Privacy Policy

Privacy Policy

Last updated: September 2026

This Privacy Policy describes how Endyma Ikos collects, uses, and protects your personal data in accordance with the General Data Protection Regulation (GDPR).

1. Data We Collect

When you submit a contact or lead form, we collect the following personal data:

  • Full name
  • Email address
  • Phone number
  • Company name

2. Purpose of Processing

Your personal data is collected and processed solely for the purpose of communicating with you regarding commercial offers for professional workwear and corporate clothing from Endyma Ikos.

If you subscribe to the newsletter, through the signup form or by ticking the box in the quote form, we use your email, your business name and your industry to send you the monthly newsletter and, where one exists, the clothing guide for your industry. The subscriber list is kept on the Beehiiv service, which processes it on our behalf. Every email has an unsubscribe link.

Quote requests and meetings you book at our stand at trade shows are recorded, besides the email we receive, in a company spreadsheet in Google Sheets, which Google processes on our behalf, so that we can follow them up until our work together is complete. For a meeting we also send you a reminder by email the day before.

3. Legal Basis

The processing of your personal data is based on your explicit consent, in accordance with Article 6(1)(a) of the General Data Protection Regulation (GDPR). You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

4. Data Controller

The data controller responsible for the processing of your personal data is:

Endyma Ikos

Thessaloniki, Greece

Email: info@endymaikos.gr

5. Data Retention

Your personal data will be retained for a period of 12 months from the date of collection, or until you withdraw your consent, whichever comes first. Upon expiry of this period, your data will be permanently and securely deleted.

Newsletter signup details are kept for as long as you stay subscribed. You can ask for them to be deleted at any time.

6. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access — obtain a copy of the personal data we hold about you
  • Right to rectification — correct any inaccurate or incomplete data
  • Right to erasure — request deletion of your personal data (‘right to be forgotten’)
  • Right to data portability — receive your data in a structured, machine-readable format

To exercise any of these rights, please contact us at:

info@endymaikos.gr

7. Right to Lodge a Complaint

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA).

Hellenic Data Protection Authority (HDPA) — dpa.gr

8. Cookies and similar technologies

Cookies are small files stored on your device. Without asking you, we use only the necessary ones. Analytics and marketing cookies are turned on only if you give your consent (Article 4(5) of Greek Law 3471/2006 and Article 6(1)(a) GDPR). Rejecting is as easy as accepting, and you can change or withdraw your choice at any time.

Your choice is kept for 6 months, after which we ask again. To be able to demonstrate consent, we keep a record of each choice on a server in the EU (Frankfurt): a random code, your choices, the language, the page, the date and the time, without your IP address.

Necessary

Needed for the site to work and to remember your cookie choice. Includes error reports without personal data.

ServicePurposeCookies / storageDurationWhere the data goes
Endyma IkosRemembers your cookie choice.endyma_consent (cookie)6 monthsYour device
Endyma IkosRemembers that you have seen the notice about retail prices on the brands’ web shops.endyma:retail-notice:* (sessionStorage)Until you close the tabYour device
SentryError reports without personal data (legitimate interest, Article 6(1)(f) GDPR).No cookies—EU (Germany)

Analytics

Show us which pages are read and where visitors come from, so we can improve the site.

ServicePurposeCookies / storageDurationWhere the data goes
Google AnalyticsVisitor statistics: which pages are read, where visitors come from, and how many tap a phone number, email address or catalogue. Receives no contact details._ga, _ga_*2 yearsGoogle (EU and USA)

Marketing

Measure which of our ads bring in requests, and let us show our ads again to people who visited the site, on Google and Meta (Facebook, Instagram).

ServicePurposeCookies / storageDurationWhere the data goes
Google AdsMeasuring the requests our ads bring in, and showing our ads again to people who visited the site. When you send a request or sign up for the newsletter, Google receives your email address and phone number in hashed form, and the ad click code is kept with your request._gcl_au, _gcl_aw, _gcl_gb90 daysGoogle (EU and USA)
Meta PixelMeasuring the requests our ads bring in, and showing our ads again to people who visited the site, on Facebook and Instagram. The ad click code is kept with your request._fbp, _fbc90 daysMeta (EU and USA)
Meta Conversions APIWhen you send a request, book a meeting or sign up for the newsletter, our server sends Meta your email address and phone number in hashed form, with your IP address and browser details, so the ad that brought you can be measured.No cookies—Meta (EU and USA)

Where data is transferred to the USA, the transfer relies on the EU–US Data Privacy Framework or on the European Commission’s standard contractual clauses.

The videos on the Brook Taverner collection pages play from Vimeo in “Do Not Track” mode, without tracking cookies. Vimeo’s delivery network (Cloudflare) sets only the __cf_bm security cookie, which expires after 30 minutes.

The catalogues on the Gary's Workwear line pages load from Flipsnack only when you press “Browse the catalogue”. Flipsnack sets no cookies and stores nothing on your device; it records for Gary's that the catalogue was viewed.

CallWhatsApp