Privacy policy

How we handle your personal data.

1. Data controller

The controller of personal data collected through www.terra-forma.eu is TERRA FORMA SINGLE MEMBER P.C. (VAT EL802836673, GEMI 183667101000), Leof. Markopoulou 2 km, 19002 Paiania, Greece Contact: [email protected], tel. +30 210 282 0555.

2. What we collect

  • Contact form: name, email, phone (optional), subject and message.
  • Wholesale application: business name, VAT number, contact person, email, phone, city, store type, website, products of interest and message.
  • Newsletter: email address.
  • Technical data: IP address and browser details, logged automatically by the server for security.

We do not ask for special categories of data. You can browse the site without giving us any personal information.

3. Purposes and legal basis

  • Replying to your request and assessing a wholesale partnership — pre-contractual steps (Art. 6(1)(b) GDPR).
  • Sending the newsletter — your consent (Art. 6(1)(a)), which you can withdraw at any time via the unsubscribe link.
  • Site security and abuse prevention — legitimate interest (Art. 6(1)(f)).
  • Tax and commercial record-keeping once a partnership goes ahead — legal obligation (Art. 6(1)(c)).

4. Recipients

We never sell your data or pass it to third parties for their own purposes. Only service providers process it on our behalf:

  • our website hosting provider;
  • Cloudflare (content delivery and attack protection);
  • Microsoft 365 (company email, where form messages are received);
  • Brevo (delivery of form emails);
  • Mailchimp / Intuit (newsletter management).

Where a provider processes data outside the EEA, the transfer relies on the EU–US Data Privacy Framework or Standard Contractual Clauses.

5. Retention

  • Contact messages: up to 2 years after the last exchange.
  • Wholesale applications that do not lead to a partnership: up to 2 years; if a partnership goes ahead, as long as tax law requires.
  • Newsletter: until you unsubscribe.

6. Cookies

This site uses strictly necessary cookies only: Cloudflare’s security cookie (__cf_bm) and the language cookie (pll_language), which remembers whether you prefer Greek or English. We do not use analytics or advertising cookies. If that changes, we will update this policy and ask for your consent before setting them.

7. Your rights

You have the right of access, rectification, erasure, restriction, objection and portability, and the right to withdraw consent. Send your request to [email protected]; we reply within one month. You may also lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

8. Security

The site runs exclusively over an encrypted connection (HTTPS). Access to data is limited to the people who need it for the purposes above.

9. Changes

We may update this policy; the current version is always published on this page.

Last updated: October 2026