Privacy policy

Last updated: 6 November 2026.

Who is responsible

GRIC GROUP S.A. is the controller for this corporate website. Address: Mesogeion Avenue 507, Agia Paraskevi, 15343 Athens, Greece. Contact: [email protected]; +30 210 600 3500.

Information we process

When you submit a contact enquiry or a retailer/brand partnership application, we process your name, company, business email, country, message and any optional phone, website, retail-channel, product-interest or catalogue details you provide. Retailer applications also request a VAT/tax number; brand applications request a brand name and may include target markets. We record the form language, submission date, acknowledgement of this notice, policy version and internal review status. Please do not include sensitive personal information unrelated to your request.

Purpose and legal basis

We use this information to answer enquiries, assess potential partnerships, assign the appropriate team member and support business relationships. Processing may be necessary to take steps at your request before a contract, perform a contract, meet legal obligations or serve our legitimate interests in business communication and website security, subject to your rights. The acknowledgement on the form confirms that you have read this notice and agree to contact about your request; it is not a newsletter subscription. Where we rely on consent, you may withdraw it without affecting prior lawful processing. An application does not automatically approve a partnership or create a B2B account.

Access and service providers

Applications are stored privately in the corporate website’s workflow. Administrators and authorised commercial managers can review them. Assigned sales staff can access their assigned retailer applications; authorised finance staff can access retailer applications at the ERP-account stage. Hosting, email and technical-support providers may process information as needed to provide their services, and information may be disclosed where required by law. Any international transfer must have an applicable GDPR safeguard. Staff review and any later account creation remain separate from automatic public form submission.

Retention

We retain enquiry and application records while needed to handle the request, maintain the relevant business relationship, meet applicable legal obligations or establish, exercise or defend legal claims. Records should be reviewed when a request is closed or rejected and unnecessary information removed. The appropriate period depends on those purposes; this website does not promise automatic deletion after a fixed period. Access and erasure requests can be sent to [email protected]; open applications are reviewed by an administrator before erasure. Separate ERP, email and B2B records may have their own retention requirements.

Technical information, cookies and measurement

Hosting and security services may process IP addresses, request times and browser information to deliver and protect the website. Forms use a security token and a temporary anti-spam limit based on a keyed identifier derived from the network address. WordPress uses necessary cookies for signed-in staff. We count successfully saved public contact enquiries and retailer/brand applications by form page and language to evaluate these goals; staff tests and failed submissions are excluded. This goal report uses existing application records, adds no advertising or analytics cookies and does not measure unique visitors or browsing histories. Separately, Cloudflare Web Analytics measures page views and performance without analytics cookies and does not track individual visitors across websites. Its browser beacon sends technical measurement data to Cloudflare as our service provider. Fonts are provided by your device. External links to the B2B portal, social networks and maps are governed by those services’ policies.

Optional Google Analytics 4 measurement

With your consent to the Statistics category, we use Google Analytics 4 to measure visits, pages and interactions, traffic sources and technical device/browser information. The service uses identifiers and analytics cookies such as _ga and sends measurement data to Google. The Google Analytics script does not load before you give consent. You can reject statistics or change/withdraw your choice using Manage consent on the website. Withdrawal stops future loading of analytics and does not affect earlier processing. Using our forms or website does not require accepting statistics. For information about processing by Google, see the Google Privacy Policy.

Manage consent

Your rights

Subject to the applicable conditions, you may request access, correction, erasure, restriction or portability and object to processing based on legitimate interests. Contact [email protected]. You may complain to the Hellenic Data Protection Authority at www.dpa.gr or your competent supervisory authority. We do not use these corporate enquiries for automated decisions with legal or similarly significant effects.

Separate B2B service and updates

This notice covers gricgroup.gr. Accounts, catalogues, orders and transactions at b2b.gricgroup.gr are covered by that service’s own privacy information and terms. This notice will be updated when corporate website processing changes.