1. Data Controller

ONAERON - info@onaeron.com - www.onaeron.com

2. Data We Collect

When you browse or use our website, we may collect the following information:

Identity details: name, surname, shipping and billing address
Contact details: email, phone number
Payment information: processed securely through Stripe (we do not store card details)
Technical data: IP address, device type, browser information, cookies
Contact form details: name, email, message content
Newsletter data: email address and your consent to receive updates

3. Purpose and Legal Basis of Processing

We process your data for the following purposes:

PurposeLegal BasisOrder processing and deliveryPerformance of a contractCommunication and customer supportLegitimate interest or consentInvoicing and compliance with tax regulationsLegal obligationNewsletter subscription and marketing emailsConsentWebsite improvement and traffic analyticsLegitimate interestSecurity and fraud preventionLegitimate interest

4. Cookies & Analytics

We use cookies to:

ensure proper website functionality (essential cookies)
analyze traffic and improve user experience
remember your preferences (language, cart, etc.)

You can manage or disable cookies through your browser settings.

5. Data Sharing with Third Parties

We only share your data when necessary:

Stripe Payments Europe, Ltd. – for secure payment processing
Courier / shipping providers – for product delivery
Technical partners / web maintenance – for site functionality

All third-party service providers are bound by confidentiality and data protection agreements.

6. Data Retention

Order data: kept for up to 5 years (for legal and tax reasons)
Newsletter: until you withdraw your consent
Cookies and analytics: according to your browser or cookie preferences

7. Data Security

We use technical and organizational measures to protect your personal data (SSL encryption, restricted access, secure storage).

8. Your Rights

Under the GDPR, you have the right to:

access your data
correct inaccurate information
request deletion (“right to be forgotten”)
restrict or object to processing
data portability
withdraw consent at any time (e.g. unsubscribe from newsletter)

To exercise your rights, contact us at info@onaeron.com.
If you believe your data protection rights are being violated, you may contact the Hellenic Data Protection Authority (HDPA) at www.dpa.gr.

9. Minors

Our services are intended for individuals over 16 years old. We do not knowingly collect personal data from minors. If we become aware of such collection, the data will be deleted immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The date above indicates the latest revision. Any significant changes will be communicated via our website or email.