Privacy Policy & Personal Data Protection

The sole proprietorship of INDIGENOUS CRETAN MAPS (MEDICINAL AND AROMATIC PLANTS) PC (tri3ssence.com) prioritises the security and protection of your personal data. We manage your data responsibly, prudently, and in full compliance with National and European Legislation, specifically Greek Law 2472/1997 and the European General Data Protection Regulation (EU) 2016/679 (GDPR).

By visiting tri3ssence.com, you accept the practices described in this Privacy Policy. Users provide their explicit consent for the collection and processing of their data, retaining the right to revoke or modify this consent at any given time.

1. What Data We Collect

We collect personal information only when you voluntarily choose to use our services, register on our website, submit an order, or fill out our contact forms. This data includes:

• Personal Identification Details: Full name, age, and gender.
• Contact & Shipping Details: Residential and delivery address, telephone numbers (landline and mobile), and your email address.
• Tax & Invoicing Details (for business invoices): Company name, professional activity, Tax Registration Number (VAT Number), Tax Office, and GEMI Number.
• Connection & Activity Data: Items added to your shopping cart, recently viewed products, your wishlist, and your device’s IP address.

2. Purpose of Data Collection and Processing

We process your data strictly for the following purposes:

• To execute and deliver your orders (product dispatch).
• To communicate with you regarding customer support, dispute resolution, or to update you on your order’s progress via email, telephone, SMS, or Viber applications.
• To inform you about new products, special offers, competitions, and promotional activities (Newsletters), provided you have given your explicit consent.
• To gather statistical data that helps us continuously improve the user experience (UX) of our website.

3. Use of Cookies & Advertising

We use cookies to collect information about your activity on our website, aiming to personalise your browsing experience. If you do not wish to participate in personalised advertising programs (Remarketing), you can opt out at any time by modifying your browser settings.

We do not allow third parties to track or collect your personal data from our website for their own advertising purposes without your prior explicit consent.

4. Data Transfer to Third-Party Partners

We explicitly state that we do not sell, rent, or lease your personal data to third parties for purposes unrelated to this e-shop’s operations. We transfer data solely to trusted partners to facilitate our services:

• Courier Companies: To deliver your products (ACS Courier).
• Google & Facebook: Exclusively for personalised and repetitive marketing (remarketing) purposes, in accordance with their strict privacy policies.
• Judicial & Police Authorities: Only upon a lawful request by official authorities and in accordance with the applicable national legislation.

5. Data Retention Period

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy and to ensure the proper operation of our business. Upon your official request, we will completely and securely delete your personal data from our database.

6. Your Rights Under GDPR

We fully respect your rights regarding your personal data. Every user can exercise the following rights:

1. Right of Access & Portability: You have the right to know what data we hold and receive a copy of it in a structured, commonly used format.
2. Right to Rectification: You can modify or supplement incomplete or incorrect data (either through your account dashboard or by submitting a request).
3. Right to Erasure (“Right to be Forgotten”): You can request the complete deletion of your personal data from our records.
4. Right to Restriction & Objection: You have the right to restrict the way we process your data or object to its processing entirely.

We will complete all relevant data requests within 30 days and notify you promptly if we require an extension.

7. Data Controller & Right to Complain

To exercise any of your rights, you can contact the Data Controller and Protection Officer of tri3ssence.com directly:

• Data Controller: Stavros Gaganis
• Email Address: info@tri3ssence.com
• Address: Agios Andreas, Rethymno, Crete, Greece

If you believe we have violated your data protection rights, you have the right to lodge a formal complaint with the Hellenic Data Protection Authority (www.dpa.gr).