Privacy Policy

This notice explains what personal data Almeco collects when you use almeco.gr, why we collect it, how long we keep it, and the choices you have. It applies to visitors, account holders, partners, and anyone who contacts us through the site.

B&N Contract Furniture SA
4th km Oraiokastro–Diavata, 570 13 Oraiokastro
info@bn-group.gr
+30 2310 570585

We collect only what we need to answer your enquiry or run your account.

• Identity: full name, company name, VAT / AFM (when supplied for a quote).
• Contact: email, phone, postal address.
• Account: hashed password (if you sign in with email), Google OAuth identifier (if you sign in with Google), preferred language.
• Activity on this site: pages viewed, search queries, items added to favourites / quote cart.
• Technical: IP address, browser type, the country your IP resolves to (used for default language).

Each item above is processed for one of the following purposes:

• To reply to a quote request, message, or showroom visit you've sent us (legal basis: pre-contractual measures or our legitimate interest in responding).
• To run your account so you can see your quote history, save addresses, and pick a default language (legal basis: contract performance).
• To verify a VAT / AFM number against the AADE business registry when you submit a quote in Greek-mode (legal basis: legitimate interest in confirming a counterparty before transacting).
• To keep the site secure, debug bugs, and improve product flows (legal basis: legitimate interest).

Quote requests and related correspondence: seven years from the last interaction (commercial / tax law minimum). Account profiles: until you ask us to delete the account. Anonymous analytics: 14 months. Cookies: see the Cookie Policy for per-cookie retention.

We share data only with processors who need it to run the service, and only under written terms.

• Supabase (hosting our database and authentication).
• Vercel (hosting the website itself).
• Resend (sending you transactional emails).
• Google (when you sign in via Google OAuth, only to verify your identity).

Under the EU General Data Protection Regulation you can:

• Ask for a copy of the personal data we hold about you.
• Correct anything that's wrong or out of date.
• Ask us to delete your data when we don't legally need to keep it.
• Object to processing or ask us to limit how we use it.
• Lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

To exercise any of these rights, email the address above. We respond within 30 days.

We use a small number of strictly necessary cookies plus an optional analytics layer that runs only if you accept it in the cookie banner. The full list, with retention per cookie, is on the Cookie Policy page.

We may update this notice as the product or the law changes. The date at the top reflects the most recent revision; material changes are communicated via the website.