Data Protection

Personal Data Processing Terms

These Personal Data Processing Terms (hereinafter referred to as the “Terms”) describe how the company INGREDA SINGLE-MEMBER S.A., headquartered in LAGKADAS, THESSALONIKI, GEMI: 159281204000 (hereinafter referred to as the “Company” or “we”), processes your personal data in order to provide its services, which include the sale and distribution of nutritional supplements, sportswear, and fitness accessories through e-commerce on the website www.nutrialis.gr (hereinafter the “Website”), as well as through other remote communication channels.

The Company is responsible for the processing of personal data in accordance with Regulation (EU) 2016/679 (GDPR) and the relevant Law No. 18/2018 on the protection of personal data and the amendment of certain laws.

All appropriate technical and organisational measures have been implemented to ensure the protection of personal data.

DEFINITIONS

• Personal data: Information relating to an identifiable natural person, directly or indirectly, through identifiers such as name, address, email, IP address, and others.
• Processing of personal data: Any operation (such as collection, recording, use, storage, or deletion) performed on personal data, whether or not by automated means.
  
  

DATA PROTECTION OFFICER

ANTONIS XANTHOPOULOS

LAGKADAS, THESSALONIKI
ask@nutrialis.gr

WHAT INFORMATION WE COLLECT AND FOR WHAT PURPOSE

Information required for registration and access to the Website/App

We collect your personal data directly from you. Specifically, you provide us with your personal data when you register for your website account, subscribe to our newsletter, and when you express your interest in being contacted by us.

In order to register on our Website or App and subsequently log in to access our personalised services, we process the following personal data:
(i) your full name,
(ii) your phone number, and
(iii) your email address.

The processing of this data is necessary for the performance of the contract between you and the Company. The legal basis for the processing of this data is Article 6(1)(b) of the GDPR.

Information required for the provision of Services

For the provision of our Services (namely the delivery of goods you have ordered / the provision of services you have purchased), we process the following personal data:
(i) your first name,
(ii) your last name,
(iii) your address,
(iv) your email address,
(v) your phone number, and
(vi) your payment card details (such as card number, expiry date, and CVV).

The processing of this data is necessary for the performance of the contract between you and the Company. The legal basis is Article 6(1)(b) of the GDPR.

Information collected for marketing purposes

In order for you to receive our new products and/or newsletters, information about discounts, updates, improvements and offers, as well as other promotional materials via email, SMS or post, we process the following personal data:
(i) first name,
(ii) last name,
(iii) email,
(iv) phone number, and
(v) address.

This data is processed on the basis of your explicit consent. The legal basis is Article 6(1)(a) of the GDPR.

If you decide that you no longer wish to receive such updates, you may withdraw your consent via the link provided in the email.
Withdrawing your consent may result in you no longer receiving updates on discounts, new offers and improvements. You may not withdraw your consent in relation to emails connected with the provision of our Services.

Information collected during your browsing of the Website/App

In order to continuously improve our Services and user experience, we process information related to:
(i) your device,
(ii) visits to or use of the Website/Services (e.g. IP address, geographic location, browser or operating system type/version, referral sources, visit duration, page navigation), and
(iii) usage data such as frequency, time, and usage patterns.

This data is processed on the basis of your explicit consent. The legal basis is Article 6(1)(a) of the GDPR.

Information from comments / reviews

When you leave a comment or review on the Website, we process the following personal data:
(i) first name,
(ii) last name,
(iii) a username of your choice, and
(iv) any other information you choose to share in your comment/review.

The processing of this data is carried out on the basis of your explicit consent. The legal basis is Article 6(1)(a) of the GDPR.

Information from communication with us

When you contact us (e.g. for support regarding the use of the Website/App/Services, returns, or issue resolution), we process the following personal data:
(i) first name,
(ii) last name,
(iii) address,
(iv) email,
(v) phone number,
(vi) communication content,
(vii) communication metadata, and
(viii) any other information you choose to share.

The processing of this data is necessary for the performance of the contract. The legal basis is Article 6(1)(b) of the GDPR.

Information during the refund process

During the refund process, we process personal data that includes:
(i) first name,
(ii) last name,
(iii) email,
(iv) phone number,
(v) address, and
(vi) IBAN.

The processing is necessary for compliance with legal obligations, in particular in accordance with Law No. 250/2007 on consumer protection and the Civil Code (Law No. 40/1964). The legal basis is Article 6(1)(c) of the GDPR.

ON WHAT BASIS DO WE PROCESS YOUR PERSONAL DATA?

In addition to the above, we have the right to process your Personal Data in order to fulfil our legal obligations under Article 6(1)(c) of the GDPR, or to protect our legitimate interests in accordance with Article 6(1)(f) of the GDPR, for example for the prevention of fraud, network and information security, and direct marketing.

We will process your Personal Data in accordance with applicable law and will protect it from misuse and/or unlawful disclosure.

HOW DO WE SHARE YOUR PERSONAL DATA?

In order to make our Website/App and/or Services available (and where necessary due to circumstances), we have the right to provide your Personal Data (and you give your consent to such provision) in accordance with the data minimisation principle, only to a limited circle of persons, our employees, subcontractors, executives, consultants, sales representatives, suppliers or affiliated parties of the Company and the Service Provider, to the extent that is reasonably necessary to achieve the purpose set out in these Terms & Conditions, and specifically to the following entities:

(i) Ingreda SINGLE-MEMBER S.A., KAVALARI, LAGKADAS THESSALONIKI

(ii) Transport companies

In addition, we may disclose your personal data:

(i) to the extent required by applicable law,

(ii) in connection with current or future legal proceedings, or

(iii) for the establishment, exercise, or defence of our legal rights (including the provision of information to third parties for the prevention of fraud and the minimisation of payment risks).

Information by which you cannot be identified:

We have the right to provide personal data that cannot identify you (such as anonymous data regarding the use of our Website/App and/or Services, links/landing pages, URLs, platform types, click counts, etc.) to third parties who are interested in such information, for the purpose of understanding the usage of certain services.

We do not share your Personal Data that enables your identification or location to third parties for direct marketing purposes.

We may allow certain third parties to publish advertisements and promotional content on our Website/App.

These third parties use technology that sends offers or links directly to your browser. In this case, they may automatically receive your IP address. They may also use technologies (such as cookies, JavaScript, or web beacons) to measure the effectiveness of their advertisements and to personalise advertising content.

We do not disclose information to these third parties that would allow them to personalise the information they receive. If an advertiser asks us to display an advertisement to a specific group of customers and you respond to it, they may assume that you belong to that group.

For more information, please read the personal data processing terms of the respective advertisers.

DO WE TRANSFER YOUR PERSONAL DATA TO THIRD COUNTRIES?

Personal data may be stored, processed, and transferred within the countries in which we conduct business activities for the purpose of processing. They may also be transferred within the EU Member States or the EEA, or to countries deemed adequate by the European Commission.

FOR HOW LONG DO WE PROCESS YOUR PERSONAL DATA?

Unless otherwise stipulated by law, we have the right to process your Personal Data for the period of time required to achieve the purpose for which they were collected, unless otherwise stated:

• For registration and access to the Website/App: From the date of registration until 30 days after its cancellation, for the purposes of terminating the contractual relationship and resolving disputes.
• For the provision of Services: From the date of the order until the delivery of the product and the payment of the purchase price.
• For marketing purposes: From the moment of consent until its withdrawal or the cancellation of registration on the Website/App.
• For use of the Website/App: As above (marketing purposes).
• For comments/reviews: As above (marketing purposes).
• For communication with us: Until the full processing of your request.
• For the refund process: In accordance with the archiving requirements under applicable special legislation.

We may retain data beyond the above periods if required for compliance with legal obligations or the defence of our rights.

HOW CAN YOU WITHDRAW YOUR CONSENT?

You may withdraw your consent at any time by sending an email to ask@nutrialis.gr

Withdrawal does not affect the lawfulness of the processing that took place prior to it.

WHAT ARE YOUR RIGHTS AND OBLIGATIONS?

Access to Your Personal Data:

Right to be informed about:

• The purpose of processing,
• The categories of data,
• The recipients,
• The storage,
• The right to rectification, erasure, or restriction,
• The right to lodge a complaint with the Data Protection Authority,
• The sources of the data, if not collected directly from you.

A reasonable fee may be charged for the re-provision of data.

Rectification of Data:

If you identify any inaccuracies, please notify us for immediate correction or completion.

Erasure of Data:

Where:

• They are no longer necessary,
• You withdraw your consent,
• You object to the processing,
• They have been unlawfully obtained,
• A legal obligation to erase exists.

We will also notify any other recipients of the erasure.

Restriction of Processing:

Where:

• You contest the accuracy of the data,
• The processing is unlawful,
• We no longer need them,
• An objection is pending.

Where processing is restricted, it will only be carried out with your consent or for the establishment, exercise, or defence of legal claims.

Portability:

You may request your data in a structured, machine-readable format for transfer to another data controller.

Objection:

You have the right to object to processing based on legitimate interests, marketing, and related profiling.

Complaint:

You may lodge a complaint with the Data Protection Authority, in accordance with Article 100 of Law No. 18/2018. 18/2018.

DO WE USE AUTOMATED DECISION-MAKING OR PROFILING?

The Company does not apply automated decision-making with legal consequences. Profiling is used solely for behavioural analysis and personalisation of services, without any significant impact on the individual.

DO WE PROCESS CHILDREN’S DATA?

No. We do not knowingly collect data from individuals under the age of 16. If you are under 16, please do not provide us with any information. If we identify such data without guardian consent, we will delete it. If you suspect any such processing, please contact us at ask@nutrialis.gr.

HOW DO WE HANDLE FINANCIAL TRANSACTIONS?

All financial transactions through the Website/App are handled by Ingreda SINGLE-MEMBER S.A., LAGKADAS, THESSALONIKI, PC 57200.

Your data is shared only to the extent required for payments, refunds, and the handling of related requests.

HOW DO WE INTERACT WITH THIRD-PARTY WEBSITES?

Our Website and App contain links and information relating to third parties. We bear no responsibility for their own data protection policies.

DO YOU HAVE ANY OTHER QUESTIONS?

If you wish to contact us regarding the processing of personal data, including if you wish to exercise any of the rights referred to in these Terms, please contact us by email at: ask@nutrialis.gr.

HOW DO WE UPDATE OUR TERMS & CONDITIONS?

We reserve the right to amend these Terms & Conditions. If we make any changes, they will be posted on the Website/App, so that you always have a complete picture of what data we collect, how we use it, and under what circumstances we may share it with third parties.

It is important to regularly review the Terms in order to stay informed of any changes.

WHAT COOKIES DO WE USE?

A cookie is a file containing an identifier (a string of letters and numbers), which is sent from a web server to a browser and stored on your device (mobile or computer), usually in anonymous form. This identifier is sent back to the server each time you visit a page, in order to recognise your visit, the advertisements you have seen, the type of browser you are using, as well as to remember the information you have entered on our Website/App.

We use cookies to personalise the content and advertisements displayed to you, to enable social media features, and for traffic analysis purposes. We share information regarding the use of our Website/App with social media, advertising, and analytics partners, who may combine it with other data that you have already provided to them.

Our cookies help us:

• to tailor our services to your needs,
• to distinguish you from other users,
• to prevent the display of irrelevant advertisements,
• to prevent you from having to log in repeatedly.

We use either “persistent” or “session” cookies:

• Persistent cookies: stored until their expiry date or until you delete them.
• Session cookies: they expire as soon as you close your browser.

We also use third-party cookies:

Third-party cookies originate from a different website, such as social networking buttons (e.g. “Like”). These cookies are read by the provider of the respective platform and are typically used for behavioural research, demographic analysis, or targeted marketing.

Cookies do not usually contain information that identifies you personally, but may be linked to personal data that we have already stored.

Technical cookies:

Essential for the operation of the online store (e.g. account creation, login, purchases). Without them, the Website/App does not function properly.

Functional cookies:

They enhance your experience by remembering your preferences (e.g. language). Your password is always stored with encryption. They are not essential, but they improve your overall experience.

Analytics cookies:

They help improve our Website/App. We use Google Analytics, which anonymises the data, meaning it is no longer considered personal. We are unable to identify which user performed which action.

We also use this information for advertisements on other websites that we consider relevant to you.

Please note that blocking or deleting cookies may have a negative impact on your use of our Website/App and Services.

Last updated: January 1, 2026