1. Data Controller
The controller of your personal data is CivilShop — TopoGeos Hellas (Rafina, Greece, VAT EL000000000). Contact for data-protection matters: privacy@topogeos.eu.
2. What data we collect
- Account: first/last name, email, phone, country, language.
- Orders: billing & shipping address, invoicing details (VAT if business), order history.
- Payments: we do not store card details; they are handled exclusively by Stripe Payments Europe Ltd.
- Technical: IP address, user-agent, interaction logs for security and fraud prevention.
- Cookies: see Cookie Policy.
3. Legal basis & purposes
- Contract performance (art. 6 §1b GDPR): account, order execution, shipping, after-sales.
- Legal obligation (6 §1c): tax records kept for 10 years.
- Legitimate interest (6 §1f): site security, fraud prevention.
- Consent (6 §1a): newsletter, marketing cookies — withdrawable any time.
4. Sharing with third parties
- Stripe (payments) — Ireland / USA, under EU Standard Contractual Clauses.
- Courier (ACS / ELTA / Speedy / Econt) — only name, address, phone for delivery.
- Hosting provider — data stored within the EU.
- Tax authorities when required by law.
5. Retention
- Orders / invoices: 10 years (tax obligation).
- Inactive accounts: 3 years, then deletion after notice.
- Cookies: as set in the Cookie Policy (max 6 months for analytics).
6. Your rights (GDPR art. 15–22)
- Access, correction, deletion (right to be forgotten).
- Restriction & objection to processing.
- Data portability (export).
- Withdraw consent any time.
- Lodge a complaint with the Hellenic DPA (www.dpa.gr), Cypriot DPA (dataprotection.gov.cy) or Bulgarian CPDP (cpdp.bg).
To exercise your rights email privacy@topogeos.eu. We answer within 30 days.
7. Security
TLS (HTTPS), bcrypt for passwords, access logs. We never store full card numbers.
8. Children under 16
This site is not intended for minors under 16.
Privacy · Terms · Returns (14 days) · Cookies · Imprint