1. Data controller

For any personal-data matter, contact info@rebytelab.gr. No Data Protection Officer has been appointed because the current nature and scale of processing do not create such an obligation.

2. Scope

This Policy applies when visiting and using rebytelab.gr, creating an account, placing online orders, making payments and receiving deliveries, communicating with the business, using repair and technical-support services, posting product reviews and receiving newsletters where those features are active.

3. Data we collect

We do not request special categories of personal data. Please do not send sensitive information that is not necessary for the service you need.

4. Purposes and legal bases

5. Orders and WooCommerce

When you visit the shop and make a purchase, products viewed or added to the cart, location and IP data for tax and shipping calculations, and the information entered at checkout may be recorded.

The data are used to complete and deliver the order, confirm and update its status, handle returns, cancellations and warranties, maintain security and prevent misuse.

6. Payments

Depending on the options active at checkout, payment may be made through Viva Smart Checkout, bank transfer, IRIS, cash on delivery or another provider displayed before the order is completed.

ReByteLab does not store full payment-card numbers, CVV codes or personal online-banking credentials. Payment details are entered in the secure environment of the relevant provider.

7. Invoicing and myDATA

To issue tax documents and comply with related obligations, necessary data may be transmitted through WooMyData or another invoicing system to AADE/myDATA and made available to the business’s accountant or tax adviser.

8. Shipping

For shipping, we give the selected carrier only the necessary details, such as name, address, telephone number, email where required, shipment number and any cash-on-delivery amount.

9. Repairs and technical support

When receiving a device, we record the necessary customer, device and fault details. Technical access to the device is limited to what is required for diagnosis, testing or repair.

• You are advised to make a current backup before handing over the device.
• Remove or protect personal files that are not needed for inspection.
• Passwords are requested only where necessary for a specific task.
• We do not attempt to bypass security locks or access data without authorisation.

10. Communications and forms

When you contact us by email, telephone, form or social media, we use your details and the communication content to respond, prepare a quotation, provide support or handle a complaint or claim.

11. Newsletter and MailPoet

Newsletter subscription requires a positive action by the user. Name, email, subscription IP, consent date and confirmation status may be stored. Opens and clicks are recorded only where the feature is active and permitted by the consent choices.

You can unsubscribe at any time through the link in each email or by contacting info@rebytelab.gr.

12. Comments and reviews

Where product comments or reviews are enabled, form data, IP address and user agent are collected to limit spam and abusive content. The displayed name or alias, rating and comment may be shown publicly after approval.

Where Gravatar is used, an anonymised email hash may be sent to the service to check for a profile image.

13. Cookies

Necessary Cart, checkout, login, security and storage of cookie choices. These remain active at all times.

Preferences Optional storage of display and functionality choices.

Analytics Usage and performance measurement, only after consent.

Marketing Advertising, retargeting and campaign measurement, only after consent.

Non-essential cookies remain disabled until you choose “Yes, I accept”. You may choose “No, essential only”, configure each category separately and change your choice later through the “Cookie settings” link.

Detailed information is provided in the Cookie Policy.

14. Analytics, Google and advertising

Where Google Site Kit, Google Analytics, Google for WooCommerce, Google Ads, Meta Pixel or similar services are enabled, they operate according to the visitor’s consent choices. They may process IP addresses, online identifiers, device data, views, interactions, purchases or campaign results.

15. Embedded third-party content

The website may include maps, videos, images or social-media posts. This content may collect technical data or use cookies only to the extent permitted by the consent choices.

16. Data recipients

We do not sell personal data. Data are disclosed only where necessary to:

• hosting, email, backup, security and technical-support providers,
• WordPress, WooCommerce and plugin providers to the extent that they process data,
• payment providers, banks, IRIS and cash-on-delivery services,
• WooMyData, AADE/myDATA, the accountant and tax adviser,
• couriers, collection points and carriers,
• MailPoet or another newsletter/email provider,
• Google, Meta or other analytics/marketing providers only with the required consent,
• legal or technical advisers and competent public authorities where required.

17. Transfers outside the EEA

Some technology providers may process data outside the European Economic Area. Where such a transfer takes place, lawful mechanisms are used, such as an adequacy decision or Standard Contractual Clauses and, where required, supplementary measures.

18. Retention period

Actual retention settings in WooCommerce, MailPoet and security tools must be consistent with this Policy.

19. Your rights

Subject to the GDPR conditions, you have rights of access, rectification, erasure, restriction, portability, objection, withdrawal of consent and, where applicable, not to be subject to a solely automated decision producing significant effects.

To exercise a right, email info@rebytelab.gr. Reasonable proof of identity may be requested. The business responds within the statutory period.

20. Complaint

If you believe your rights have been infringed, you may complain to the Hellenic Data Protection Authority. We suggest contacting us first so that we can seek an immediate resolution.

21. Security and personal-data breaches

We apply appropriate technical and organisational measures, including HTTPS, access restrictions, software updates, backups and event logging. If an incident occurs, we assess the risk, take containment measures and notify the competent authority or affected people where required.

22. Automated decisions and children

ReByteLab does not make decisions producing legal or similarly significant effects solely by automated means. Payment providers may conduct automated security checks under their own policies.

The online shop is not specifically directed at children. If a child’s data are found to have been collected without a lawful basis or required parental consent, appropriate action will be taken.

23. Changes

This Policy is updated when website features, partners, plugins or the legal framework change. The current version is published on this page with its last-updated date.