Privacy
Privacy Policy
Last updated: 16 October 2026
Who we are
The controller of your personal data is TOG & TOG. For any question about your personal data, you can write to us at info@togandtog.com.
What data we collect and why
| When | What data | Purpose | Legal basis |
|---|---|---|---|
| Contact form, quote request, Marine | Name, email, phone, company (if provided), message and project details | To reply to your request and suggest materials and solutions | Steps taken at your request before entering into a contract; our legitimate interest in serving those who show interest |
| Professionals area (application and account) | Business and contact details, login details | To assess your application and provide access to services for professionals | Performance of a contract or steps taken before entering into one |
| Newsletter | Email, language, date of consent and confirmation | To send you news from TOG & TOG | Your consent, which you can withdraw at any time |
| Project cart | The products you select and, if you submit it, your contact details | To prepare a quote for your project | Steps taken at your request before entering into a contract |
| Sample request | Name, company, email, country, city | To send you the samples you requested | Steps taken at your request before entering into a contract |
| Operation and security of the site | IP address, device and browser type, log files | Security, abuse prevention and proper operation | Our legitimate interest |
Chatbot and Visual AI: the "LET'S TOG" assistant and Visual AI run inside your own browser. The photos you choose in Visual AI are not uploaded to our servers and are not stored.
We do not sell your data and we do not use it for automated decision-making about you.
Who receives it
Your data is not shared with third parties for their own purposes. We use providers that process data on our behalf and under our instructions, such as our website hosting provider, our email delivery provider and the provider of our company email. We may also disclose data to authorities where the law requires it. Where a provider is located outside the European Economic Area, the EU standard contractual clauses or other safeguards provided by the GDPR apply.
How long we keep it
- Requests and contact messages: up to 24 months from the last contact.
- Newsletter: until you unsubscribe.
- Professional account: while it remains active, and deleted at your request.
- Security logs: up to 90 days.
- Backups: may retain data for up to 12 months.
- Where the law requires a longer period (for example tax records), we keep data for as long as required.
Your rights
You have the right of access, rectification, erasure, restriction, objection, portability, and to withdraw your consent. To exercise them, email info@togandtog.com. We will reply within one month. For the newsletter, you can also unsubscribe using the "Unsubscribe" link in each of our emails.
If you believe your rights are being infringed, you can lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).
Minors
Our services are aimed at adults and professionals, and we do not knowingly collect data from minors.
Changes
If this policy changes, we will update the date at the top of the page.