This Privacy Policy explains how MARKOS VOUZOUNERAKIS SINGLE-MEMBER LIMITED LIABILITY COMPANY, trading as RICHE | Beyond Darkness ("RICHE", "we", "us" or "our"), collects, uses, discloses and protects personal data when you visit www.riche.gr, contact us, submit an enquiry, download material or subscribe to our communications.

1. Who is responsible for your data

The data controller is:

Registered company: MARKOS VOUZOUNERAKIS SINGLE-MEMBER LIMITED LIABILITY COMPANY

Trading name: RICHE | Beyond Darkness

Registered address: 204 Kifissias Avenue, 14562 Kifissia, Athens, Greece

VAT number: 999300943

Email: info@riche.gr

Telephone: +30 210 8011517

2. Personal data we may collect

• Identity and contact data, such as your name, surname, email address, telephone number, company, professional role and any contact details you choose to provide.

• Enquiry and correspondence data, including the content of messages, project information, requests, preferences and our communications with you. The website forms do not accept file uploads.

• Newsletter data, including your email address, name if provided, whether you identify as an individual or as a professional, your professional category where selected, subscription source, consent record and communication preferences.

• Technical and usage data, such as IP address, browser and device information, approximate location, referring pages, pages viewed, clicks, scrolling, searches, timestamps and cookie or similar identifiers.

• Marketing and interaction data, such as campaign attribution, ad interactions, newsletter opens and link clicks where the relevant technology is enabled and legally permitted.

• Information received from third parties, including analytics, advertising and social-media platforms, where those providers lawfully make such information available to us.

Please do not submit sensitive personal data or confidential project material through general website forms unless we have specifically requested it and an appropriate secure method has been agreed.

3. How and Why We Use Personal Data

Website operation and security

We process certain technical information to operate and secure the website, prevent fraud and abuse, maintain essential functionality and troubleshoot technical problems.

The legal basis for this processing is our legitimate interest in operating and protecting the website and, where applicable, compliance with legal obligations.

Contact and project enquiries

We use your contact details and the information contained in your enquiry to respond to you, understand your requirements and discuss a possible project or collaboration.

The legal basis is taking steps at your request before entering into a contract, performing a contract where applicable, and our legitimate interest in managing enquiries and professional relationships.

Client, supplier and professional relationships

We may process personal data to manage our relationships with clients, prospective clients, architects, interior designers, developers, suppliers, represented brands, collaborators and other professionals.

The legal basis is the performance of a contract, taking pre-contractual steps, compliance with legal obligations and our legitimate business interests.

Newsletter communications

We use the information you provide to send newsletters and curated updates about RICHE projects, lighting design, represented brands, products, events, awards, editorial stories and related services.

The legal basis for these communications is your consent, which you may withdraw at any time.

Subscriber segmentation

We may record whether you subscribe as an individual or as a professional, such as an architect, interior designer or another design-industry professional. This allows us to make our communications more relevant to your interests.

The legal basis is your consent and, where legally permitted, our legitimate interest in organising and improving our communications.

Website analytics

We may use analytics technologies to understand how visitors use the website, evaluate its performance and improve its content, structure and user experience.

Non-essential analytics technologies are used based on your consent.

Advertising and campaign measurement

We may use advertising technologies to measure campaigns, attribute website actions, build relevant audiences and improve advertising delivered through platforms such as Google, Meta and LinkedIn.

These technologies are used based on your consent.

Embedded content and website protection

We may process technical data to display services such as YouTube videos and Google Maps and to protect website forms through Google reCAPTCHA.

Consent may be required when these services store or access non-essential information on your device. Necessary anti-abuse and security processing may also be based on our legitimate interest in protecting the website.

Legal and regulatory requirements

We may process and retain information to comply with accounting, taxation, regulatory and legal obligations or to establish, exercise or defend legal claims.

The legal basis is compliance with legal obligations and our legitimate interests.

Where processing relies on consent, refusing or withdrawing consent does not affect processing already carried out lawfully.

Where information is required to respond to an enquiry, take requested pre-contractual steps or perform a contract, failure to provide it may prevent us from responding or providing the relevant service.

4. Newsletter and Direct Marketing

If you subscribe to our newsletter, we may use Squarespace and/or MailerLite to manage your subscription and send communications about RICHE projects, lighting design, represented brands, products, events, awards, editorial stories and related services.

The subscription form may ask whether you are subscribing as an individual or as a professional, such as an architect or interior designer. It may also allow you to select a professional category. We use this information to organise our subscriber list and provide communications that are more relevant to your interests.

You may withdraw your consent at any time by selecting the unsubscribe link included in every marketing email or by contacting info@riche.gr.

After you unsubscribe, we may retain a minimal suppression record to ensure that we respect your request and do not add you to the mailing list again unintentionally.

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

5. Cookies, Analytics, Advertising and Embedded Services

We use cookies and similar technologies as described in our Cookie Policy.

Non-essential analytics, advertising and embedded-content technologies should not be activated before you have made the relevant consent choice.

The website may use the following services:

• Squarespace, which hosts the website and provides essential functionality, website forms and analytics.

• MailerLite, which may process newsletter subscription information and email campaign interactions.

• Google Analytics, which helps us understand website traffic and visitor interaction.

• Google Ads, which supports campaign measurement, conversion attribution and advertising.

• Meta Pixel, which supports campaign measurement, audience creation and advertising optimisation through Meta platforms.

• LinkedIn Insight Tag, which supports campaign measurement, website demographics and professional audience functions.

• YouTube, which allows us to display embedded video content.

• Google Maps, which allows us to display interactive maps and location information.

• Google reCAPTCHA, which helps us distinguish legitimate website activity from automated abuse and spam.

More information about the relevant technologies and your choices is provided in our Cookie Policy.

6. Who Receives Personal Data

We disclose personal data only where necessary and subject to appropriate safeguards.

Recipients may include:

• Website hosting, maintenance, IT and security providers.

• Squarespace and MailerLite for website, form and newsletter services.

• Google, Meta and LinkedIn for analytics, embedded services, advertising and campaign measurement, depending on your consent choices.

• Accountants, lawyers, consultants and other professional advisers.

• Public authorities, regulatory bodies, courts or law-enforcement authorities where disclosure is required by law.

• A genuine successor, purchaser or transaction adviser in connection with a restructuring, merger, sale or transfer of the business, subject to confidentiality and applicable law.

Some providers may act as processors on our behalf, while others may act as independent or joint controllers for parts of their services. Their respective privacy notices explain how they process personal data.

We do not sell your personal data.

7. International Data Transfers

Some of our service providers may process personal data outside Greece or the European Economic Area.

Where required by applicable law, international transfers are protected through:

• An adequacy decision issued by the European Commission.

• The European Commission’s Standard Contractual Clauses.

• Supplementary technical and organisational safeguards.

• Another lawful international-transfer mechanism.

You may contact us for further information about the safeguards applicable to a particular transfer.

8. How Long We Retain Personal Data

Contact and project enquiries

We normally retain contact and project-enquiry information for up to 24 months following the last meaningful communication, unless a longer period is required in connection with a contract, legal obligation or potential claim.

Client, supplier and professional records

We retain records for the duration of the relevant relationship and afterwards for the periods required by applicable accounting, tax, contractual and limitation rules.

Newsletter subscriptions

We retain newsletter information until you withdraw your consent or until the mailing list is reviewed and cleaned due to inactivity.

After unsubscribing, a minimal suppression record may be retained to ensure that your request continues to be respected.

Consent records

We may retain records demonstrating when, where and how consent was provided for as long as reasonably necessary to demonstrate compliance and address potential legal claims.

Analytics and advertising information

Analytics and advertising information is retained according to our configured settings and the retention periods applied by the relevant provider.

Security and technical logs

Security and technical information is retained only for as long as reasonably necessary for website security, troubleshooting, abuse prevention and legal compliance.

We may retain information for longer where necessary to comply with applicable law, resolve disputes, investigate abuse or establish, exercise or defend legal claims.

Personal data is deleted or anonymised when it is no longer required.

9. Your Data-Protection Rights

Subject to the conditions and limitations of applicable law, you may request:

• Access to your personal data and a copy of it.

• Correction of inaccurate or incomplete personal data.

• Erasure of your personal data.

• Restriction of processing.

• Data portability where processing is automated and based on consent or a contract.

• Objection to processing based on legitimate interests, including related profiling.

• Withdrawal of your consent at any time.

• Information about safeguards used for international data transfers.

You have an absolute right to object to the use of your personal data for direct marketing.

To exercise your rights, contact info@riche.gr.

We may request reasonable information to confirm your identity before responding. We normally respond within one month, subject to any extension permitted by law.

You may also submit a complaint to the Hellenic Data Protection Authority:

Hellenic Data Protection Authority
1–3 Kifissias Avenue
115 23 Athens
Greece
www.dpa.gr

We encourage you to contact us first so that we can try to address your concern.

10. Security

We apply appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

However, no method of internet transmission or electronic storage is completely secure, and absolute security cannot be guaranteed.

11. Children

The website is not directed towards children, and we do not knowingly collect personal data from children through it.

If you believe that a child has provided personal data to us without appropriate authorisation, please contact us.

12. Automated Decision-Making

We do not use personal data collected through the website to make decisions based solely on automated processing that produce legal or similarly significant effects for individuals.

13. External Links

The website may contain links to third-party websites, manufacturers, represented brands, social-media platforms and other external resources.

We are not responsible for their privacy practices. Visitors should review the privacy information provided by the relevant third party.

14. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, technologies, business activities or legal obligations.

The revised version will be posted on this page with an updated revision date. Material changes may also be communicated through other appropriate means.

15. Contact

Questions and requests concerning privacy may be submitted:

Email: info@riche.gr

Telephone: +30 210 8011517

Postal address:

RICHE | Beyond Darkness
204 Kifissias Avenue
14562 Kifissia
Athens, Greece