Effective Date: 8 October 2025
Last Updated: 8 October 2025
This Privacy Policy describes how CARMA – Car Parts Merchants Alliance (“CARMA”, “we”, “our”, “us”) collects, uses, and protects personal data in compliance with the EU General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) and any applicable data protection laws.
CARMA is committed to protecting your personal data and respecting your privacy. Please read this policy carefully to understand how we handle your information.
1. Data Controller
The data controller responsible for your personal data is:
CARMA – Car Parts Merchants Alliance
Head Office: Ag. Dimitriou 26. Thessaloniki Greece
Email: info@carmaalliance.com
Phone: +30 231 053 3540
2. What Data We Collect
We may collect and process the following categories of personal data:
- Identification and contact data: name, surname, company name, email address, phone number, business address.
- Transactional data: information necessary to process orders, invoices, or account management.
- Technical data: IP address, browser type, device information, operating system, and website usage statistics.
- Communication data: information provided in emails, forms, or other correspondence.
We do not intentionally collect any special categories of personal data (such as health or biometric data).
3. How We Collect Your Data
We collect personal data in the following ways:
- When you fill out a contact or registration form on our website.
- When you correspond with us by email or phone.
- When you engage with us as a client, partner, or supplier.
- Automatically, through cookies or similar technologies when you use our website.
4. Legal Basis for Processing
CARMA processes personal data under the following lawful bases:
- Contractual necessity: to perform a contract or take steps before entering a contract with you.
- Legitimate interests: to manage and improve our business operations and communications.
- Consent: when you have given us explicit consent (e.g., to receive newsletters or marketing).
- Legal obligation: when processing is required to comply with applicable laws.
5. How We Use Your Data
We may use your data to:
- Respond to inquiries or provide information about our services.
- Process and manage orders or partnership agreements.
- Communicate updates, offers, or events related to CARMA (if you have consented).
- Maintain internal records, analytics, and improve website performance.
- Comply with our legal and regulatory obligations.
6. Data Retention
CARMA retains personal data only for as long as necessary for the purposes for which it was collected, or as required by law.
Once retention periods expire, data is securely deleted or anonymized.
7. Data Sharing and International Transfers
Your data may be shared with:
- Trusted third-party service providers (such as IT, hosting, or email providers) who act as data processors under our instructions.
- Partner organizations within the CARMA network, where necessary for collaboration or client service.
- Public authorities or regulators, if required by law.
We do not sell, rent, or trade your personal data.
If data is transferred outside the European Economic Area (EEA), we ensure it is protected by appropriate safeguards such as Standard Contractual Clauses (SCCs) or adequacy decisions.
8. Your Data Protection Rights
Under the GDPR, you have the following rights:
- Right of access – Request copies of your personal data.
- Right to rectification – Request correction of inaccurate or incomplete data.
- Right to erasure (“right to be forgotten”) – Request deletion of your data under certain conditions.
- Right to restrict processing – Request limitation of how we use your data.
- Right to object – Object to processing based on legitimate interests or direct marketing.
- Right to data portability – Request transfer of your data to another organization or to you.
To exercise any of these rights, please contact us at:
📧 info@carmaaliance.com
📞 +30 231 053 3540
We will respond within one month of receiving your request.
9. Cookies and Tracking Technologies
Our website uses cookies to enhance user experience and collect analytical information.
Cookies help us:
- Remember user preferences and improve website functionality.
- Analyze traffic and usage patterns.
- Provide relevant content and advertising.
You can manage or disable cookies through your browser settings. Please note that disabling cookies may affect website performance.
For more information, see our Cookie Policy.
10. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.
Access to personal data is restricted to authorized personnel who are bound by confidentiality obligations.
11. Privacy Policies of Linked Websites
Our website may contain links to third-party websites. CARMA is not responsible for the content or privacy practices of those websites. Please review their policies before providing any personal data.
12. Changes to This Privacy Policy
CARMA reserves the right to update this policy at any time. All updates will be posted on this page with a revised “Last Updated” date.
We encourage you to review this policy periodically.
13. Contact and Complaints
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:
📧 info@carmaalliance.com
📞 +30 231 053 3540
🏢 Ag. Dimitriou 26. Thessaloniki Greece
If you are unsatisfied with our response, you have the right to lodge a complaint with your local Data Protection Authority.
In Greece, this is the Hellenic Data Protection Authority (HDPA):
https://www.dpa.gr