Privacy Policy
Android app, online shop (e-shop) and website «Mia Zoi Loukoumades» · Last updated: 27 October 2026
1. Controller
Δεμενεόπουλος Εμμ. και Παύλος Ο.Ε. (trading as
«Μια ζωή... λουκουμάδες»), VAT no. 997306583, Leoforos Papanastasiou 131,
Heraklion, Crete, Greece.
Contact for personal data matters:
m.demeneopoulos@yahoo.gr ·
+30 2815 200040.
2. What data we collect
- Account: the email and name of the Google account you sign in with.
- Contact details: the full name and phone number you give us.
- Delivery addresses: street, number, area, postcode, floor, doorbell, phone, notes and the map location of the address.
- Orders: products, amounts, notes, status and history of the order.
- App language: Greek or English, so that order notifications reach you in that language.
- Device & browser: the Android app stores a notification identifier (push token) for order updates, as well as the sign-in session, which notifications you have read and the language you chose. In the online shop (web e-shop) the sign-in session, the notifications you have read and the language you chose are kept in the browser's storage (
localStorage), without cookies and without push notifications. - Location: only when you tap «Use current location» (in the app or the browser), to improve the address search. It is not stored.
- Browsing the website: the website and the online shop do not use cookies and do not load advertising scripts or third-party resources.
3. Why, and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Taking, preparing and delivering orders, contacting you about an order | Performance of a contract (Article 6(1)(b)) |
| Notifications about the status of an order (Android app) | Performance of a contract; you can turn them off in your device settings |
| Keeping tax and accounting records | Legal obligation (Article 6(1)(c)) |
| Security of the service and prevention of abuse | Legitimate interest (Article 6(1)(f)) |
Without your full name, phone number and (for delivery) delivery address we cannot fulfil your order. We do not use your data for advertising and we do not sell it.
4. Who receives it
- The shop that fulfils your order: its staff see your contact and delivery details while the order is in progress and for 24 hours after it is completed.
- Supabase — hosting of the database and sign-in, in a data centre in Ireland (EU).
- Google — sign-in with a Google account and address search (Google Places).
- Expo / Firebase Cloud Messaging — sending notifications to your device (Android app).
- Cloudflare — hosting of the website and the online shop (Cloudflare Pages); as a hosting provider it processes visitors' IP addresses and technical connection data.
- GitHub — temporary database backups before upgrades (deleted automatically after 7 days).
Some of these providers may process data outside the EU (e.g. in the USA), with the safeguards of the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework.
5. How long we keep it
- Account, addresses: until you delete the address or your account.
- Orders: 5 years (as Greek tax law requires, Law 4308/2014). After that, or earlier if you delete your account, the personal details are removed and only anonymous sales data is kept.
- Notifications: deleted automatically after 30 days.
- Upgrade backups: deleted automatically after 7 days.
6. Your rights
You have the right of access, rectification, erasure, restriction, portability and objection. In the app or the online shop you can:
- download all your data: Profile → Privacy & My Data → Download my data;
- correct your phone number and delete addresses in your Profile;
- permanently delete your account: Profile → Delete account.
For any other request contact m.demeneopoulos@yahoo.gr or +30 2815 200040. We reply within one month. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).
7. Minors
The service is for people over 15 years of age (Greek Law 4624/2019).
8. Changes
If the policy changes, we will update this page and the date at its top.