Privacy Policy

Last modified: April 7, 2025

MAVILI MATERIALS SA and our subsidiaries and affiliates (“Mavili” or “We”) respect your privacy and commit to protecting it through our compliance with the practices described in this notice.

This notice describes our practices for collecting, using, maintaining, protecting, and disclosing the personal data we may collect from you or that you may provide when you visit our website or other digital properties, communications, or forms that link or refer to this notice (our “Website”). This notice applies to the personal data collected through our Website, regardless of the country where you are located.

The Website may include links to third-party websites, plug-ins, services, social networks, or applications. Clicking on those links or enabling those connections may allow the third party to collect or share data about you. We do not control these third-party websites, and we encourage you to read the privacy notice of every website you visit or service you enable.

Please read this notice carefully to understand our policies and practices for processing and storing your personal data. By engaging with our Website, you accept and consent to the practices described in this notice. This notice may change from time to time (see Changes to Our Privacy Notice). Your continued engagement with our Website after any such revisions indicates that you accept and consent to them, so please check the notice periodically for updates.

Data We May Collect About You

We collect and use different types of data from and about you including:

  • Personal data that we could reasonably use to directly or indirectly identify you, such as your name, postal address, email address, telephone number, user name or other similar identifier, or any other identifier we may use to contact you online or offline (“personal data”).
  • Non-personal data that does not directly or indirectly reveal your identity or directly relate to an identified individual, such as demographic information, statistics, or aggregated information. Statistical or aggregated data does not directly identify a specific person, but we may derive non-personal statistical or aggregated data from personal data. For example, we may aggregate personal data to calculate the percentage of users accessing a specific Website feature.
  • Technical information, including the full Internet protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, or operating system and platform.
  • Non-personal details about your Website interactions, including the full Uniform Resource Locators (URLs), clickstream information to, through, and from our Website (including date and time), products viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), or methods used to browse away from the page.

If we combine or connect non-personal, demographic, or technical data with personal data so that it directly or indirectly identifies an individual, we treat the combined information as personal data.

How We Collect Data About You

We use different methods to collect data from and about you including through:

  • Direct interactions. You may give us information about you by filling in forms or by corresponding with us by phone, email or otherwise. This includes information you provide when you search for a product, place an order, call our customer service number, and when you report a problem with our Website.
  • Automated technologies or interactions. As you interact with our Website, we may automatically collect technical data about your equipment, browsing actions and patterns as specified above. We collect this information by using cookies and other similar technologies (see Cookies and Automatic Data Collection Technologies).
  • Third parties or publicly available sources. We may receive information about you from third parties including, for example, business partners, sub-contractors in technical, payment and delivery services, advertising networks, analytics providers, search information providers, credit reference agencies, data brokers, or aggregators.

Cookies and Automatic Data Collection Technologies

Our Website uses cookies (small files placed on your device) or other automatic data collection technologies to distinguish you from other Website users. This helps us deliver a better and more personalized service when you browse our Website. It also allows us to improve our Website by enabling us to:

  • Estimate our audience size and usage patterns.
  • Store your preferences so we may customize our Website according to your individual interests.
  • Speed up your searches.
  • Recognize you when you return to our Website.

You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting, certain parts of our Website may become inaccessible and certain features may not work correctly. Unless you adjust your browser settings to refuse cookies, our system will issue them. For detailed information on the cookies we use and the purposes for which we use them, see our COOKIE NOTICE LINK.

Our Website pages and emails may contain web beacons (small transparent embedded images or objects, also known as clear gifs, pixel tags, and single-pixel gifs) that permit us, for example, to count website page visitors or email readers, or to compile others similar statistics such as recording Website content popularity or verifying system and server integrity.

Third-Party Use of Cookies and Other Tracking Technologies

Some content or applications, including advertisements, on the Website are served by third parties, including advertisers, ad networks and servers, content providers, and application providers. These third parties may use cookies [alone or in conjunction with web beacons or other tracking technologies] to collect information about you when you use our Website. They may associate the information collected with your personal data or they may collect information, including personal data, about your online activities over time and across different websites or other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content.

We do not control how these third-party tracking technologies operate or how they may use the collected data. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly. For information about how you can opt out of receiving targeted advertising from many providers, see Your Personal Data Use Choices.

How We Use Your Personal Data

We use your personal data to provide you with products, offer you services, communicate with you, deliver advertising and marketing, or to conduct other business operations, such as using data to improve and personalize your experiences. Examples of how we may use the personal data we collect include to:

  • Present our Website and provide you with the information, products, services, and support that you request from us.
  • Meet our obligations and enforce our rights arising from any contracts with you, including for billing or collections, or comply with legal requirements.
  • Fulfill the purposes for which you provided the data or that were described when it was collected.
  • Notify you about changes to our Website, products, or services.
  • Ensure that we present our Website content in the most effective manner for you and for your computer.
  • Administer our Website and conduct internal operations, including for troubleshooting, data analysis, testing, research, statistical, and survey purposes.
  • Improve our Website, products or services, marketing, or customer relationships and experiences.
  • Enable your participation in our Website’s interactive, social media, or other similar features.
  • Protect our Website, employees, or operations.
  • Measure or understand the effectiveness of the advertising we serve to you and others, and to deliver relevant advertising to you;
  • Make suggestions and recommendations to you and other users of our Website about goods or services that may interest you or them.

We may also use personal data to contact you about our own and third-parties’ goods and services that may be of interest to you. If you do not want us to use your data ins this way, please check the relevant box located on the form where we collect your data (the order form). For more information, see Your Personal Data Use Choices.

We may use personal data to enable us to display advertisements to our advertisers’ target audiences. Even though we do not disclose your personal data for these purposes without your consent, if you click on or otherwise interact with an advertisement, the advertiser may assume that you meet its target criteria.

We may use non-personal data for any business purpose.

Disclosure of Your Personal Data

We may share your personal data with:

  • Any member of our corporate group, which means our subsidiaries, our ultimate holding company and its subsidiaries, and our affiliates.
  • Business partners, suppliers, service providers, sub-contractors, and other third parties we use to support our business (such as analytics and search engine providers that assist us with Website improvement and optimization). We contractually require these third parties to keep that personal data confidential and use it only for the contracted purposes.
  • Third parties to market their products or services to you if you have not opted out of these disclosures. We contractually require these third parties to keep that personal data confidential and use it only for the contracted purposes. For more information, see Your Personal Data Use Choices.
  • Advertisers and advertising networks that require the data to select and serve relevant ads to you and others. We do not disclose data about identifiable individuals to our advertisers, but we may provide them with aggregate information about our users (for example, we may inform them that 500 men aged under 30 have clicked on their advertisement on any given day). We may also use such aggregate information to help advertisers reach the kind of audience they want to target (for example, women in a specific location). We may make use of the personal data we have collected from you to enable us to comply with our advertisers’ wishes by displaying their advertisement to that target audience.
  • Credit reference agencies when required to assess your credit score before entering into a contract with you.
  • To fulfill the purpose for which you provide it.
  • For any other purposes that we disclose when you provide the data.
  • With your consent.We may also disclose your personal data to third parties:
  • In the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets.
  • To a buyer or other successor in the event of merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, where one of the transferred assets is the personal data we hold.
  • To comply with any court order, law, or legal process, including responding to any government or regulatory request.
  • To enforce or apply our terms of use and other agreements.
  • To protect the rights, property, or safety of our business, our employees, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of cybersecurity, fraud protection, and credit risk reduction.

We may share non-personal data without restriction.

Consent to Personal Data Transfer

We are based in Greece. We may process, store, and transfer the personal data we collect, in and to a country outside your own, with different privacy laws that may or may not be as comprehensive as your own, including the United States.

By submitting your personal data or engaging with our Websites, you consent to this transfer, storing, or processing.

Your Personal Data Use Choices

We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising. We have established the following personal data control mechanisms:

  • Promotional Offers from the Company. If you do not want us to use your contact information to promote our own products and services, or third parties’ products or services, you can opt-out by checking the relevant box located on the form where we collect your data (the order form or at any other time by logging into the Website and checking or unchecking the relevant boxes to adjust your account profile’s user preferences, or by sending us an email with your request to info@mavilimaterials.com. You may also opt-out of further marketing communications by replying to any promotional email we have sent you or following the opt-out links on that message. This opt out does not apply to information provided to the Company as a result of a product purchase, warranty registration, product service experience, or other transactions.
  • Third-Party Advertising. If you do not want us to share your personal data with unaffiliated or non-agent third parties for promotional purposes, you can opt-out by checking the relevant box located on the form where we collect your data (the order form). You can also always opt-out by logging into the Website and checking or unchecking the relevant boxes to adjust your account profile’s user preferences, or by sending us an email stating your request to info@mavilimaterials.com.
  • Tracking Technologies and Advertising. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this Website may become inaccessible or not function properly. For more information about tracking technologies, please see Cookies and Automatic Data Collection Technologies.
  • Targeted Advertising. If you do not want us to use information that we collect or that you provide to us to deliver advertisements according to our advertisers’ target-audience preferences, you can opt-out by [checking the relevant box located on the form where we collect your data (the order form). You can also always by sending us an email stating your request to info@mavilimaterials.com. For this opt-out to function, you must have your browser set to accept browser cookies.

Our Website may, from time to time, contain links to and from the websites of our partner networks, advertisers, and affiliates, or include plug-ins enabling third-party features. If you follow a link to any third-party website or engage a third-party plug-in, please note that these third parties have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these third parties.

Accessing and Correcting Your Personal Data

You can access, review, change or delete your personal data by sending us an email at info@mavilimaterials.com.

We may not accommodate a request to change or delete information if we believe the change or deletion would violate any law or legal requirement or negatively impact the information’s accuracy.

If you delete your User Contributions from the Website, copies of your User Contributions may remain viewable in cached and archived pages or because other Website users may have copied or stored them. Our terms of use govern proper access and use of information provided on the Website.

Data Security

The security of your personal data is very important to us. We use physical, electronic, and administrative safeguards designed to protect your personal data from loss, misuse, and unauthorized access, use, alteration, or disclosure. We store all personal data you provide to us behind firewalls on servers employing security protections.

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal data, we cannot guarantee the security of your personal data transmitted to our Website. Any transmission of personal data is at your own risk. We are not responsible for the circumvention of any privacy settings or security measures contained on the Website.

Children’s Online Privacy

We do not direct our Website to minors and we do not knowingly collect personal data from children under 16 or as defined by local legal requirements. If we learn we have mistakenly or unintentionally collected or received personal data from a child without appropriate consent, we will delete it. If you believe we mistakenly or unintentionally collected any information from or about a child, please contact us at info@mavilimaterials.com.

Jurisdiction-Specific Rights and Disclosures

  • European Union – General Data Protection Regulation:

If you are an EU resident or the GDPR applies to you, in addition to other rights you may have under this Privacy Notice, you have the following rights or the following disclosures apply to you regarding your personal data, subject to certain exceptions:

Data Controller:

Mavili Materials S.A.,

10, Kolokotroni str. 14562, Kifissia – Greece

Legal Basis for Processing Personal Data:

In instances where we obtain the consent of the data subject for the processing of personal data, Article 6, paragraph 1, letter a of the EU General Data Protection Regulation (GDPR) serves as the legal basis for such processing.

When processing personal data that is required for the performance of a contract to which the data subject is a party, Article 6, paragraph 1, letter b applies as the legal basis. This provision also extends to processing necessary for the execution of pre-contractual measures.

Should the processing of personal data be necessary to fulfill a legal obligation to which our company is subject, Article 6, paragraph 1, letter c of the GDPR serves as the applicable legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or a third party, and provided that the interests, fundamental rights, and freedoms of the data subject do not outweigh this legitimate interest, Article 6, paragraph 1, letter f of the GDPR shall apply as the legal basis for such processing.

Data Deletion and Storage Duration:

The personal data of the data subject shall be deleted or blocked as soon as the purpose for which it was stored ceases to exist. Additionally, data may be retained if such retention is mandated by European or national legislation in EU regulations, laws, or other provisions to which the data controller is subject. The data shall also be blocked or deleted upon expiration of the prescribed storage period, unless there exists a necessity for the further retention of the data for the conclusion or fulfillment of a contract.

Rights of the Data Subject:

If personal data concerning users is processed, they are considered data subjects under the GDPR and are entitled to the following rights:

1. Right to Information

Users have the right to request confirmation from the controller whether personal data concerning them is being processed. If processing has occurred, they can request the following information:

o Purpose of the data processing.

o Categories of personal data processed.

o Recipients or categories of recipients.

o Planned duration of storage or criteria for determining it.

o Right to correction, deletion, restriction of processing, or objection.

o Right to lodge a complaint with a supervisory authority.

o Source of the data if not collected from the user.

o Existence of automated decision-making, including profiling.

We also collect personal data through Xing when users utilize a form that is pre-filled with information from their profiles. Users actively submit this data by clicking a designated button. Additionally, we gather personal data when users comment on or share our posts.

2. Right to Correction

Users have the right to request correction or completion of any inaccurate or incomplete personal data concerning them.

3. Right to Restrict Processing

Processing may be restricted in the following situations:

o The accuracy of the personal data is contested.

o Processing is unlawful, and the user opposes deletion.

o The controller no longer needs the data, but the user requires it for legal claims.

o The user objects to the processing, pending the verification of the controller’s legitimate grounds.

If the processing of users’ personal data has been restricted, such data may only be processed—other than for storage—with the user’s consent or for specific purposes, such as asserting, exercising, or defending legal claims, protecting the rights of another natural or legal person, or for reasons of significant public interest of the European Union or a member state.

In cases where the restriction on processing is lifted, in compliance with the outlined conditions, the user will be informed by the controller before the restriction is removed.

4. Right to Deletion

4.1 Users can request that their personal data be deleted without delay if:

o The data is no longer necessary for its original purpose.

o The user withdraws consent.

o The user objects to processing and no overriding legitimate grounds exist.

o The data was unlawfully processed.

o The data must be deleted to comply with a legal obligation.

o The data was collected in relation to information society services under Article 8(1) GDPR.

4.2. Disclosure of Information to Third Parties

In the event that the Controller has made personal data concerning users publicly available and is obligated to delete such data in accordance with Article 17(1) of the GDPR, the Controller shall take appropriate measures, including technical measures, while considering the available technology and the costs of implementation. These measures aim to inform any other data controllers processing the personal data that you, as the data subject, have requested the deletion of all links to, or copies or replications of, this personal data.

4.3. Exceptions

The right to deletion does not apply if the processing of data is necessary under the following circumstances:

4.3.1. To exercise the right to freedom of expression and information;

4.3.2. To comply with a legal obligation that requires processing under EU law or the laws of a Member State to which the Controller is subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in the Controller;

4.3.3. For reasons of public interest in the area of public health, in accordance with Article 9(2)(h) and (i), as well as Article 9(3) of the GDPR;

4.3.4. For archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes, in accordance with Article 89(1) of the GDPR, provided that the right to deletion is likely to render impossible or seriously impair the achievement of the objectives of such processing;

4.3.5. For the establishment, exercise, or defense of legal claims.

5. Right to Notification

If users have requested correction, deletion, or restriction of their data, the controller must notify all recipients of the personal data unless this proves impossible or involves disproportionate effort.

6. Right to Data Portability

Users have the right to receive their personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller. This applies if processing is based on consent or a contract and is carried out by automated means.

6.1. Processing is based on consent in accordance with Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, or on a contract pursuant to Article 6(1)(b) GDPR; and

6.2. Processing is carried out by automated means.

In exercising this right, users are also entitled to have their personal data transferred directly from one controller to another, provided that it is technically feasible. The exercise of this right must not adversely affect the rights and freedoms of others.

The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

7. Right to Object

Users are entitled, for reasons specific to their individual circumstances, to object at any time to the processing of their personal data pursuant to Article 6(1)(e) or (f) of the General Data Protection Regulation (GDPR); this right also extends to profiling based on these legal grounds.

The data controller shall cease processing the personal data of users unless it can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the users, or if the processing is necessary for the establishment, exercise, or defense of legal claims.

In instances where personal data is processed for direct marketing purposes, users possess the right to object to the processing of their personal data for such advertising purposes at any time; this right also encompasses profiling related to direct marketing.

Should users exercise their right to object to the processing for direct marketing purposes, their personal data will no longer be processed for these objectives.

Users may exercise their right to object through automated procedures that utilize technical specifications, in accordance with the use of information society services, notwithstanding Directive 2002/58/EC.

8. Right to Revoke Consent Relating to Data Privacy

Users possess the right to revoke their declaration of consent regarding data privacy at any time. The revocation of consent shall not affect the legality of any processing conducted on the basis of that consent prior to its revocation.

9. Automated Decision-Making on a Case-by-Case Basis, Including Profiling

Users have the right not to be subjected to a decision that is based solely on automated processing, including profiling, which produces legal effects concerning them or significantly affects them in a similar manner. This right does not apply if the decision:

9.1. Is necessary for the conclusion or performance of a contract between the user and the Controller;

9.2. Is permissible under EU law or the law of the Member State to which the Controller is subject, provided that such law includes appropriate safeguards for the user’s rights, freedoms, and legitimate interests;

9.3. Is made with the explicit consent of the user.

However, such decisions must not be based on special categories of personal data as defined in Article 9(1) of the GDPR, unless Article 9(2)(a) or (g) applies and appropriate measures have been implemented to protect the user’s rights, freedoms, and legitimate interests.

In the cases outlined in 9.1 and 9.3, the Controller shall implement reasonable measures to safeguard the user’s rights, freedoms, and legitimate interests. These measures shall include, at a minimum, the right to obtain human intervention from the Controller, the opportunity to express their own viewpoint, and the ability to contest the decision.

10. Right to Lodge a Complaint

Users have the right to lodge a complaint with a supervisory authority if they believe that their personal data is being processed in violation of the GDPR.

  • California – CCPA

If you are a California resident, in addition to other rights you may have under this Privacy Notice, you have the following rights and certain disclosures apply to you regarding your personal data, subject to certain exceptions:

1. Right to Know About Personal Information Collected, Disclosed, or Sold

You have the right to request that we disclose what personal data we collect, use, disclose, or sell about you. This includes:

  • The categories of personal data we have collected about you in the past 12 months.
  • The categories of sources from which we collected that data.
  • The business or commercial purpose for collecting or selling your personal data.
  • The categories of third parties with whom we share your personal data.
  • The specific pieces of personal data we have collected about you.

2. Right to Opt-Out of Sale of Personal Information

You have the right to direct us not to sell your personal data to third parties. We do not currently sell your personal data as defined under the CCPA. If our practices change, we will update this notice and provide a “Do Not Sell My Personal Information” link on our Website homepage, allowing you to opt-out of any such sales.

3. Right to Non-Discrimination

We will not discriminate against you for exercising your CCPA rights. This means we will not deny you goods or services, charge you different prices, or provide a different level or quality of service because you exercise your rights, unless permitted by law.

4. Categories of Personal Information Collected in the Past 12 Months

In the past 12 months, we may have collected the following categories of personal data about California residents, as described in the “Data We May Collect About You” section:

  • Identifiers: Name, postal address, email address, telephone number, username, IP address, or other similar identifiers.
  • Customer Records Information: Name, telephone number, or other data listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).
  • Internet or Network Activity: Browsing history, clickstream data, search history, interactions with our Website, page response times, or download errors.
  • Geolocation Data: Approximate location derived from IP address.
  • Commercial Information: Products viewed, searched for, or purchased.
  • Inferences: Profiles reflecting preferences or behavior based on the above data.

5. Sources of Personal Information

We collect this personal data from the sources outlined in “How We Collect Data About You,” including:

  • Direct interactions with you (e.g., forms, orders, customer service inquiries).
  • Automated technologies (e.g., cookies, web beacons).
  • Third parties (e.g., business partners, analytics providers, advertising networks).

6. Business or Commercial Purpose for Collection

We collect and use your personal data for the purposes listed in “How We Use Your Personal Data,” such as:

  • Providing and improving our Website, products, and services.
  • Personalizing your experience and delivering relevant content or advertising.
  • Fulfilling contractual obligations, legal requirements, or business operations.
  • Protecting our Website and operations from fraud or security risks.

7. Categories of Third Parties with Whom We Share Personal Data

We may disclose your personal data to the categories of third parties listed in “Disclosure of Your Personal Data,” including:

  • Members of our corporate group (subsidiaries, affiliates).
  • Service providers (e.g., analytics providers, payment processors, hosting services).
  • Advertising networks or partners for targeted advertising (without selling your data).
  • Legal or regulatory authorities, as required.

8. How to Exercise Your CCPA Rights

To exercise your Right to Know or Right to Delete (as also covered under GDPR rights in this notice), or to request additional CCPA-specific disclosures, please submit a verifiable request to us by:

  • Emailing us at info@mavilimaterials.com.
  • Calling us at +30 2102241281.
  • Mailing us at 10, Kolokotroni str.14562, Kifissia, Greece

We will verify your identity before processing your request, which may require you to provide additional information (e.g., name, email address used with our Website). You may designate an authorized agent to submit a request on your behalf, provided we receive proof of authorization (e.g., a signed permission document).

We will respond to your request within 45 days, though we may extend this period by an additional 45 days if necessary, with prior notice to you. If you have an account with us, you may also access or update certain personal data by logging into your account profile.

9. Contact Us for CCPA Inquiries

For questions about your California privacy rights or this section, please contact us at:

  • Email: info@mavilimaterials.com
  • Phone: +30 2102241281
  • Mailing Address: 10, Kolokotroni str.14562, Kifissia, Greece

Changes to Our Privacy Notice

We will post any changes we may make to our privacy notice on this page and indicate on the Website home page that we updated this privacy notice. If the changes materially alter how we use or treat your personal data we will notify you through a notice on the Website home page. Please check back frequently to see any updates or changes to our privacy notice.

Contact Information

Please address questions, comments, and requests regarding this privacy notice and our privacy practices to 10, Kolokotroni str. 14562, Kifissia – Greece, info@mavilimaterials.com

Mavili’s corporate headquarters are located at 10, Kolokotroni str. 14562, Kifissia – Greece