PRIVACY POLICY & DATA PROTECTION (GDPR)

Data Controller Identification

The Data Controller responsible for personal data collected through tri3ssence.com is INDIGENOUS CRETAN MAPS MEDICINAL AND AROMATIC PLANTS PC (Trading Name: tri3ssence), registered at Agios Andreas, Rethymno, P.C. 74150, Crete, Greece. VAT Registration Number: EL801255973 (Tax Office of Rethymno), General Commercial Registry (G.E.MI.) Number: 152834550000. Legal Representative: Stavros Gaganis. Privacy Contact: hello@tri3ssence.com.

1. Regulatory Compliance and Framework

INDIGENOUS CRETAN MAPS MEDICINAL AND AROMATIC PLANTS PC is committed to protecting the privacy and personal data of visitors and customers of tri3ssence.com. Data processing activities are conducted strictly in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation – GDPR) and Hellenic Law 4624/2019.

2. Data Controller Identification

The Data Controller responsible for processing personal data collected through tri3ssence.com is INDIGENOUS CRETAN MAPS MEDICINAL AND AROMATIC PLANTS PC, headquartered at Agios Andreas, Rethymno, P.C. 74150, Crete, Greece. For any privacy inquiries or to exercise statutory rights under GDPR, users may contact the Data Controller directly via email at hello@tri3ssence.com.

3. Personal Data Collected and Purpose of Processing

We collect and process personal data exclusively for specified, explicit, and legitimate business operations. Collected information includes full names, delivery addresses, telephone numbers, and email addresses necessary for order fulfilment and customer service. For corporate customers requiring commercial invoices, company details, business activity, and VAT registration data are also processed. Technical data, such as IP addresses and session logs, are recorded automatically to ensure infrastructure operations and optimise site performance. Marketing communications and newsletters are sent solely upon receiving explicit user consent, which may be revoked at any time.

4. Payment Security and Data Transfers

Financial transactions on tri3ssence.com are executed strictly online via Credit, Debit, or Prepaid Cards through the secure Cardlink Payment Gateway. Our platform operates under Transport Layer Security (TLS/SSL) protocols to encrypt transmitted data. tri3ssence.com does not collect, access, or store sensitive payment card credentials. All transaction data is processed directly within Cardlink’s secure, PCI-DSS compliant banking environment.

5. Data Recipients and Third-Party Sharing

Personal data is shared strictly with trusted partners essential for executing service operations. Shipping details are disclosed exclusively to partner domestic courier services for order fulfilment within Greece. Billing information is transmitted to banking institutions for payment authentication. Third-party web analytics tools (such as Google or Meta) process pseudonymized usage data solely in accordance with user cookie preferences. We do not sell, lease, or transfer personal data to third parties for commercial marketing purposes. Data disclosures to statutory or judicial authorities are made solely under a mandatory legal obligation.

6. Data Retention Period

Personal data linked to completed orders is retained for the mandatory period stipulated by Greek tax legislation, up to a maximum of ten years for accounting records. Customer account records and marketing consent logs are retained until the user submits an explicit deletion request or revokes consent.

7. Data Subject Rights

Under Chapter III of the GDPR, users hold full authority over their personal data. Data subjects have the right to request access to their personal records, request immediate correction of inaccurate data, or demand erasure (“right to be forgotten”), provided that retention is not required by legal or tax obligations. Users also maintain the right to restrict processing, object to data handling, and request data portability in a structured, standard format. All requests should be submitted via email to hello@tri3ssence.com and will be addressed within thirty calendar days. Data subjects also maintain the right to lodge a formal complaint with the Hellenic Data Protection Authority (www.dpa.gr).