It does not store raw IP addresses in an enquiry database, include them in enquiry emails, or log form message bodies. The limiter is local to each Cloudflare location and may affect people sharing a network. We rely on our legitimate interest in website security and preventing abuse (GDPR Article 6(1)(f)). An IP address is not proof of a person’s identity. Infrastructure providers may retain their own technical and security records under their service terms.
6. Recipients and transfers
Authorised company personnel handle enquiries. Cloudflare provides website hosting, the contact service and Turnstile verification; Zoho provides transactional email delivery and our company mailbox. These providers process the information needed to supply those services. We do not sell enquiry data or use it for advertising. Information may be disclosed when legally required. The configured transactional email endpoint is cpaas.zoho.eu; Cloudflare operates a global network, and provider operations or support may involve processing outside the EEA. Provider data-processing arrangements and applicable safeguards, including standard contractual clauses where relevant, govern such processing. You may contact us for information about the safeguards applicable to your data. See the linked provider privacy information below.
7. Retention
Unanswered enquiries are deleted within 12 months of the last substantive communication. If an enquiry becomes a contract, accounting record or legal matter, the relevant documents follow their separate statutory retention requirements or are kept for the period necessary for legal claims. The company is responsible for applying this retention schedule to its mailbox; the website does not automatically delete mailbox messages.
8. Your rights
Depending on the circumstances, you may request access, correction, erasure, restriction or portability, and object to processing based on legitimate interests. We may need proportionate information to verify a request. You may complain to the Hellenic Data Protection Authority (www.dpa.gr), or another competent supervisory authority. Contact us using the address below to exercise your rights.
9. Website preferences
Galanora does not install analytics or advertising trackers. A language preference may be stored in your browser when you select a language. See the Cookies & Storage page for information about technical storage. Changes to data handling will be reflected in this notice.
10. Corporate transparency disclosures
The separate Company Management & Partnership Structure page publishes manager and partner names, capital contribution types and amounts, ownership percentages, and the company office expressly labelled as their business correspondence address. The source is the incorporation record supplied by the company, together with the company’s publication instructions. Corporate transparency information is provided for the purposes of Article 47 of Law 4072/2012; legally required disclosures rely on GDPR Article 6(1)(c). Further ownership detail is published for the legitimate interest in transparent company governance under Article 6(1)(f). The company must notify changes so current details can be corrected; records are retained to the extent required by applicable law. Residential addresses and personal tax numbers are not published. The page requests exclusion from search indexing, but remains publicly accessible and can be read or copied by anyone with its link.
Cloudflare Turnstile — Privacy · Zoho — Privacy
