1. Introduction
Antoniadis Educational Electronics Ltd (hereinafter referred to as “the Company” or “we”) is committed to protecting your personal data in accordance with EU Regulation 2016/679 (GDPR) and the applicable laws of Cyprus.
2. Data Controller
Name: Antoniadis Educational Electronics Ltd
Email: [email protected]
Registered address: 23 Tripoleos Str, Warehouse E, 2235 Latsia
3. What Data We Collect
- Name, address, phone number, email
- Payment data (via secure third-party providers)
- Order history
- Cookies and browsing data
4. Purpose and Legal Basis
| Purpose | Legal Basis |
|---|---|
| Order fulfillment | Article 6(1)(b) – Contract performance |
| Customer support & communication | Legitimate interest |
| Marketing (e.g., newsletter) | Consent |
| Website analytics | Consent via cookies |
5. Cookies
We use cookies to enhance your experience. You may manage your preferences through the cookie banner. See our Cookie Policy for more information.
6. AI Chatbot
Our online store operates an artificial intelligence assistant that answers questions about products, orders, and store operations.
Data collected
- The content of the messages you send to the assistant.
- A random session identifier, stored in your browser for 7 days so that you can continue a previous conversation.
- IP address and country of origin, together with the date and time of messages.
- If you complete the contact form: your name, telephone number or email address, and your message.
Purposes of processing
Handling your enquiries, providing information about products and orders, connecting you with a member of our staff on request, improving the quality of responses, ensuring the security of the service, and preventing misuse.
Recipients
- Anthropic PBC (United States): conversation messages are sent for processing by the language model that powers the assistant. Transfers are carried out with the safeguards required by the GDPR for transfers outside the EEA.
- Telegram: when you request to speak with a member of staff, a notification is sent to our team containing an extract of the conversation and the details you provided in the form.
- Hosting provider: data is stored on a server located within the European Union.
Retention period
Conversations and associated data are automatically deleted 60 days after the conversation's last activity.
7. Sharing with Third Parties
We may share your data with the following partners for the proper execution of our services:
- Payment processors (e.g., VivaPayments, PayPal)
- Delivery companies (e.g., ACS, Box Now)
- Hosting and email service providers
We share this data only if appropriate data processing agreements are in place. We do not transfer data outside the EU unless adequate safeguards are ensured.
8. Your Rights
Under the GDPR, you have the right to:
- Access your data
- Rectify or delete your data
- Restrict or object to processing
- Data portability
- Lodge a complaint with the Office of the Commissioner for Personal Data Protection (www.dataprotection.gov.cy)
Contact us at [email protected] to exercise your rights.
9. Data Retention
We retain your data:
- For at least 7 years for legal/accounting reasons.
- Or until consent is withdrawn (for marketing purposes).
10. Data Security
We implement appropriate technical and organizational measures (SSL encryption, firewalls, access controls) to protect your data against unauthorized access, loss, or alteration.
11. Policy Changes
We may update this Privacy Policy to comply with legal requirements or reflect changes in our services. Changes will be published on this page with the revised date.
Last Updated: 1 July 2026