Bee Factor Natural Cosmetics – beefactor.gr
1. Data Controller
The data controller for your personal data is the company:
Name: BEE FACTOR I.K.E.
English rendering: BEE FACTOR P.C.
Trade name: BEE FACTOR
G.E.MI. (Commercial Registry No.): 187263753000
EUID: ELGEMI.187263753000
VAT No.: 803007174
Tax Office: Trikala
Registered office: 90 Kalampakas Street, Trikala, 42100, Greece
Telephone: 24310 78026
(hereinafter the “Company”, “we”)
BEE FACTOR I.K.E. is the Data Controller of your personal data when you use the website beefactor.gr, place an order or contact us.
Respecting and protecting your personal data is a permanent and fundamental commitment for us.
2. What personal data we collect
Depending on your relationship with Bee Factor (e.g. e-shop customer, partner, casual visitor), we may process the following categories of data:
2.1 Identification & contact details
Full name
Shipping / billing address
Region, postcode, city, country
Contact telephone (landline or mobile)
Email address
2.2 Invoicing & payment details
VAT number, tax office (in the case of an invoice)
Company name / profession (where required)
Bank account (IBAN) in the case of a refund by bank deposit
(Note: we do not store full card details; card payments are processed by authorised payment providers.)
2.3 Order & transaction data
Products you have purchased
Date and value of orders
Payment method & shipping method
Communication history regarding the order (e.g. emails, telephone notes)
2.4 Communication & support data
Content of messages you send us (email, contact forms, social media)
Support requests, complaints, comments
In the withdrawal and product-issue forms we process your contact details, the purchase details you provide, the description of your request and any optional photos or documents. Attachments are sent to the customer care team with the request and are not published on the website. Please avoid including information that is not necessary for examining your request.
Handling support requests does not constitute newsletter subscription. Receiving promotional messages requires separate consent.
2.5 Marketing & preference data
Participation in newsletters / mailing lists
Preferences regarding receipt of informational or promotional messages
2.6 Browsing data & cookies
IP address, device type, browser
Information from cookies and similar technologies (e.g. Google Analytics, Meta Pixel, TikTok Pixel, server-side tagging, etc.)
Consent is required for device identifiers and cookies used for statistical analysis or advertising. Server-side tagging or hashing does not in itself make data anonymous. See the Cookie Policy for the categories and for managing your choices.
3. Purposes for which we use your data
We process your personal data solely for lawful purposes, for example:
Performance of the contract / order
Receiving, processing and shipping the order
Issuing receipts / invoices
Communication to fulfil the order or resolve any issues
Customer service & communication
Answering your questions
Handling return / withdrawal requests
Communication on product and safety matters, updates, etc.
Compliance with legal obligations
Keeping tax records
Meeting obligations under commercial and tax law
Complying with requests from authorities (where required)
Service improvement & security
Statistical analysis of sales data (in aggregated, anonymous form)
Monitoring website performance and optimising user experience
Protection against fraud, malicious use and unauthorised access
Commercial communication & marketing (with consent)
Sending newsletters, informational & promotional messages
Use of marketing / remarketing cookies (e.g. Google Ads, Meta, TikTok)
Personalisation of content and offers, where you have accepted the relevant cookies
4. Legal bases for processing
The processing of your personal data is based on one or more of the following legal bases:
Performance of a contract
When processing is necessary to fulfil your order or to provide you with our services (e.g. shipping products, customer service).Legal obligation
When processing is required by applicable law (e.g. keeping tax records).Legitimate interest of the company
When processing is necessary for:protecting our rights and property
preventing and managing any claims
ensuring the security of systems and transactions
Always with respect for your rights and freedoms.
Consent
When it concerns:sending newsletters / promotional messages
use of non-essential cookies (e.g. marketing and analytics)
You may withdraw your consent at any time.
5. Where we collect your data from
Personal data is collected mainly:
directly from you, when you:
place an order on the e-shop
fill in contact forms or create an account
contact us (email, telephone, social media)
from your use of the website (through cookies and similar technologies)
from contracts / partnership agreements (for B2B customers, partners, etc.)
6. Retention period of personal data
We keep your data only for as long as is necessary for the purposes for which it was collected and/or as required by applicable law.
For example:
Invoicing & tax data: for the period defined by tax legislation.
Customer & order data: for as long as necessary to handle any claims, warranties and legal claims.
Newsletter / marketing data: until you withdraw your consent or request deletion.
Communication data: for a reasonable period so that requests can be answered and the communication documented.
After the respective periods have passed, personal data is securely deleted or anonymised.
7. How we protect your personal data
We take all appropriate technical and organisational security measures to protect your data, such as, for example:
Use of servers in access-controlled facilities.
Restricting access to data to authorised persons only (“need-to-know”).
Use of up-to-date security systems, firewalls and malware protection measures.
Secure deletion / destruction procedures when data is no longer necessary.
Maintaining confidentiality agreements with employees and partners.
Continuous training and awareness-raising of staff on data protection.
8. Who we share your data with
Your personal data may be transferred, where necessary, to:
Partner courier and transport companies, for the delivery of your orders.
Payment service providers, banks, card providers.
Accountants, tax advisers & consultants, to fulfil tax and accounting obligations.
Hosting, IT, email & newsletter platform providers, for the operation of our website and systems.
Analytics & advertising platforms (e.g. Google, Meta, TikTok), when you have accepted the relevant cookies.
Depending on the service, recipients may act as processors on our behalf or as independent controllers, as may be the case with payment providers and public authorities. Where they act as processors, the relevant contractual data-protection commitments are required.
Your data may also be disclosed to competent public authorities when required by law.
9. Data transfers outside the EEA
Certain providers, such as Google, Meta and TikTok, may process data outside the European Economic Area. Where such a transfer takes place, a lawful mechanism is required under the GDPR, such as an applicable adequacy decision or appropriate safeguards, including standard contractual clauses where applicable.
Consent for non-essential cookies concerns their use and does not in itself replace the requirements for international transfers. The legal basis for processing depends on the purpose and is described in section 4.
10. Your rights
You have the following rights regarding your personal data:
Right of access: to be informed whether we process your data and to receive a copy.
Right to rectification: to request correction of inaccurate or incomplete data.
Right to erasure (“right to be forgotten”), under certain conditions.
Right to restriction of processing, under certain conditions.
Right to object to processing based on legitimate interest.
Right to data portability: to receive your data in a structured, commonly used and machine-readable format, where processing is based on contract or consent.
Right to withdraw consent at any time, without affecting the lawfulness of processing carried out before.
You also have the right to lodge a complaint with the competent supervisory authority:
Hellenic Data Protection Authority (HDPA)
Website: http://www.dpa.gr
11. Consequences of not providing data
Providing certain personal data is necessary for:
completing and shipping an order
issuing tax documents
handling your requests
If you choose not to provide the required data, it may not be possible to provide the corresponding services (e.g. an order may not be completed).
12. Data Protection Officer (DPO) & Contact
We have appointed as the Data Protection Officer (DPO) of our company:
Ioanna Bellou
For any matter regarding the processing of your personal data or to exercise your rights, you can contact us:
by email: info@beefactor.gr
by post:
Bee Factor Natural Cosmetics
90 Kalampakas Street, Trikala, 42100
Attn: Data Protection Officer
13. Updates to this Policy
This Privacy Policy may be amended when deemed necessary (e.g. due to changes in legislation or in our services).
Last updated: 01/10/2026
Each updated version will be posted on the website beefactor.gr. We recommend that you check the Privacy Policy periodically to stay informed of any changes.