Collection & Processing of Personal Data

In the commercial sector, personal data is collected, exchanged, and processed daily without a second thought and, often, without taking into account the need for their protection and the preservation of the privacy of individuals. However, at ROMA HELLAS SINGLE PERSON S.A. we consider respect for your privacy to be a key element of the relationship of trust between us, which is why we make systematic efforts to protect your personal data. In your transactions with our Company, we encourage you to use corporate data and information, to the extent possible, and in all cases where the collection and processing of data includes personal data, we faithfully apply the General Data Protection Regulation (GDPR - Regulation 2016/679) and the applicable legislation.
Below you will find an overview of the purposes and ways in which we collect and process personal data of visitors to our Website (romahellas.gr) and customers who use the Online Store hosted on our Website. You will also be informed about your rights and how you can exercise them, as well as the ways to contact us. This information, together with the Terms and Conditions of Use of the Online Store Services, the Terms of Use of the Website, and the Cookies Information, constitute the General Terms that govern your browsing and/or use of the Website and all its functions, including the Online Store, in any capacity.
We consider the security and protection of your personal data to be a very important matter, so we invite you to take a moment and read the information that follows carefully. If you have any questions or need clarifications, do not hesitate to contact us by sending an e-mail to admin@romahellas.gr before sharing any of your personal data with us.
1. Who we are
This Notice on the Collection and Processing of Personal Data (hereinafter referred to as “the Notice”) concerns the personal data collected and processed by “ROMA HELLAS SINGLE PERSON S.A. Stationery” located at 1 Eleftherias Street, 14564 in Nea Kifissia, Attica (hereinafter referred to as the “Data Controller – our Company – we”) when using the website with the address romahellas.gr (hereinafter referred to as the “Website”) and the Online Store hosted on the Website.
You can contact us by calling +302114115877, by FAX at +302108846178 or by sending an e-mail to sakes@romahellas.gr.
Specifically for issues related to the collection and processing of personal data, you can contact us at admin@romahellas.gr
2. What personal data do we collect, how and for what purpose do we process it
Personal data is all information that concerns a natural person and can be used to identify him. For example, personal data is the name, address and contact details (telephone, e-mail address), age, and network protocol code (IP). In addition, personal data may constitute the details of a sole proprietorship when they are identical to the details of a natural person.
When you use the Website and/or the Online Store, information, which may include personal data, is collected both automatically, via cookies, and directly from you when you fill out the Forms that you will find on the Website and/or the Online Store (newsletter subscription form, contact form, partner registration form). It is recommended, to the maximum extent possible, that you use corporate information and data when you provide us with data for the use of functions offered through the website (newsletter subscription, contact form) and the Online Store.
For data collected automatically via cookies, depending on your choices, more information can be found on the “Cookies Policy” page. Otherwise, personal data may be collected when using the website and/or the Online Store in the following cases:
2.1 To subscribe to our newsletter
If you choose to subscribe to our newsletter, we will collect your email address (e-mail) and tax registration number (TIN). These data are collected directly from you when you fill out the registration form for the Company's newsletter that you will find on our Website, and are processed based on your consent (Article 6.1.a) GDPR) in order to send you the specific communication.

Specifically, your email is collected and processed to include you in the list of recipients of our newsletter, and your TIN to check that the registration is made by an active business (merchant/trading company). Since our Company conducts transactions exclusively with merchants (B2B), only active businesses can subscribe to the newsletter.
2.2 To contact us via the Contact Form
If you choose to contact us via the Contact Form that you will find on our website, we will collect your email address and any personal data that you choose to include in your message, including any that may be included in your signature. This data (e-mail) is collected directly from you when you fill out the contact form, and is processed based on your consent (Article 6.1.a) GDPR) in order to contact you and answer your question.
Optionally, if you choose, you can also provide us with your name and surname or other contact details (landline or mobile phone). If you choose to provide it to us, your name and surname are collected and processed based on your consent to make communication with you personalized, while other contact information is collected and may be processed, as the case may be, for faster or more immediate communication and resolution of any issues.
2.3 To create an Account in the Online Store
To use the Online Store Services, you will need to create an account (see Terms and Conditions of Use of the Online Store Services) by providing us with details and information about the client company, which may also include personal data, especially in the case of sole proprietorships or in the event that you choose to provide us with personal data (e.g. contact information). This data is collected directly from you when you complete the Affiliate Form.
Specifically, through the Affiliate Form, we collect and process:
a. The name of the company, the VAT number and the Tax Code of the company/entrepreneur, the address, the telephone number (mobile or landline), and the email address that you fill in the Customer Form. This data is collected and processed for the creation of the account in our Online Store, through which you can use all the Online Store Services (see Terms and Conditions of Use of the Online Store Services). The same data is also processed for the purposes of drawing up the sales contract, invoicing and shipping orders, communicating with you about your order, informing you about the progress of your order, and based on our obligations under applicable legislation (article 6.1.c) GDPR). Their collection and processing is necessary to execute your order and is carried out in order to be able to execute the sales contract between us (article 6.1.b) GDPR) and our compliance with our legal obligations (article 6.1c) GDPR) which stem mainly from tax legislation.
b. The company/entrepreneur's VAT number is also collected and processed through the Tiresias TSEK platform, based on the legitimate interest of our company (article 6. 1.f) GDPR). More information about the TSEK platform's Data Protection Policy can be found at the link https://www.tiresias.gr/el/epexergasia-prosopikon-dedomenon/
The collection and processing of data as described in a' and b' is necessary to create an account and necessary for you to be able to make purchases through the Online Store. If you do not provide us with the above data, you will not be able to use our Online Store.
Optionally, through the Registration Form for Personalized Communication, you can provide us with additional contact information and/or give us your consent to process the contact information you have already provided to us through the Partner Form for additional purposes. Specifically, by completing the Registration Form for Personalized Communication, you can provide us with additional contact information and/or give us your consent to use the contact information you have completed in the Partner Form for the purpose of:
a. informing you about the progress of your order in additional ways, through personalized communication channels and/or
b. sending you informational and promotional material to inform you about new arrivals, offers, competitions, and promotional actions of the company.
This data is collected from you by completing the Registration Form for Personalized Communication and is processed based on your consent (Article 6.1.a) GDPR). The provision of this data is optional, and does not affect the execution of your order, but allows us to offer you personalized services.
Important Note
No We do not collect any additional personal data from you, nor do we process the data you provide to us for any purpose other than those mentioned herein. We may process your data, anonymized and in the form of statistics, to create reports, presentations and/or promotional communication. In addition, we may process your personal data for the purposes of proving and/or exercising our legal rights, when these are not limited by your right to the protection of your personal data.
3. Who has access to your Personal Data and why
We implement strict policies so that only those who are absolutely necessary to achieve the purpose for which you provided them to us have access to your data. Specifically:
A. INTERNAL RECIPIENTS: Internally in our Company, access to your data, in a secure and controlled manner (see also Section 4), only employees who are absolutely necessary to fulfill the purposes of processing. More specifically:
The data in the Newsletter Registration Form is accessed by the marketing department that manages the sending of this communication to those who have registered.
The data in the Contact Form is accessed by our company's customer service department that manages communication via the Contact Form.
The data in the Partner Form used to create an account in our Online Store (creation and sending of a username, technical support in the event of lost passwords, etc.) is accessed by the department of our company that manages the Online Store, and the departments of our company that manage customer accounts and serve our customers.
The data in the Partner Form, which are necessary for the execution of your order, are accessed by the departments of our company that are involved in processing the order.
The contact data you provide to us through the Registration Form for Personalized Information in order to receive personalized information about the progress of your order is accessed by the departments of our company involved in processing the order.
The contact data you provide to us through the Registration Form for Personalized Information in order to receive the Roma Hellas newsletter, as well as news and updates about new arrivals, offers, promotions and competitions of the company, are accessed by the marketing department and the customer service department of our company.
B. EXTERNAL RECIPIENTS:
The communication data you provide to us through the Partner Form and related to the delivery of your order is also accessed by the transport company that undertakes the transport and delivery of your order, based on the Sales Contract between us.
We may share your company name without any other information with our partners for marketing and promotional purposes.
We may share your personal data with competent public or judicial services and authorities, lawyers, notaries and bailiffs, if we are obliged to do so by law or in the exercise of our legal rights, when these are not limited by your right to the protection of your personal data.
We do not share your personal data and any other information and/or data you provide to us with third parties, except as stated in this Notice.
4. How long do we keep your data and how do we protect it
The period of time we keep your data depends on the purpose of collecting and processing it, our legal obligations, and the time limits set by applicable law for the purposes of proving and exercising our legal rights. Specifically:
If the relevant VAT number check determines that you can subscribe to our newsletter, the e-mail you fill in on our newsletter Registration Form is retained for as long as our Company continues to have this type of communication. If the VAT number check reveals that you cannot subscribe to our newsletter, the e-mail you filled in on the Registration Form is deleted immediately. In any case, after the relevant check, the VAT number you fill in on our newsletter Registration Form is deleted, if there is no other legitimate reason for its retention (e.g. active Customer Account, registration in the Online Store).
The data you fill in on the Contact Form is retained for as long as it is necessary for us to communicate with you and is permanently deleted in a secure manner once our communication is complete, unless there is a legitimate reason for extending this period, e.g. reasons for proof, exercise of legal rights, etc.
The data collected and processed for the creation of a Customer Account and/or for 

sewing in our Online Store and any additional contact data that you provide us with in order to have personalized information about the progress of your order are retained for as long as you continue to have an active Customer Account and carry out transactions with our Company, either through the Online Store or through other order receiving channels (e.g. e-mail, telephone). In any case, they are permanently deleted in a secure manner at the close of the financial year, provided that five (5) years have passed since the last order, unless a legal reason arises for extending this period.
The data necessary for the execution of your order are retained for as long as is required for the proper execution of each contract, including the respective record keeping period for legal and/or tax reasons. In any case, they are permanently deleted in a secure manner at the close of the financial year, provided that five (5) years have passed since the last order, unless a legitimate reason arises for extending this period.
The contact data you provide us to receive our newsletter as well as news and updates on new arrivals, offers, promotions and competitions of the company, are retained for as long as our company continues to have such communication with the respective means of communication that you have indicated to us, and based on your consent. You always have the option to unsubscribe, at any time, either through the relevant link indicated at the end of each such communication or newsletter, or by sending an email to admin@romahellas.gr. Your possible choice to unsubscribe does not negatively affect our existing commercial cooperation
We have taken all appropriate technical and organizational measures so that your data is secure for as long as we retain it. We have established policies and procedures for their protection, while our company employees have received relevant training, and are bound by clauses regarding the protection of personal data. All personal data we collect is stored on secure and encrypted servers in the European Union.
5. Your rights to your personal data
The law provides a series of rights regarding your personal data, which you can exercise by sending an e-mail to admin@romahellas.gr. More specifically, you have the right to:
A) Have full and detailed information about the reasons and purposes of collecting and processing your data, the processing and storage periods of the data, the processing authorities, any third parties who have access to your data, details related to any transfers, and any other relevant information. If the information provided here is not sufficient, clear or you have additional questions, please contact us.
B) Have access to the data we have about you, and receive a copy.
C) Request the correction/update of the data we hold about you.
D) Request a copy of your data in a suitable format that will be transferred to third parties or used for other purposes (data portability)
E) Ask us to delete your data, without prejudice to our obligations by law, and our right to exercise our legal rights,
F) Ask us not to further process your data, without prejudice to our obligations by law, and our right to exercise our legal rights,
G) Withdraw your consent at any time, without prejudice to our obligations by law, and our right to exercise our legal rights,
H) File a complaint with the competent authorities. If you have any questions, concerns or complaints regarding how we process and use your personal data, please contact us. We hope that we will resolve any issues that may arise. However, you also have the right to file a complaint with the relevant data protection authorities. For more information and how to file a complaint, you can visit the website of the Personal Data Protection Authority (www.dpa.gr).
We do not collect or process your personal data automatically for profiling purposes.

This Notice was last updated in March 2026, replacing any previous ones.