Last updated: August 19, 2026

1. Data Controller

The Data Controller is:

Panagiota Kechagia – Anemoessa

64 Trapezountos Street, ZIP Code 55132, Kalamaria, Thessaloniki

Tax ID No. 301449241

GEMI 0432289606000

Email: info@anemoesa.com & anemoesalab@gmail.com
Phone: +30 2313 252040

2. Scope

This Policy explains how we collect and use personal data when:

  • browsing the site
  • creating an account
  • placing an order
  • payment and delivery
  • communication with ANEMOESA
  • the submission of a question
  • subscription to the newsletter
  • submitting a request, complaint, or product report.

3. Data We Collect

Depending on the function, we may collect:

  • full name
  • e-mail
  • phone
  • billing and shipping address
  • zip code, city, and country
  • order and product details
  • Payment Method and Transaction Status
  • billing information, where required
  • order history
  • account information
  • messages and questions
  • newsletter preferences
  • IP addresses and technical data, as recorded by the systems
  • information regarding returns, complaints, defective products, or adverse reactions.

ANEMOESA does not store full credit card details.

4. Purposes and Legal Bases

Orders and Payments

We use the data to process, pay for, fulfill, ship, and provide support for the order.

A legal basis is the performance of the contract or the taking of measures prior to its conclusion.

Accounting and Tax Obligations

We maintain the necessary records for issuing invoices and complying with tax, accounting, and commercial laws.

A legal basis is compliance with a legal obligation.

Customer Account

We use the data to create and maintain the optional account, display history, and manage addresses.

The legal basis is the provision of the service requested by the user.

Contact and Support

We use this information to respond to questions, requests, complaints, or product-related issues.

Depending on the request, the legal basis is the performance of a contract, the taking of pre-contractual measures, or our legitimate interest in serving our users and protecting our rights.

Newsletter

We send newsletters when a user has actively and voluntarily chosen to receive updates.

Consent may be revoked at any time by clicking the unsubscribe link included in the messages or by contacting info@anemoesa.com & anemoesalab@gmail.com.

The withdrawal does not affect the lawfulness of the processing that took place prior to it.

Post a Question

A question may be used or published in digital content only if the user has selected the corresponding optional field.

The question is published without a name, email address, or other direct identifying information, unless otherwise expressly agreed.

Security and Fraud Prevention

We may process technical data to ensure the security of the site, prevent malicious activities, protect transactions, and address security incidents.

The legal basis is our legitimate interest in the secure operation of the online store.

5. "Ask ANEMOESA" Form

The form can collect:

  • name, optional
  • e-mail
  • topic or category
  • text of the question.

Users should not use the general form to submit a complete medical history, diagnoses, photographs of medical conditions, or other health information that is not necessary for submitting the question.

The answers provide general information about cosmetics, ingredients, and raw materials. They do not constitute a medical diagnosis, treatment advice, or a recommendation for the manufacture of cosmetic products.

The form includes:

  • Mandatory Notice Regarding the Privacy Policy
  • Optional permission to publish the question without identifying information
  • Optional email notification when a post is published
  • Optional newsletter subscription.

Optional selections are separate and not preselected.

6. Data Recipients

Data may be transferred, to the extent necessary, to:

  • hosting and technical infrastructure provider
  • authorized technical administrator of the site
  • Speedex or another partner carrier for delivery
  • Stripe and related payment services
  • PayPal
  • Klarna
  • banks and IRIS providers
  • accounting, tax, or legal partners
  • Brevo, when the relevant interface is activated
  • competent authorities when there is a legal obligation to do so.

Recipients receive only the data necessary for the respective service or obligation.

7. Access to Data

Only authorized individuals have access to the administrative interface, including the Head of Research and Development and the technical administrator.

Access is restricted based on role and actual operational needs.

8. International Transfers

Some providers may process data outside the European Economic Area.

Where required, transfers are carried out on the basis of an adequacy decision, standard contractual clauses, or another lawful transfer mechanism.

9. Shelf life

We retain personal data only for as long as necessary for the purpose for which it was collected and to comply with our legal obligations.

Specifically:

  • Order, transaction, and document records are retained for as long as required by tax, accounting, and commercial laws
  • Account information is retained until the account is deleted, with the exception of data that must be retained for legal reasons
  • Newsletter data is retained until consent is withdrawn or the subscriber unsubscribes
  • Questions and service requests are retained for as long as necessary to respond to them and for a reasonable period after the request is completed
  • Consents may be retained for as long as necessary to demonstrate lawful processing
  • Technical logs, form entries, and backups are maintained in accordance with the security and retention policies of the respective systems.

The exact technical times for logs, backups, and form submissions will be added after confirmation by the technical administrator.

Data may be retained for a longer period when necessary to establish, exercise, or defend legal claims or to comply with a legal obligation.

10. Rights

The user may, in accordance with the legal requirements, request:

  • access to his data
  • correction of inaccurate or incomplete information
  • deletion
  • restriction of processing
  • portability
  • opposition
  • Withdrawal of consent.

These rights are not absolute and may be restricted when retention or processing is required by law or to support legal claims.

Requests should be submitted to info@anemoesa.com and anemoesalab@gmail.com.

11. Complaint

The user may file a complaint with the Personal Data Protection Authority if he or she believes that the processing of his or her data violates applicable law.

12. Safety

We take appropriate technical and organizational measures, such as:

  • SSL-encrypted connection
  • restricted and controlled access
  • system updates
  • backup
  • measures to protect accounts and the management environment.

No system can guarantee absolute security.

In the event of a security incident, the established procedures for assessment, response, and, where necessary, notification are implemented.

13. Amendments

This Policy may be updated due to changes in features, providers, or legislation.

The date of the last update appears at the top of the page.