Privacy Policy

Last updated: October 3rd, 2026

1. Introduction

Koubaras Ltd (“Koubaras”, “we”, “us” or “our”) is committed to protecting personal data and respecting the privacy of visitors to www.koubaras.eu (the “Website”).

This Privacy Policy explains how we collect, use, store and disclose personal data when you visit our Website, contact us, subscribe to our newsletter, submit information through forms available on our Website (including forms provided by third-party services such as Typeform), or otherwise interact with us through the Website.

It also explains the legal bases on which we process personal data, how long we retain it, when it may be shared with third parties and how you can exercise your rights under applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

We process personal data in accordance with applicable data protection legislation. Visiting the Website does not, by itself, constitute consent to every type of processing described in this Policy. Where consent is required, we will request it separately.

2. Who is responsible for your personal data?

The data controller responsible for the processing described in this Policy is:

Koubaras Ltd

Registered office / business address: 43 Solonos Street, 10672, Athens Greece
Additional office address: 1A Tainarou Street, 3048, Limassol, Cyprus
Email: hello@koubaras.eu
Telephone: +30 216 0708 037 / +357 96 66 8347
Greek General Commercial Registry (G.E.MI.): 154643801001

3. What personal data do we collect?

The personal data we process depends on how you interact with the Website.

3.1 Information you provide directly

When you contact us through a contact form, by email or by telephone, or submit information through a form available on our Website, including forms provided by Typeform, we may process the following personal data, as applicable:

Your first and last name;
Your company name or other professional affiliation;
Your email address;
Your telephone number;
The content of your message, enquiry or responses to the form questions;
Any other information you choose to provide through the form or during subsequent communications.

We use this information to respond to your enquiries, assess and follow up on requests, communicate with you, and take any further steps relevant to the purpose of the form.

Please avoid including sensitive personal data in your message unless it is genuinely necessary.

3.2 Newsletter Subscriptions

If you subscribe to our newsletter, we may process your email address and any additional information you provide through the subscription form to manage your subscription, maintain our mailing list, record your preferences and send you newsletter communications.

We use MailerLite, a third-party email marketing service provider, to manage our newsletter subscriptions and distribute newsletter communications. MailerLite processes subscribers’ personal data on our behalf in accordance with the applicable data processing arrangements.

Where enabled and permitted by applicable law, we may also process information about the delivery of our newsletters and your interactions with them, such as whether you open an email or click on a link, to assess newsletter performance and improve our communications.

You may unsubscribe at any time by using the unsubscribe link included in our newsletter. Following your unsubscribe request, we will stop sending you newsletter communications, subject to any limited retention necessary to maintain suppression records or comply with legal obligations.

For further information about MailerLite’s data processing practices, please consult its Privacy Policy.

3.3 Website usage and technical information

When you visit the Website, certain technical information may be processed automatically by Wix and other service providers involved in the Website’s operation, hosting and security. Depending on the configuration of the Website, this may include your IP address, browser and device information, operating system, access times and technical information relating to requests made to the Website.

3.4 Cookies and similar technologies

The Website may use cookies and similar technologies that are necessary for its operation, security and functionality. Additional cookies or similar technologies may be used where analytics, embedded third-party content or other services are enabled on the Website.

Information about the cookies and similar technologies actually used, their purposes, providers and retention periods will be made available through the Website’s cookie notice or policy, as applicable.

Where required by applicable law, non-essential cookies and similar technologies will only be activated after the necessary consent has been obtained. You can manage your cookie preferences through the Website’s cookie settings, where available.

4. Why do we process personal data and on what legal basis?

We process personal data only where a valid legal basis under Article 6 of the General Data Protection Regulation (GDPR) applies. The legal basis depends on the purpose of the processing and the circumstances in which the personal data are collected.

We may process personal data for the following purposes:

Responding to enquiries and requests

We process personal data submitted through the Website, including forms provided through Typeform, to respond to enquiries, assess requests and manage subsequent communications. The legal basis is taking steps at your request prior to entering into a contract, where applicable, or our legitimate interests in responding to enquiries and managing business communications, where appropriate.

Managing newsletter subscriptions

We process personal data to manage newsletter subscriptions and send newsletter communications through MailerLite. The legal basis is your consent, where required by applicable law. You may withdraw your consent at any time by unsubscribing from the newsletter.

Operating, maintaining and securing the Website

We may process technical information through Wix and relevant service providers to operate, maintain and protect the Website, including addressing technical issues and preventing unauthorised or malicious activity. The legal basis is our legitimate interests in operating, maintaining and securing the Website, where applicable, or compliance with a legal obligation where required.

Complying with legal and regulatory obligations

We may process personal data where necessary to comply with applicable legal or regulatory requirements. The legal basis is compliance with a legal obligation to which we are subject.

Website analytics and non-essential tracking technologies

Where analytics, advertising or other non-essential tracking technologies are enabled, we may process relevant information to measure Website usage or support the relevant functionality. The applicable legal basis will depend on the specific processing activity and the relevant legal requirements. Where required by applicable law, we will obtain your consent before activating non-essential cookies or similar technologies.

Where we rely on legitimate interests, we consider those interests and balance them against your rights and freedoms. Further information about the relevant legitimate interests can be provided upon request.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

The legal bases described above reflect the purposes for which we may process personal data. The applicable legal basis for each activity will be determined in accordance with our actual processing practices and applicable law.

5. Is providing personal data mandatory?

In general, you may choose whether to provide personal data through the Website. However, certain information may be necessary for us to respond to your enquiry, manage your newsletter subscription or provide a service you have requested.

Where specific information is required for a particular purpose, we will indicate which fields are mandatory, where applicable, and explain the consequences of not providing the requested information. If you do not provide the necessary information, we may be unable to respond to your enquiry, manage your subscription or fulfil your request.

6. How long do we retain personal data?

We retain personal data only for as long as necessary for the purposes for which they were collected, taking into account applicable legal requirements, the nature of the information and the need to establish, exercise or defend legal claims.

The retention period depends on the purpose for which the personal data are processed. We determine the appropriate retention period by considering the nature and sensitivity of the data, the purpose of processing, whether that purpose can be achieved by other means, and any applicable legal or regulatory retention requirements.

Personal data submitted through contact forms and other enquiry forms are retained for as long as necessary to respond to and manage the relevant enquiry and any subsequent business communication.

Newsletter subscription data are retained for as long as the subscription remains active. Following an unsubscribe request, we stop sending newsletter communications and retain only such information as may be necessary to record and respect the unsubscribe request or demonstrate compliance with applicable legal obligations.

Technical logs, security records and cookie or analytics data, where applicable, are retained in accordance with the relevant settings, retention periods and practices of our Website platform and service providers, subject to applicable law.

Where personal data must be retained to comply with legal or regulatory obligations, or are necessary to establish, exercise or defend legal claims, they may be retained for the period required or justified for those purposes.

When personal data are no longer required, they will be securely deleted or anonymised, subject to applicable legal retention obligations.

7. Who may receive your personal data?

Where necessary for the purposes described in this Privacy Policy, personal data may be accessed by or shared with the following categories of recipients:

Our authorised personnel, where access is necessary to perform their duties;
Website platform and technical service providers, including Wix, for the operation, hosting, maintenance and security of our Website;
Form service providers, including Typeform, for the collection and management of information submitted through our forms;
Email and newsletter service providers, including MailerLite, for the management of newsletter subscriptions and distribution of newsletter communications;
Professional advisers, auditors and other service providers, where necessary for legitimate business or compliance purposes;
Public authorities, courts and regulatory bodies, where disclosure is required by law or necessary to establish, exercise or defend legal claims.

Where third parties process personal data on our behalf, we will implement the safeguards required by applicable data protection law, including appropriate data processing agreements where necessary.

We disclose personal data only where there is an appropriate legal basis and where the disclosure is necessary for the relevant purpose.

8. International transfers of personal data

Some of our service providers and their sub-processors may process personal data in countries outside the European Economic Area (EEA).

Where personal data are transferred outside the EEA, we will ensure that the transfer complies with applicable data protection legislation. Depending on the circumstances, this may involve a European Commission adequacy decision or appropriate safeguards, such as Standard Contractual Clauses, together with any supplementary measures required by applicable law.

Further information about the relevant safeguards may be requested by contacting us using the details provided in this Privacy Policy.

9. Your data protection rights

Subject to the conditions and limitations set out in applicable data protection law, you may have the right to:

Access your personal data and obtain information about how they are processed;
Rectify inaccurate or incomplete personal data;
Erase your personal data where the legal conditions for erasure are met;
Restrict the processing of your personal data in certain circumstances;
Object to processing based on our legitimate interests, on grounds relating to your particular situation;
Data portability, where the legal requirements are met;
Withdraw your consent at any time where processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal;
Lodge a complaint with a competent data protection supervisory authority.

These rights are subject to applicable legal conditions and exceptions. In particular, the right to data portability applies only in the circumstances specified by law, and the right to object depends on the legal basis and circumstances of the processing.

To exercise your rights, please contact us at hello@koubaras.eu. We may need to verify your identity before responding to your request.

We will respond to your request within the time limits prescribed by applicable law. Where permitted by law, these time limits may be extended in certain circumstances, in which case we will inform you accordingly.

You also have the right to lodge a complaint with the competent data protection supervisory authority if you believe that your personal data have been processed unlawfully.

10. Cookies and third-party embedded content

The Website may contain links to external websites and may include embedded content or third-party services, such as videos, images, maps or other resources.

When you follow a link to an external website, that website’s own privacy policy and practices will apply to your subsequent interactions with it. Koubaras Ltd does not control the privacy practices of independent third-party websites.

Where third-party content or services are embedded in or accessed through the Website, the relevant provider may collect or otherwise process personal data, such as technical information about your device or information relating to your interaction with that content. The extent of such processing depends on the provider, how the service is implemented and your privacy settings.

Where required by applicable law, non-essential cookies or similar technologies associated with third-party content or services will only be activated after the necessary consent has been obtained.

Nothing in this section limits Koubaras Ltd’s obligations under applicable data protection law in relation to personal data processing for which it is responsible.

11. How we protect personal data

Koubaras Ltd takes appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures are designed to provide a level of security appropriate to the nature of the personal data processed and the risks associated with the processing.

Our Website is hosted on the Wix platform, and we use third-party service providers for certain functions, including newsletter distribution and the collection of information through online forms. We take reasonable steps to use appropriate security settings and to work with service providers that implement suitable security measures.

We also take appropriate steps to restrict access to personal data to authorised persons who need it for legitimate business purposes.

No method of transmission over the Internet or electronic storage is completely secure. Nevertheless, we remain committed to protecting personal data in accordance with applicable data protection legislation.

12. Children

The Website is not intended to collect personal data from children specifically. If you believe that a child has provided personal data through the Website in circumstances where this is not appropriate, please contact us at hello@koubaras.eu so that we can assess the matter and take any action required by applicable law.

13. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in our processing activities, the Website, our service providers or applicable legal requirements.

The latest version will be published on this page, together with the date of the latest update. Where required by law, we will provide additional information or take further steps to notify affected individuals of material changes.

Updating this Policy does not replace the need to obtain consent where consent is legally required.

14. Contact us

If you have questions about this Privacy Policy, wish to exercise your data protection rights or want to raise a concern about the processing of your personal data, please contact us:

Koubaras Ltd

Email: hello@koubaras.eu

Telephone: +30 216 0708 037

Address: 43 Solonos Street, 10672 Athens, Greece

G.E.MI.: 154643801001

You may also contact us through the Contact Us page.