Privacy Policy

At Pilot, we are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what personal data we collect, how we use it, with whom we share it, and what rights you have. It applies to all users of our website and online store. It is issued in compliance with EU Regulation 2016/679 (GDPR) and Greek Law 4624/2019.

1. Data Controller

   The data controller is Moto Market, operating the Pilot website and helmet brand.
   Contact: info@pilot.gr.

2. What Personal Data We Collect

   • Identity: first name, last name.
   • Contact: email, telephone, billing and delivery address.
   • Transaction: products purchased, order history, payment method (no full card numbers stored).
   • Account: username, hashed password, preferences.
   • Technical: IP address, browser, device, OS, pages visited, visit duration.
   • Marketing: preferences for receiving communications.
   • Cookie data: as described in our Cookies Policy.

   We do not collect special categories of personal data (health, racial origin, political opinions, etc.).

3. How We Collect Your Data

   • Direct interactions: account creation, orders, contact forms, newsletter sign-up.
   • Automated technologies: cookies and server logs during browsing.
   • Third parties: analytics and advertising partners (aggregated data only).

4. Purposes and Legal Basis

   We process your data for the following purposes (GDPR Art. 6):

   Purpose	Legal Basis
   Processing and fulfilling orders	Contract (Art. 6(1)(b))
   Managing your account	Contract (Art. 6(1)(b))
   Order confirmations and updates	Contract (Art. 6(1)(b))
   Customer support	Legitimate interests (Art. 6(1)(f))
   Legal and tax compliance	Legal obligation (Art. 6(1)(c))
   Marketing communications (newsletter)	Consent (Art. 6(1)(a))
   Analytics and site improvement	Consent / Legitimate interests
   Fraud prevention and security	Legitimate interests (Art. 6(1)(f))

   Where processing is based on consent, you may withdraw it at any time without affecting prior processing.

5. Data Sharing and Third Parties

   We do not sell your data. We share it only where necessary with:

   • Courier partners: name, address, phone for delivery.
   • Payment processors: card data handled by certified gateway only — not stored on our servers.
   • Analytics providers (e.g. Google Analytics): subject to your cookie consent.
   • IT and hosting providers: under strict confidentiality agreements.
   • Public authorities: where required by law.

6. International Transfers

   Some providers may be outside the EEA. We ensure appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.

7. Data Retention

   • Order / transaction data: 10 years (Greek tax law).
   • Account data: while active + up to 3 years after last login.
   • Marketing data: until you unsubscribe or withdraw consent.
   • Technical / log data: up to 12 months.

   After retention periods expire, data is securely deleted or anonymised.

8. Your Rights

   Contact us at info@pilot.gr — we respond within 30 days.

   • Access (Art. 15): Request a copy of your personal data.
   • Rectification (Art. 16): Correct inaccurate or incomplete data.
   • Erasure (Art. 17): Request deletion where no legitimate reason remains.
   • Restriction (Art. 18): Suspend processing in certain circumstances.
   • Portability (Art. 20): Receive your data in machine-readable format.
   • Objection (Art. 21): Object to processing based on legitimate interests or direct marketing.
   • Withdraw consent: At any time, without retroactive effect.

   You may also complain to the Hellenic Data Protection Authority (HDPA): www.dpa.gr — 1-3 Kifissias Ave., 115 23 Athens, Tel: +30 210 6475 600.

9. Security

   We apply SSL/TLS encryption, access controls, and regular security reviews to protect your data. No internet transmission can be guaranteed 100% secure.

10. Cookies

    For full details on the cookies we use, please read our Cookies Policy.

11. Children

    Our website is not directed at children under 16. If you believe a child has submitted personal data, contact us at info@pilot.gr and we will delete it immediately.

12. Changes to This Policy

    We may update this policy from time to time. Changes will be published here with a revised date. We encourage you to review it periodically.