Data controller
GPTM LLC, trading as Molentra, is the controller for personal data collected through molentra.gr, unless another service acts as an independent controller under its own policy.
Information you provide
We may collect information you enter during sign-in, ordering or communication.
- Name, email address, phone number and company details
- Billing and delivery addresses
- Product, quantity, order history and transaction details
- Support messages and stated research or business purpose
- Newsletter preferences and consent records
Information collected automatically
When you visit, technical information may be logged for operation, security and performance measurement.
- IP address, browser type and operating system
- Device or session identifiers and security logs
- Pages viewed, timing, referral source and basic usage events
- Cookies and similar technologies in accordance with your choices
How information is used
We use data to provide secure access, assess eligibility where required, process and deliver orders, send transactional updates, respond to enquiries, prevent fraud, maintain the website and meet legal obligations.
Legal bases
Where the General Data Protection Regulation (GDPR) applies, processing relies on contract performance or pre-contract steps, compliance with legal obligations, legitimate interests in security and operations, and consent for optional marketing or non-essential cookies. Consent may be withdrawn without affecting earlier lawful processing.
Payments
Payment information is sent directly to the provider displayed at checkout. Molentra may receive a transaction identifier, status, amount and limited billing data, but does not store the full card number or security code. A provider may act as an independent controller for some compliance duties.
Sharing with service providers
We do not sell personal data. Necessary data may be shared with hosting, security, email, payment, accounting, delivery, customer-service and technical providers, and with authorities where required by law or to protect legal rights.
International transfers
Some providers or GPTM LLC may be located outside the EU/EEA. Where GDPR applies, transfers rely on an adequacy decision, standard contractual clauses or another lawful mechanism, with supplementary safeguards where appropriate.
Retention
Data are retained only as long as needed for collection purposes, order performance, tax and accounting duties, dispute resolution, fraud prevention and legal claims. Periods differ by category; data are deleted or anonymised when no longer required.
Security
We use reasonable technical and organisational controls including encrypted transmission, access restrictions, updates, backups and monitoring. No system is completely secure; contact us if you suspect unauthorised access.
Cookies and similar technologies
Essential cookies support sign-in, cart, language preferences and security. The internal aggregate page-view measurement stores only the date, clean page path and a total view count; it sets no analytics cookie and stores no IP address, email address, URL parameter or visitor identifier. Other analytics or marketing cookies are used only where permitted by law and consent choices. Settings may be changed through the cookie tool or browser, although disabling essential cookies can affect functionality.
Newsletter and commercial messages
Opening an account or buying does not automatically subscribe you. Marketing email is sent only with separate optional consent or another lawful basis where permitted. You can unsubscribe through each message or by request. Transactional email for sign-in, payment, orders and delivery is not a newsletter.
Your rights
Depending on applicable law, you may request information and access, rectification, erasure, restriction, portability or objection, and may withdraw consent. You may also request information about international transfers and complain to the competent supervisory authority.
- For Greece: Hellenic Data Protection Authority
- For Cyprus: Office of the Commissioner for Personal Data Protection
- We aim to answer valid requests within the applicable legal period
Additional local rights
If another local law, including certain U.S. state privacy laws such as California law, grants additional rights, those rights apply where Molentra falls within its scope. We do not sell personal data or disclose it for monetary consideration.
Age restriction
The website and commercial access are not directed to anyone under 21. We do not knowingly collect a minor’s personal data. If such collection is identified, we will take steps to delete it unless retention is legally required.
Third-party links
Links to publications, authorities or other services lead to websites with their own policies. We are not responsible for third-party privacy practices.
Changes and contact
This policy may be updated when services, providers or legal requirements change. For questions or rights requests, contact GPTM LLC, trading as Molentra, through the Contact page and select the Privacy topic.