Privacy Policy

1. General

This Privacy Policy describes how the website g-steel.gr collects and processes personal data when you browse, submit a request, or ask for a quote. If you do not accept the terms described below, please discontinue using the website.

This policy may be revised when applicable legislation or website functionality changes. We recommend periodic review.

2. Categories of Data We Collect

Depending on how you interact with the website, the following may be collected: contact details (name, email address, phone number), company and billing information, request or RFQ details, as well as technical connection metadata (e.g., IP address, device or browser type, cookies).

3. Requests and RFQ Processing

When you submit a request or RFQ, the data you provide are used to process the request, update you on its status, prepare a technical proposal, draft a quote where necessary, and provide support before and after the request.

Legal Basis: performance of pre-contractual measures at the data subject’s request, and/or compliance with legal obligations (e.g., tax and accounting requirements).

4. Business Accounts

If a registered account is created, the minimum necessary data are stored to facilitate login, provide access to request history, and simplify future interactions with the website.

5. Communication (forms, email, messages)

When you communicate via a form, email, or other channel, the information you provide is used solely to respond to and process your request. Correspondence may be retained for a reasonable period to maintain a record of support and communication.

6. Cookies, Analytics, and Consent

The website uses cookies necessary for basic functionality (e.g., form status, session management) and, with your explicit consent, for analytics and/or marketing. Non-essential cookies remain inactive until you make a selection via the consent banner.

Full details can be found on the dedicated Cookie Policy page.

7. Data Recipients

For the operation of the website and the fulfillment of business functions, strictly necessary data may be shared with selected service providers, including: hosting infrastructure providers, logistics and transport partners, payment services, and technical support. Each provider receives only the minimum data required for their service.

8. Data Retention Period

Personal data are retained only for as long as necessary to fulfill the purpose for which they were collected. Commercial and invoicing records may be retained for longer periods where required by law (e.g., tax or accounting obligations). Cookie consent preferences are stored locally in your browser according to your selection.

9. Security (HTTPS/SSL)

All communication with the website is encrypted via HTTPS. Additional security measures are implemented to prevent unauthorized access, including role-based access controls, regular software updates, and infrastructure monitoring.

10. Your Rights Under GDPR

You have the right to access, rectification, erasure, restriction of processing, data portability, and objection, where applicable. When processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.