General Privacy Statement
Information on the Processing of Personal Data
We would like to inform you that for iStorm the protection of our customers' personal data is of paramount importance. For this reason, we take appropriate measures to protect the personal data we collect from any loss, leakage, alteration, transmission or any other unlawful processing and to ensure that the processing of your personal data is always carried out in accordance with the obligations set by the legal framework, both by the company itself and by third parties who process personal data on behalf of the company.
What is the GDPR?
The General Data Protection Regulation (GDPR) is the new regulatory framework of the European Union (EU) in the sector under consideration. The purpose of the Regulation is to establish the conditions for the processing of personal data, in order to protect the rights and freedoms of natural persons, and in particular the right to the protection of personal data.
Data Controller
The company iStorm MAE, headquartered in Athens, Filikis Eterias Square 19-20, email: info@istorm.gr, tel.: 211 9997590, website: www.istorm.gr, as legally represented, informs that, for the purposes of carrying out its business activities, it processes personal data of its customers in accordance with applicable national legislation and European Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation, hereinafter "Regulation") as in force.
How to contact us
For any issue regarding the processing of personal data, you can contact the iStorm Personal Data Protection Department, at the following contact details: dataprotection@istorm.gr . In case you wish to contact the Data Protection Officer (DPO), email: dpo@istorm.gr , telephone: 211 9994480.
What categories of personal data do we process?
Depending on the website services you use, we collect and
process the following personal data:
- Identification & authentication data (full name, ID or passport details, professional specialization, tax identification number).
- Contact data (postal address, landline or mobile phone number, email address).
- Proof of your transactions (e.g., transaction receipt in case of a bank deposit).
- Supporting documents proving your student status.
- Information contained in your CV.
- Personal data that you provide to us when you fill out
the available forms on our website . - Information we collect through tools such as cookies. For more information, please refer to the Cookies Policy.
- Data collected during the use of the chat box via an artificial intelligence system.
Regarding the personal data we collect directly from you, please be informed that you are required to notify us of any changes to your data without delay, as well as to respond to any of our requests for updates.
How and for what purposes do we use your personal data?
- For the provision of our products and services
We collect personal data, for example, to provide the services you assign to us and wish to receive from us, such as the purchase of products (e.g., purchasing an iPhone), or the technical support we provide for your devices upon your request. - For the processing of an online order
Personal data is also collected when you place an order on our e-store, istorm.gr. To complete your order and create an account, you may be asked for more details, which will, however, be the minimum required for the conclusion and execution of the contract. These details are marked as mandatory fields. As part of the order completion process, some of this data is transferred to partner companies.
Therefore, they are transferred to transport companies for shipping and delivery
of your goods. The shipping companies may contact you to
to ask for clarifications as well as to update you on the delivery of the products
you.
Additionally, data is transferred to providers during payment processing
payments.
In case you have selected Klarna as your payment method, if you are already a registered Klarna user, your phone number and email are transferred to Klarna. If you are not a registered user, then for the purpose of facilitating your account creation with Klarna, we transfer your full name and delivery address details to Klarna.
We, for our part, use high-security systems to prevent
data leakage from malicious systems. - For the management of digital consumer withdrawal requests
The Company processes the personal data you submit digitally (full name, contact details, order number and, where required, IBAN) for the purpose of managing, identifying and processing your withdrawal request, as well as refunding your money. The legal basis for the processing is the Company's compliance with its legal obligation to provide the right of withdrawal without justification, in accordance with Law 2251/1994 on Consumer Protection, as amended and supplemented by Law 5317/2026 regarding distance contracts and digital direct cancellation functions, as well as the performance of the sales contract between us (Article 6 par. 1 b' and c' GDPR). Your data is accessible only by authorized personnel of the company and may be transferred to cooperating courier companies (for the collection of the product) and banking institutions (for the refund of the price), and is retained for the period of time specified by Greek tax legislation and the
statutory limitation periods for claims. - For user account creation
Personal data is collected when you create an account on istorm.gr, a website managed by iStorm. When creating an account, you may be asked for more details, however, the minimum required for the conclusion and execution of the contract will be marked as a mandatory field.
Additionally, by creating an account in our e-store, you can edit your data, as well as add or remove information. This information will be used to make the checkout process easier every time you visit our e-store and choose to be logged in. - For the issuance of insurance policies
We process personal data (full name, ID details, email, telephone number, address, Tax Registration Number) to satisfy insurance coverage requirements or to issue an i-Support extended warranty contract for the products you purchase from our store, through the issuance of insurance policies and in order to proceed with the repair or replacement of your device. - For our communication with you and to provide you with the best possible service
We may need to contact you by email or phone for administrative reasons, such as managing your complaints and, more generally, providing you with better service. Via email or
by phone as well as through our website's online platform where you can enter your personal data (full name, email,
phone), we can contact you and assist you with any issues you may experience regarding the use or functionality of the products you have purchased from our store. Also via chat box, using
AI system, you can communicate with us either through our website, via WhatsApp, or through Messenger, in order to stay informed about our website's products and services, as well as the progress of your order. - For compliance with legal obligations
We process your personal data (full name, address, Tax Registration Number, profession, etc.) in the context of our compliance with legal obligations, and in particular with regulatory obligations arising from tax legislation. - To keep you updated on our news and offers
Provided you have consented to this or it is covered by our legitimate interest, and under the specific conditions set by the legal framework, we will send you updates about products, services, offers, etc., via email, SMS, instant messaging, or phone, as well as through our social media channels (Facebook/Instagram/YouTube).
In particular: Your subscription to our newsletters and receiving updates and offers about our products and services can be done in two ways. Specifically:
(a) By providing your explicit consent in the Newsletter registration forms, to enjoy all our updates and offers that we send via emails and text messages or Instant messaging through relevant services (for example via SMS, Viber, Push Notifications, etc.).
For Web push notifications: Depending on the electronic device that
you use for your navigation, you can receive, having first given your consent, notifications about our offers, news, your wish list, and your shopping cart.
(b) Upon completion of your order from our online store, and provided you have not objected to subscribing to our newsletter by selecting the "I do not wish to subscribe to the newsletter" field that appears
before its completion. In this case, we will send you updates and offers to the email contact details you provided during the ordering stage.
In case you wish to unsubscribe from receiving updates and promotional activities, please contact the personal data department at
email: dataprotection@istorm.gr, or directly with the Data Protection Officer (DPO), dpo@istorm.gr τηλέφωνο: (+30) 211 999 4480. Μπορείτε επίσης να χρησιμοποιήσετε τις επιλογές απεγγραφής-unsubscribe, ακολουθώντας (κάνοντας click) στον αντίστοιχο σύνδεσμο (link), που υπάρχει στις ηλεκτρονικές μας επικοινωνίες.
• Εξατομικευμένη επικοινωνία
Κατά τις επισκέψεις σας στην ιστοσελίδα μας, μπορείτε να περιηγείστε και να παραμένετε ανώνυμος χρήστης μέχρι να αποφασίσετε ότι θέλετε να εγγραφείτε είτε δημιουργώντας λογαριασμό μέλους, είτε με την εγγραφή σας στα newsletter μας και τις προσωποποιημένες ενημερώσεις, δίνοντας την ηλεκτρονική σας διεύθυνση (email) καθώς και την ανάλογη κατά περίπτωση συγκατάθεση σας.
Following your registration above, we will send you personalized notifications regarding products you viewed on our website or left in your shopping cart through automated processing. Our goal is to discover what you like in order to provide you with recommendations tailored to your own needs and preferences. If you wish to exercise your Right to Object to Automated Individual Decision-Making, you can contact the iStorm Data Protection Department at the following contact details: email: dataprotection@istorm.gr. Σε περίπτωση που θέλετε να επικοινωνήσετε με τον Υπεύθυνο Προστασίας Δεδομένων (DPO), email: dpo@istorm.gr, τηλέφωνο: 211 9994480.
• Για να αξιολογήσουμε την αίτησή σας για θέση εργασίας σε εμάς
When you submit your CV for a job vacancy, we will process your data in order to evaluate your candidacy.
What are the legal grounds for processing your personal data?
iStorm processes your personal data transparently in accordance with the principles of legality, proportionality, confidentiality, integrity, purpose limitation, accuracy, specific data retention periods, and data minimization.
The legal basis for processing your personal data may be as follows for each individual case:
(a) the necessity of processing your data in the context of fulfilling our contractual obligations or during the pre-contractual stage prior to the conclusion of a product or service supply agreement, (b) the necessity of processing your data in order to protect our legitimate interests, which may include the safety of individuals, physical assets and installations via the use of closed-circuit television (CCTV) (for more information, click here for the Special Notice on the use of video surveillance systems), IT Support, support for legal or out-of-court claims, enhancing corporate social responsibility, as well as the general organization and development of business activity, (c) compliance with a legal obligation imposed by law, which may specifically include tax legislation, (d) the consent you have provided under the specific conditions set out by the legal framework, in order to receive updates about products, services, offers and similar content, sometimes personalized to your personal preferences.
Statement
By providing your consent, you responsibly declare that you are over the age of 16. If you are under the age of 16, you may use our website only with the participation and approval of a parent or guardian.
Where are your data shared?
iStorm transfers the personal data provided by natural
persons acting as processors, to whom the processing is assigned
personal data on its behalf and in accordance with the instructions
of. Specifically:
A) to third-party companies that contribute to the completion of an order in the e-store. Specifically, some of your personal data is transferred to partner transport companies for the transport and delivery of your goods. The transport companies may contact you to request clarifications as well as to inform you about the delivery of your products.
B) For the provision of the CHAT BOX live chat service, the company transfers data to a partner company (Zipchat inc), which provides the live chat platform on our website. This transfer takes place only if you choose to be assisted via the live chat on our website. The Company has ensured that the partner company processing data on its behalf has legally ensured that it meets the requirements and provides sufficient assurances for the implementation of appropriate technical and organizational measures, so that the processing of your personal data ensures the protection of your rights. If you wish, you can review our partner's privacy policy on their website.
C) to payment providers, who are necessary for processing payments.
D) to state authorities, law enforcement agencies, relevant services, and other third parties, where legally necessary for the purpose of preventing or detecting criminal acts, etc.
E) to external partners, lawyers, law firms, and consulting firms, provided that their assistance is deemed necessary for the management of the cases.
In these cases, iStorm, as the Data Controller of your personal data, defines the specific details of the processing and signs a special contract with the third parties to whom it delegates processing activities, in order to ensure that the processing is carried out in accordance with the applicable legal framework and that every natural person can freely and unhindered exercise the rights granted to them by the legal framework.
Επίσης, η εταιρεία έχει εξασφαλίσει ότι εκείνοι που επεξεργάζονται τα δεδομένα για λογαριασμό της, πληρούν τις προϋποθέσεις και παρέχουν επαρκείς διαβεβαιώσεις για την εφαρμογή κατάλληλων τεχνικών και οργανωτικών μέτρων, έτσι ώστε η επεξεργασία αυτή να διασφαλίζει την προστασία των δικαιωμάτων σας.
Finally, access to your personal data is granted to the authorized employees of the COMPANY who are responsible for evaluating your requests, managing your contract, as the case may be, for fulfilling the obligations arising from it, as well as the relevant obligations imposed by law. Your personal data is also treated with confidentiality, as the employees who process your personal data have an adequate and significant level of knowledge to protect it and are bound by a confidentiality clause or are committed to an appropriate regulatory confidentiality obligation.
Storage Period
The data retention period is determined based on the following specific criteria, depending on the case: When processing is required as an obligation by provisions of the applicable legal framework, your personal data will be stored for as long as the relevant provisions require. When processing is performed based on a contract, your personal data is stored for as long as is necessary for the performance of the contract and for the establishment, exercise, and/or support of legal claims based on the contract.
When you communicate with us via the live chat system (chat box), your personal data is stored for a period of six (6) months.
For product and service promotion purposes (marketing activities), your personal data is kept until you withdraw your consent. This can be done by you at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. To withdraw your consent, you can contact the iStorm Data Protection Department (DPO) at the following contact details: email: dataprotection@istorm.gr. In case you wish to contact the Data Protection Officer (DPO), email: dpo@istorm.gr, phone: 211 9994480. You can also use the unsubscribe options by following (clicking) the corresponding link provided in our electronic communications.
Do we transfer your personal data outside the EU?
We do not send your personal data to countries outside the EU.
What are your rights regarding your personal data?
Every natural person whose data is processed by iStorm enjoys the following rights:
Access right:
You have the right to review, correct, update or modify your personal data.
Right to correction:
You have the right to review, correct, update or modify your personal data.
Right to erasure:
You have the right to request the erasure of your personal data when we process it based on your consent or in order to protect our legitimate interests. In all other cases (such as, but not limited to, when there is a contract, an obligation to process personal data imposed by law, public interest), this right is subject to specific restrictions or does not exist depending on the case.
Right to restriction of processing:
You have the right to request restriction of the processing of your personal data in the following cases: (a) when the accuracy of the personal data is contested and until verification is carried out, (b) when you oppose the deletion of personal data and request the restriction of their use instead of deletion, (c) when the personal data are not needed for the purposes of processing, but are nevertheless necessary for you to establish, exercise, or support legal claims, and (d) when you object to the processing and until verification is made that there are legitimate reasons that concern us and override the reasons for which you object to the processing.
Right to object to processing:
You have the right to object at any time to the processing of your personal data in cases where, as described above, it is necessary for the purposes of legitimate interests pursued by us as data controllers, as well as to processing for the purposes of direct marketing and consumer profiling.
Right to portability:
You have the right to receive your personal data free of charge in a format that allows you to access, use and process them using commonly used processing methods. You also have the right to ask us, if technically feasible, to transmit the data directly to another controller. This right applies to data that you have provided to us and that is processed by automated means based on your consent or in execution of a contract.
Right to withdraw consent:
Finally, iStorm informs you that where the processing is based on your consent, you have the right to freely withdraw it, without affecting the lawfulness of the processing that was based on your consent, before you withdraw it. To withdraw your consent, you can use the unsubscribe options, by following (clicking) on the corresponding link, which is present in our electronic communications or by contacting the email address dataprotection@istorm.gr .
To exercise any of your above rights, you can contact the iStorm Personal Data Protection Department, at the following contact details: email: dataprotection@istorm.gr . In case you wish to contact the Data Protection Officer (DPO), email: dpo@istorm.gr , telephone: 211 9994480.
In the above cases, we will make every effort to respond to your request within (30) days of its submission. This deadline may be extended for an additional sixty (60) days, if deemed necessary, taking into account the complexity of the request and the number of requests, in which case we will inform you within the aforementioned thirty (30) day deadline.
Right to complain to the APDPH
In case you consider that we have not adequately satisfied your request and the protection of your personal data is affected in any way, you can submit a complaint via a special web portal to the Personal Data Protection Authority (Athens, 1-3 Kifissias Avenue, P.C. 115 23 | tel: +30 210 6475600). Detailed instructions for submitting a complaint are provided on the Authority's website .
Personal Data Security
iStorm implements appropriate technical and organizational measures aimed at the secure processing of personal data and the prevention of accidental loss or destruction and unauthorized and/or unlawful access to them, use, modification or disclosure. In any case, the way the internet operates and the fact that it is free to anyone does not allow guarantees to be provided that unauthorized third parties will never be able to violate the applied technical and organizational measures, gaining access and possibly using personal data for unauthorized and/or unlawful purposes.
Personalized communication
During your visits to our website, you can browse and remain an anonymous user until you decide that you want to register either by creating a member account, or by subscribing to our newsletters and personalized updates, providing your electronic address (email) as well as your consent as appropriate.
After your registration above, we will send you notifications that concern you personally about products you viewed on our website or that you have forgotten in your shopping cart through automated processing. Our goal is to be able to discover your likes in order to provide you with suggestions tailored to your own needs and preferences. If you wish to exercise the Right Not to Decide Based on Automated Processing of Personal Data, you can contact the Personal Data Protection Department of iStorm, at the following contact details: email: dataprotection@istorm.gr . In case you wish to contact the Data Protection Officer (DPO), email: dpo@istorm.gr , telephone: 211 9994480.
Cookie Policy Update
At www.istorm.gr, we use cookies to improve your experience on our site. You can see in detail which cookies we use and our Cookie Policy by clicking here. You also have the option to change your preferences by clicking here.
Google Analytics &
On our website we use the Google Signals web analytics service to extend the statistical reports generated with Google Analytics.
In particular, when you visit our website, provided you have accepted statistical cookies in the Cookie settings, Google Analytics records, among other things, your location, your searches and data from websites that collaborate with Google, while they are used to provide aggregated and anonymized information about user behavior across devices, such as demographic information (gender, age group, information about the interests you express through your online activities).
If you have enabled Ads Personalization in your Google account settings, this data is collected and linked to your Google account. This allows Google to recognize, for example, if you are viewing a product on the website using a smartphone.
If you wish to disable this feature, you can do so through your Google account. For more information on how to adjust your Google advertising settings, please visit https://support.google.com/ads/answer/2662856?hl=en .
Further information about Google Signals can be found here .
Links to other websites.
Our website may contain links to foreign websites. The company
is not responsible for the privacy practices or the content of other websites.
consequently, we recommend that you carefully read the privacy statements posted
on the website of the corresponding foreign website.
What is the applicable law governing the processing of your Data by us?
Applicable Law is Greek law, as formulated in accordance with the General Data Protection Regulation 2016/679/EU
and the competent courts are the courts of Athens.
Changes to the Privacy Policy
The information regarding our company's privacy policy reflects the current state of data processing on our website. In the event of changes to data processing, this data protection information will be updated accordingly. The most recent version of this data protection information will always be available on our website so that you are informed about the scope of data processing on our site. We recommend that you always stay
informed about how we process and protect your personal information. All future changes regarding this Privacy Statement will be announced in a timely manner before these changes take effect. The aforementioned notification is provided in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council and the provisions of Greek legislation on the protection of personal data adopted and implemented within this framework.
File Version: September 2026