Privacy Policy
Last updated: August 2026
The data controller is AGNUSVITA IKE, Mesagros, Lesvos, Greece (VAT 801614765, GEMI 160170542000). We respect your privacy and protect your personal data in accordance with the GDPR and applicable Greek law. For anything concerning your data: agnusvita@protonmail.com.
What data we collect
Only what you give us: order and delivery details (name, address, email, phone, VAT number if you request an invoice), account details if you create an account, the content of messages you send us, and reviews you submit. We use no tracking cookies and no third-party analytics. The only cookies we set are the technical ones needed for the basket, sign-in and language choice to work.
How we use your data
To fulfil your orders, to communicate with you about them, to meet our tax obligations, and — where you have asked for it — to send our newsletter or continue a conversation you started. We never sell your data.
Legal basis
Performance of a contract (Art. 6(1)(b)) for orders; legal obligation (Art. 6(1)(c)) for tax records; explicit consent (Art. 6(1)(a)) for the newsletter, reviews and advisory correspondence. You may withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
Advisory correspondence
If you write to us through the forms on this site, we keep your message and email address so we can reply. Please do not send us information about your health — we do not need it and would rather not hold it. If you do include it, we process it only on the basis of your explicit consent (Art. 9(2)(a)) and only to answer you. We are not health professionals and do not give medical advice. Messages are deleted 24 months after our last exchange.
Who else processes data for us
We pass your name, delivery address and phone number to ACS Courier (deliveries within Greece and the EU, and to ACS’s partner carriers in that network), solely for delivery. Card and IRIS payments are processed by Euronet Merchant Services (epay) via Piraeus Bank: you pay on the bank's own secure page, and AgnusVita never sees or stores card details. Shop data is hosted on Hetzner servers within the EU, and email is sent through our mail provider. All act as processors under Art. 28 GDPR contracts. We do not transfer data outside the European Economic Area.
Data retention
Invoices and order data: 10 years, as Greek tax law requires. Account details: as long as you keep your account. Correspondence: 24 months. Newsletter addresses: until you unsubscribe. You may request deletion of your account at any time, subject to those legal obligations.
Your rights
Under the GDPR you have the right to: access your data, correct inaccurate data, request erasure, obtain a portable copy, object to processing, and withdraw consent at any time. Contact us at agnusvita@protonmail.com. You may also lodge a complaint with the Greek Data Protection Authority (ΑΠΔΠΧ, dpa.gr).
This product is not intended to diagnose, treat, cure, or prevent any disease.