Privacy Policy for topreviews.gr (GDPR-compliant draft – ready for implementation)
Last updated: 4 July 2026
1. Introduction
This Privacy Policy explains how TopReviews.gr (“we”, “us”, or “our”) collects, uses, stores, and protects your personal data when you visit https://topreviews.gr/.
We operate in full compliance with Regulation (EU) 2016/679 (GDPR) and Greek Law 4624/2019. This policy is built on scientifically validated and proven legal principles — including the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality (Article 5 GDPR) — which have been repeatedly confirmed through enforcement actions, European Data Protection Board (EDPB) guidelines, and Court of Justice of the EU case law.
2. Data Controller
TopReviews.gr [Your full name or company name] [Full address in Greece] Email: [your email] Phone: [your phone, optional]
For all data protection matters, contact us at the above email. We are the data controller under Article 4(7) GDPR.
3. What Personal Data We Collect and Why
We collect only the data that is strictly necessary:
| Category | Examples | Legal Basis (GDPR) | Purpose (proven necessity) |
|---|---|---|---|
| Technical / Log data | IP address, browser, device, pages visited, time on site | Art. 6(1)(f) – Legitimate interest | Website security, performance optimisation and fraud prevention |
| Analytics data | Google Analytics cookies & events | Art. 6(1)(a) – Consent (or legitimate interest where applicable) | Improve content and user experience (evidence-based decision making) |
| Contact / Newsletter data | Name, email (via form or subscription) | Art. 6(1)(a) – Consent | Respond to enquiries and send requested updates |
| Affiliate / Referral data | Click data on partner links | Art. 6(1)(f) – Legitimate interest | Track commissions from partners (we do not control partner processing) |
We do not collect special category data (Art. 9 GDPR) or data from children under 16 without verified parental consent.
4. Cookies and Similar Technologies
We use cookies in accordance with the ePrivacy Directive and GDPR.
- Essential cookies: Always active (necessary for site functionality).
- Analytics cookies (e.g. Google Analytics): Activated only after your consent via our cookie banner.
- Advertising / Affiliate cookies: Activated only with consent where required.
You can manage or withdraw consent at any time via the cookie settings banner or your browser settings. Detailed cookie list is available in our separate Cookie Policy (recommended to create and link).
5. How We Share Your Data
We share data only with:
- Trusted service providers (hosting, analytics, email) under data processing agreements (Art. 28 GDPR).
- Affiliate networks (for commission tracking only).
- Public authorities, when legally required.
We never sell your personal data.
6. International Data Transfers
When data is transferred outside the EEA (e.g. Google Analytics servers in the USA), we rely exclusively on proven lawful mechanisms:
- Standard Contractual Clauses (SCCs) adopted by the European Commission, or
- Adequacy decisions.
These mechanisms have been validated by the Court of Justice of the EU and are considered robust safeguards.
7. Data Retention Periods
- Server logs & analytics: maximum 26 months (or shorter if tool settings allow).
- Contact form / newsletter data: until you withdraw consent or request deletion, or maximum 2 years of inactivity.
- Legal or accounting records: as required by Greek tax/commercial law.
All periods respect the storage limitation principle (Art. 5(1)(e) GDPR).
8. Your Rights Under GDPR
You have the following rights (Articles 12–22 GDPR), which are enforceable and have been upheld in numerous court and supervisory authority decisions:
- Right of access (Art. 15)
- Right to rectification (Art. 16)
- Right to erasure (“right to be forgotten”) (Art. 17)
- Right to restriction of processing (Art. 18)
- Right to data portability (Art. 20)
- Right to object (Art. 21)
- Right to withdraw consent at any time (Art. 7)
How to exercise your rights: Email us at the address above. We will respond within one month (extendable by two months in complex cases – Art. 12).
You also have the right to lodge a complaint with the Hellenic Data Protection Authority (ΑΠΔΠΧ): www.dpa.gr | complaints@dpa.gr
9. Security Measures
We implement appropriate technical and organisational measures (Art. 32 GDPR), including:
- SSL/TLS encryption
- Regular security updates
- Access controls and logging
- Data minimisation by design
These measures reflect proven industry best practices and are regularly reviewed.
10. Third-Party Links
Our articles may contain links to third-party websites (booking platforms, product retailers, etc.). We are not responsible for their privacy practices. Please read their policies before providing any data.
11. Changes to This Policy
We may update this policy to reflect legal or operational changes. The “Last updated” date will always be visible. Material changes will be announced on the website.
12. Contact
For any questions about this Privacy Policy or your personal data: Email:electricaltoolsworld@gmail.com ..We aim to reply within 48 hours on working days.