No customer account
The website does not create customer profiles and has no login or online shop.
05 · Privacy & GDPR
The website is designed without customer accounts, analytics or advertising trackers. This page explains what happens when you choose to contact the store.
Effective 22 September 2026 · Last updated: 22 September 2026
Summary
These statements describe the current static website and its available contact methods. If its operation changes or a new service is added, this notice will be updated.
The website does not create customer profiles and has no login or online shop.
The current code loads no analytics, advertising pixels, social widgets or embedded map.
The contact form prepares an email message on your device. The website does not send or store its fields.
Only if you send from your email application does the message pass through your provider and reach the business Gmail account.
Data controller
The data controller is Δρόσος Ιωάννης, trading as Drosos Paints. You may use the details below for privacy enquiries.
When you send email
Contact is optional. Do not send payment information, passwords, identity documents or special-category personal data.
Depending on the request, processing is based on steps taken at your request before a contract, or on the controller’s legitimate interests in handling general correspondence, security and record keeping.
Messages are kept only as long as needed to answer and complete the relevant enquiry. If a transaction or legal obligation follows, necessary records may be retained for the period required by applicable law and are then deleted or archived with restricted access.
Providers and technical records
The website does not transmit contact-form fields. When you send email, the sender’s and recipient’s email providers take part.
The recipient is drosospaints@gmail.com. Google and your own email provider may process the message under their respective terms and safeguards.
The hosting infrastructure and authorised technical providers may create necessary access logs such as IP address, time, route and browser type solely for operation, security and error investigation. Access is limited to those who need it for these purposes.
Your rights
Subject to GDPR conditions, you may request access, correction, erasure, restriction, objection and portability. Where processing relies on consent, you may withdraw it for the future.
Updates
Any new feature, cookie, analytics tool or external service will be assessed before activation and, where needed, this notice will be updated accordingly.