Privacy & cookies

This is a translation for convenience. The Greek text is the one that applies.

Data controller: ΦΩΤΙΟΥ ΑΘΑΝΑΣΙΟΣ του Δημητρίου · 26ης Οκτωβρίου 8, 54627 Θεσσαλονίκη · ΑΦΜ 172753364, ΔΟΥ Ζ΄ Θεσσαλονίκης, info@greenshield.gr.

If you are just visiting

• You do not need an account and we do not ask for any details.
• We count page views and taps on the contact buttons anonymously: we store a cryptographic fingerprint of the IP address that changes every day, so that we count “how many” and not “who”. We do not use Google Analytics or any other third-party tools.
• “Favourites” are stored only on your device (localStorage) and we cannot see them, unless you create a buyer account, in which case they are linked to it so that you can find them on every device.

Cookies

We use only strictly necessary cookies, which do not require consent:

• agsess: session (producer sign-in, form protection). It expires when you close your browser.
• agrem: “remember me” for producers, 180 days, only if you choose it.
• agcrem: the same for the buyer account, 180 days, only if you choose it.
• agdev: a random device identifier, 2 years. It is used only to prevent multiple reviews from the same device and to note that you contacted a producer before writing a review. It is not linked to a name or email address.
• agref: the code of the friend who brought you, 30 days, only if you arrived through a referral link. It is used so that your friend gets their points after your first pick-up.
• agseen: the last 8 products you viewed (numbers only), 90 days, so that we can show you “Recently viewed” and related suggestions. It stays on your device; on the server we keep only how many times two products were viewed together, without knowing by whom.
• agarea: the region you chose under “My area”, 1 year, so that we can show you what reaches you. It stays on your device and is not stored in our database, unless you have a buyer account, in which case it is saved there too. We never ask for a full address.
• aglang: the language you chose (Greek or English), 1 year, only if you change it.

There are no advertising or tracking cookies, which is why we do not show a banner.

If you write a review

We publish the name you write and your text (legal basis: legitimate interest, namely informing consumers). We keep the IP fingerprint and the device identifier to prevent abuse. You can ask for your review to be corrected or deleted.

If you create a buyer account

The account is optional: everything works without it. If you create one, we keep your name, your mobile number, your password (only as an irreversible hash, so nobody can read it), and optionally an email address and region, so that your details fill in by themselves when you ask a producer to call you and your favourites are kept on every device (legal basis: contract/consent). We do not give your details to any producer unless you ask us to, by placing an order or by tapping “send my details”. You delete the account yourself, from the “My account” page: your details, favourites, points, orders and chats are erased immediately.

If you ask for news by email (newsletter)

We send you newsletters (new producers, what's in season) only if you ask for them: with the tick box when you sign up or from your account, and after you tap the confirmation link that arrives in your email (legal basis: consent, Article 6(1)(a) GDPR and Law 3471/2006). We keep a record of when, and with what wording, you gave your consent, so that we can prove it. You can stop whenever you like, with one tap, from the link in every email or from your account. Stopping does not affect notifications about your orders.

If you place an order through the app

We keep what is needed to get the job done: what you asked for (quantity, when, how you'll get it), the chat messages, the order's status and any points earned (legal basis: contract). Your name and phone number are seen only by that producer, so that you can make arrangements. Chats are private: we do not read them unless abuse is reported to us. An order and its messages are deleted automatically 12 months after the last activity. We do not keep payment details, because no payment is made here.

If you follow a producer

We keep your email address only to send you notifications about that producer, after you confirm (double opt-in). Every email has an unsubscribe link that erases your email address immediately.

If you are a producer

We process your name, village, phone number, email (optional), photos, texts and your stall's statistics so that the service can work (legal basis: contract). Your password is stored only as an irreversible hash (bcrypt): nobody, not even us, can read it. Photos are re-encoded and lose their metadata (e.g. GPS location). You delete everything from your profile.

Your rights

Access, correction, erasure, restriction, portability, objection: write to info@greenshield.gr. We reply within 30 days. You can also contact the Hellenic Data Protection Authority (dpa.gr).

Where the data is hosted

On a server inside the EU (Greece). Emails are sent from the same server. We do not transfer data to third parties unless the law requires it.