How we handle data, files, claims, loyalty and cookies.

This policy covers mi-eshop.gr as a request, file, quote, production, claim, loyalty and internally connected platform.

Controller

The data controller is MERCURY INTEGRATED SERVICES SINGLE MEMBER P.C. / M.I. SERVICES.
Registered address: Metamorfoseos 41, Kallithea 17674, Greece
Email: sales@mi-services.gr
Phone: +30 2103004578

Purpose

This policy explains how mi-eshop.gr and connected M.I. SERVICES internal systems collect, use, store and protect personal data, customer files, request data, order details, loyalty/reward data and cookies.

Data we collect

We may collect name, company, contact person, phone, mobile, email, address, invoicing details, VAT details, delivery details, carrier route/timetable and a special carriage-agreement reference where supplied, product specifications, notes, artwork files, images, logos, payment receipts, communication history, support requests, language preferences, MI Coins/cashback credit and platform usage data.

How we use data

Data is used for communication, quotes, file checks, artwork, production, payment, invoicing, delivery, support, customer history, internal workflow, B2B or verified reseller access, MI Coin cashback credit, vouchers, dedicated offers, service improvement and legal obligations.

VAT verification through AADE / GSIS

An approved, signed-in account may optionally request a Greek VAT-number check through AADE’s Basic Business Registry Information service. A lookup runs only when you press the verification button and solely to verify a counterparty and complete a genuine application or transaction. The response may include legal and trade names, tax office, registered address, postcode and city, legal form, registry/VAT status and main activity. Email, phone and contact person are not returned and remain your manual entries. The first successfully verified VAT number is linked to the account business profile; a later change requires review and reset by an authorised M.I. operator. Verified details are retained with the relevant application or transaction; they are not used as a public directory and do not automatically approve an account or reseller status. AADE automatically notifies the searched business through myAADE. For security, compliance and abuse investigation, a protected audit record containing the signed-in account, target VAT, time, outcome and service reference is kept for up to 180 days; special credentials and the full SOAP message are not retained there. Manual entry always remains available.

Internal systems and ecosystem

Requests may be stored in internal M.I. SERVICES systems containing companies, contacts, requests, projects, files, payments, deliveries, suppliers, collaborators, resellers, notifications, loyalty movements and communication history. For MI Coins, we may retain eligible fulfilled order value, pending and available credit, redemptions and reversals. The standard rule is 2 MI Coins per EUR 1 of eligible value after discounts and excluding VAT, delivery and fees, a 14-day pending period, and 100 MI Coins per EUR 1 of eligible service credit. We do not sell personal data.

Newsletter and ecosystem communications

The required signup choice covers only M.I. E-Shop products, offers and updates and is activated through email confirmation. The separate optional ecosystem choice covers M.I. events, news, promotions, competitions and giveaways. The two choices are recorded independently and may be withdrawn at any time. Essential communications about a quote, order, payment, artwork or delivery are not newsletters.

Payments

Online or electronic payments may use banks, Viva Smart Checkout or other approved payment providers. M.I. SERVICES does not store full card details on mi-eshop.gr. Bank receipts, payment link status or payment data may be stored in internal systems for reconciliation, accounting checks and order status updates.

Identity details for vessel collection

For parcel collection from a vessel, we may request the receiver’s full legal name, whether a national ID card or passport will be used, and its number solely to identify the receiver at handoff. These details are kept in a protected record with restricted access, are not used for marketing, and are shared only with the ferry company, carrier or agency to the extent required for delivery. They are deleted or anonymised when no longer necessary for fulfilment, delivery evidence and any applicable legal or claim-handling obligations.

Claims, photos and delivery evidence

When you submit a post-delivery claim, we may store the job code, email, issue description, product photos, package photos, inside-box photos, test copies, voucher, stamped carrier paper, tracking/reference and related evidence. This data is used for quality review, comparison with the approved file, job history, packing/delivery proof, communication with a carrier or supplier where required and documentation of the response to the client.

Google Ads, consent and conversions

Consent Mode v2 starts with ad_storage, ad_user_data, ad_personalization and analytics_storage denied. With separate advertising-measurement consent, a Google tag may load and click identifiers such as gclid, gbraid or wbraid may be processed. After the CRM successfully receives a request, Google Ads may receive only a quote-request receipt event with the request code as transaction_id and no monetary value. Ad personalization remains disabled. Google Ireland Limited may act as a provider and may use approved transfer safeguards outside the EEA. You can withdraw consent through Cookie preferences; the choice is requested again no later than 180 days.

Rights

You may request access, correction, deletion, restriction, portability, objection or withdrawal of consent where applicable. Contact us through sales@mi-services.gr or the website contact form.