Σenario / Legal

Privacy Policy

Last updated: 26 October 2026

This policy explains what personal data Σenario collects when you use www.snr-project.gr, why, and what your rights are under the GDPR (EU Regulation 2016/679) and Greek Law 4624/2019.

1. Who is responsible

The data controller is:

Kyriakos Kyros Lazaridis (Κυριάκος Κύρος Λαζαρίδης), sole proprietorship (ατομική επιχείρηση), trading as Σenario
Mitropolitou Iosif 4, 54622 Thessaloniki, Greece
VAT no. (ΑΦΜ): 170767521 · Tax office (ΔΟΥ): D’ Thessalonikis (Δ’ Θεσσαλονίκης) · GEMI no.: 195693304000
Email: Senarioproject@gmail.com · Phone: +30 694 243 7226

2. What we collect and why

Data	Why	Legal basis
Account: name, email, password (stored only as a secure hash)	Your account, sign-in, order history, password reset	Contract (Art. 6(1)(b))
Checkout: name, email, phone, delivery address and items, saved when you press “Place Order”	Creating your order once your payment is confirmed (no order exists before that)	Steps at your request before a contract (Art. 6(1)(b))
Orders: name, email, phone, delivery address, items, amounts	Processing and delivering your order, receipts, customer service	Contract; legal obligation for tax records (Art. 6(1)(c))
Payment status and transaction reference from Viva Wallet	Confirming your payment, refunds	Contract; legal obligation
Technical data: IP address, browser, time of request	Security, preventing abuse (e.g. limiting login attempts), keeping the site running	Legitimate interest (Art. 6(1)(f))

We never receive your card number: you pay on Viva Wallet’s own page. We do not sell your data, and we do not use it for advertising or profiling.

3. Cookies and browser storage

We do not use advertising or analytics cookies. The site stores only what it needs to work, in your browser’s local storage: your sign-in session (if you sign in), your cart and, while you pay, a reference to your checkout. This storage is strictly necessary for services you ask for, so no consent is required; clearing your browser data removes it. The payment page of Viva Wallet sets its own cookies under its own policy.

4. Who we share data with

Only with the providers we need to run the shop, under contracts that protect your data:

Viva Payments S.A. (Greece) — card payments; acts as an independent controller for payment data.
ACS Courier S.A. (Greece) — your name, address and phone, to deliver your parcel.
DigitalOcean — server hosting in Frankfurt, Germany (EU), where our database is stored.
Vercel Inc. — hosting of the website pages.
Resend — sending our emails (order confirmations, account emails).
Cloudflare, Inc. (cdnjs) — delivers GSAP, the animation library some of our pages use. Your browser downloads it from cdnjs, so Cloudflare receives your IP address and browser details, as with any website request.
Our accountant and tax authorities, where the law requires it.

Vercel, Resend and Cloudflare are based in the United States. Transfers to them rely on the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses.

5. How long we keep it

Account data: until you ask us to delete your account.
Unfinished sign-ups (email never verified): deleted after 3 days.
Checkouts that were never paid (card declined, payment page closed): deleted after 24 hours.
Orders and receipts: as long as Greek tax law requires (currently at least 5 years from the end of the year of purchase).
Server logs and backups: up to 14 days.

6. Your rights

You can ask to access, correct or delete your data, to restrict or object to its processing, and to receive it in a portable format. Email Senarioproject@gmail.com; we answer within one month. You can also complain to the Hellenic Data Protection Authority (dpa.gr, Kifisias 1-3, 115 23 Athens).

7. Security

The site uses encrypted connections (HTTPS), passwords are stored hashed, access to our systems is restricted, and data is backed up daily.

8. Changes

We will post any changes to this policy on this page, with a new date at the top.