Privacy & cookie policy
How we process personal data on bailu.gr, which third-party technologies we use and what your rights are.
Last updated: August 2026
1. Data controller
The data controller is BAILU (Lucie Pasova), 37 Kolokotroni St., Patras 26221, Greece, GEMI 162663716000, email info@bailu.gr, phone +30 2614 011305. You can contact us directly about anything concerning your data.
2. What data we collect
The website has no contact forms and collects no customer data for retail sales. We process data in the following cases:
- Contact on your initiative: when you email or call us, we process the details you provide (name, email, phone, business details) in order to answer your request.
- Newsletter: if you subscribe voluntarily, your email address is stored on the Brevo platform for the purpose of sending updates.
- Technical data: IP address, device and browser type, pages visited, through cookies and analytics services, where you have given consent.
- B2B partner data: business and contact details for the performance of the partnership and for invoicing.
3. Purposes and legal bases
- Responding to enquiries and communication: legitimate interest and pre-contractual measures (Art. 6(1)(b), (f) GDPR).
- Sending the newsletter: consent (Art. 6(1)(a)), revocable at any time.
- Statistics and advertising measurement: consent through the cookie banner.
- Security, abuse prevention and service stability, legitimate interest.
- Accounting and tax obligations for wholesale partnerships, legal obligation.
4. Cookies and consent
We use the Cookiebot consent management platform. On your first visit a banner appears where you choose which cookie categories you accept. Strictly necessary cookies always operate; statistics, preference and marketing cookies are activated only after your consent.
- Necessary: network security and operation (Cloudflare), storing your cookie choice.
- Preferences: local storage of your light or dark theme choice on your device (never sent to us).
- Statistics: Google Analytics via Google Tag Manager.
- Marketing: Google Ads, Meta Ads and TikTok Ads pixels, via Google Tag Manager.
You can change or withdraw your consent at any time from the cookie icon of the banner, or by deleting cookies in your browser.
5. Third-party services
- Cloudflare: (CDN, security, Turnstile), processing of technical data to protect and deliver the website. Cloudflare privacy policy.
- Google Tag Manager / Google Analytics / Google Ads: traffic and campaign measurement, after consent. Google privacy policy.
- Meta Ads pixel: advertising measurement, after consent. Meta privacy policy.
- TikTok Ads pixel: advertising measurement, after consent. TikTok privacy policy.
- Microsoft Clarity: visitor behaviour analytics (heatmaps and anonymised session recordings), after consent. Microsoft privacy statement.
- Hotjar: heatmaps and usage statistics to improve the experience, after consent. Hotjar privacy policy.
- LiveChat: live support chat service, loaded only after consent and only when you open it. LiveChat privacy policy.
- Cookiebot (Usercentrics): recording and managing consent. Cookiebot privacy policy.
- Google Maps: map display on the Contact page, loaded lazily and only when it enters the viewport. Google privacy policy.
- YouTube (privacy-enhanced mode, youtube-nocookie.com): playback of presentation videos. Google privacy policy.
- Brevo: hosting the newsletter sign-up and sending the newsletter. Brevo privacy policy.
Some of these providers may transfer data outside the EEA. In such cases the transfer relies on adequacy decisions or on the European Commission's standard contractual clauses.
6. Retention periods
- Correspondence: up to 24 months from the last contact, unless a partnership results.
- Partner and invoicing data: as long as tax law requires (generally 5–10 years).
- Newsletter: until you withdraw consent or unsubscribe.
- Cookies: according to each cookie's lifetime, as listed in the consent banner.
7. Your rights
You have the right of access, rectification, erasure, restriction of processing, objection and data portability, as well as the right to withdraw consent at any time. To exercise them, email info@bailu.gr; we respond within one month.
If you believe processing infringes the law, you may lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).
8. Useful links on cookies and GDPR
For more information about cookies and your rights under European law:
- General Data Protection Regulation (GDPR), Regulation (EU) 2016/679
- Directive 2002/58/EC on privacy in electronic communications (ePrivacy, cookies)
- EU data protection: your rights (European Commission)
- European Data Protection Board (EDPB)
- Hellenic Data Protection Authority (Greece)
- How to manage cookies in your browser
9. Security and minors
We use HTTPS encryption, controlled access to data and network protection services. The website is not directed at children under 16 and we do not knowingly collect their data.
This policy may be updated. The current version is always available on this page.