Privacy & Cookies Policy

Last updated: October 2026

1. Data Controller

The controller of your personal data is the company:

• DelliCap PC — Packaging Materials
• Registered office: Parodos Magnisias, Nea Ionia, Thessaloniki (Nea Magnisia, PO Box 1673)
• Telephone: +30 21 1444 5261
• Email: info@dellicap.gr

2. What data we collect

We collect only the data necessary to serve you. Specifically:

a) Contact form & quote request

• Full name and/or business name
• Email address
• Telephone (optional)
• The content of your message or request (products, quantities, specifications)

With every form we also keep the exact consent text you accepted and the date, so that we can demonstrate your consent (Article 7(1) GDPR). We do not store your IP address or browser details with form submissions, and our forms set no tracking cookies.

Catalogue link. When you request the catalogue, we email you a personal link that opens it for viewing on our website for 30 days; each page shows your email address as a watermark. Our customers use a shared customer link, which is not linked to any individual and records nothing. We note only how many times and when you open it (not your IP address, your device, or what you do on our website), so we know it reached you and can follow up on your request — our legitimate interest (Article 6(1)(f) GDPR). The email also contains a link that opens the catalogue without tracking; using it deletes anything already recorded and stops recording. This information is kept together with your request and deleted with it.

b) Catalogue requests

• Email address, business name and telephone, in order to send you the catalogue in PDF format.
• Only if you tick the separate, optional box: your wish to receive updates about new products.
• The catalogue is sent as a personal link valid for 30 days; it stops working as soon as your details are deleted.

c) Browsing data (via cookies)

• IP address, device/browser type, pages you visited and usage statistics — only where you accept the relevant cookies (see section 8).

We do not collect special categories of data (e.g. health data) and we do not address minors.

3. Purposes & legal basis for processing

4. Retention period

• Contact requests, quotes & catalogue requests: 24 months from submission, after which they are deleted automatically — unless a business relationship arises.
• Customer details/invoices: for as long as tax legislation requires (at least 5 years).
• Newsletter email: until you withdraw your consent.
• Cookie data: in accordance with the duration of each cookie (see section 8).

5. Recipients & third-party providers

We do not sell or rent your data. It may be processed, as processors bound by confidentiality agreements, by the following categories:

• Website hosting provider — storage of the website's data.
• Forms: our forms run on our own website (WPForms plugin). Submissions are stored only on our server; they are not transmitted to the plugin's developer. The related emails are sent through the email delivery provider below.
• Email delivery (Resend, Resend Inc.): sends the website's emails — the confirmation or catalogue you requested, and the notification of your request to our mailbox. It processes your name, email address and the content of your message solely to deliver them, and does not use them for any other purpose.
• Spam protection (Cloudflare Turnstile, Cloudflare Inc.): before a form is submitted, it checks that it is being filled in by a person and not an automated program. For this check it receives technical data (IP address, browser details); it uses no advertising cookies and does not use the data for advertising. Legal basis: our legitimate interest in protecting the website and our mailbox from abuse (Article 6(1)(f) GDPR).
• Statistical analysis services (e.g. Google Analytics / Google Search Console), where you have consented.
• Accounting & legal services, where required by law.

6. Transfers outside the EEA

Certain providers (Google, Resend, Cloudflare) may process data in countries outside the European Economic Area. In such cases, the transfer is safeguarded by the Standard Contractual Clauses (SCCs) approved by the European Commission or other appropriate safeguards under Article 46 GDPR.

7. Your rights

As a data subject, you have the following rights:

• Access — to find out what data we hold about you.
• Rectification — to correct inaccurate details.
• Erasure ("right to be forgotten") — to request their deletion.
• Restriction of processing.
• Portability — to receive your data in a structured, readable format.
• Objection to processing based on legitimate interest.
• Withdrawal of consent at any time, without retroactive effect.

To exercise any right, please contact info@dellicap.gr. We respond within one (1) month. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr, Kifisias 1-3, 115 23 Athens).

8. Cookies & similar technologies

Cookies are small text files stored on your device. We use the following categories:

On your first visit, a relevant banner appears where you can accept or reject non-necessary cookies. You can also manage or delete cookies from your browser settings at any time.

9. Data security

We apply appropriate technical and organisational measures (SSL/HTTPS encryption, firewall, restricted access, regular backups) to protect your data from unauthorised access, loss or alteration.

10. Changes to this policy

We may update this policy. Any change is posted on this page with an updated date. We recommend you review it periodically.

11. Contact

For any question regarding this policy or the processing of your data:

• Email: info@dellicap.gr
• Telephone: +30 21 1444 5261