Privacy policy

This policy explains how GoKiosk (the company ΚΟΥΒΑΡΙΤΑΚΗΣ Ι.Κ.Ε.) processes personal data when you visit www.gokiosk.gr and use related services such as contact/checkout forms.

1. Data controller

For website visitors, contact requests and the checkout flow (where applicable), the data controller is ΚΟΥΒΑΡΙΤΑΚΗΣ Ι.Κ.Ε.. For privacy requests you can contact info@gokiosk.gr.

For data that our customers may process inside the GoKiosk system as part of their own operations (e.g. end customer order data), GoKiosk typically acts as a “data processor” under GDPR, while the customer business is the data controller that defines the purposes and means of processing.

ΚΟΥΒΑΡΙΤΑΚΗΣ Ι.Κ.Ε. — ΑΦΜ 801762160 — ΓΕΜΗ 162862206000 — info@gokiosk.gr — 2311320272

2. Who this covers

This policy covers:

• Visitors of www.gokiosk.gr.
• People who submit the contact form.
• People who start a checkout/payment flow (where applicable).
• Customers we support/operate (where needed for service delivery).

3. What data we collect

• Contact details (company/name, email, message).
• Optional information (city/area, business type, model/plan of interest).
• Checkout data (where applicable): details required to prepare an order, redirect you to a payment provider and issue invoices (e.g. billing details such as VAT number).
• Technical data (e.g. IP address, browser/device) for security and troubleshooting.

4. Why we process data

• To respond to your requests and provide an offer.
• To process an order and redirect to a payment provider (where applicable).
• To maintain security and prevent abuse.
• Analytics (Google Analytics) only with your consent.

5. Legal bases

• Performance of contract / steps prior to entering a contract (where applicable).
• Legitimate interests (security, abuse prevention, service operation).
• Legal obligation (e.g. invoicing/tax requirements where applicable).
• Consent (analytics cookies and measurement).

6. Retention

• Contact requests: kept for a reasonable period to handle follow‑ups (e.g. up to 24 months).
• Order/invoicing data: kept as long as required by applicable law.
• Technical logs: kept for a limited period (typically up to 12 months) for security.

7. Sharing / sub‑processors

We do not sell personal data. We may share data with service providers necessary to operate the service, such as:

• Hosting / infrastructure providers.
• Email delivery providers (for transactional emails and responses).
• Payment providers (e.g. Stripe) to complete payments — the provider may act as an independent data controller for payment data.
• Analytics providers (Google Analytics) only with consent.

These partners are contractually required to apply appropriate security measures and confidentiality. We may also disclose data to authorities when legally required.

8. Cookies & analytics

Learn more on the cookies policy. Analytics cookies are enabled only if you choose “Accept all”. You can change your choice anytime via “Cookie settings” in the footer.

9. Your rights

Depending on the applicable law (GDPR), you may have rights of access, rectification, deletion, restriction, portability and objection. To exercise your rights contact info@gokiosk.gr.

You can withdraw consent for analytics at any time via “Cookie settings”. You may also lodge a complaint with your local data protection authority.

10. Security

We apply technical and organisational measures to protect personal data. However, no internet transmission can be guaranteed to be 100% secure.

11. Changes to this policy

We may update this policy from time to time. The latest version is published on this page.