This policy explains what personal data we collect when you use the CodePresta shop, why, and what rights you have under the General Data Protection Regulation (GDPR 2016/679).
1. Data controller
The controller is codePresta.com, VAT 157364762, registered at IOULIANOU 14 ILION, 13121. For anything about your data, email info@codepresta.com.
2. Data we collect
- Account: name, email, password (stored only as a one-way hash), phone.
- Billing: company name, VAT number, tax office, address, country, order and payment history. We never see your full card details.
- Licenses: license keys, shop domains and, when a module checks for updates, the PrestaShop, PHP and module versions.
- Support: the content of your tickets and any attachments.
- Installations: if you buy installation, the access details you send us. They are stored encrypted and deleted once the installation is completed or cancelled.
- Technical data: IP address, browser and logs kept for security (for downloads we store only a one-way hash of the IP).
- Newsletter: only if you opt in.
3. Why we use it and our legal bases
- To perform our contract with you: orders, delivery, licenses, updates, support and installation (Art. 6(1)(b) GDPR).
- To meet legal obligations: invoicing, reporting to myDATA, tax records and VAT checks in VIES (Art. 6(1)(c)).
- For our legitimate interests: security, preventing license misuse, and emails about new versions of modules you own, which you can turn off (Art. 6(1)(f)).
- With your consent: newsletter, and analytics or marketing cookies (Art. 6(1)(a)). You can withdraw consent at any time.
4. Who we share it with
We don't sell your data. We share it only with those we need to run the shop:
- payment providers (Stripe, PayPal),
- our hosting and email providers,
- our invoicing platform and the Greek tax authority (myDATA),
- our accountants,
- public authorities, where the law requires it.
Where data is transferred outside the European Economic Area, we rely on the European Commission's standard contractual clauses or another appropriate safeguard.
5. Cookies
We use essential cookies for sign-in, the cart and security. Optional cookies are set only with your consent. See our Cookie policy.
6. How long we keep it
- Account data: for as long as your account exists.
- Invoices and transaction data: as long as tax law requires (normally 5 years from the end of the financial year, longer if an audit is pending).
- Tickets: 3 years after they are closed.
- Security logs: up to 12 months.
- Installation access details: deleted when the installation is completed.
7. Your rights
You have the right to:
- access your data,
- have it corrected or erased,
- restrict or object to its processing,
- data portability,
- withdraw your consent.
You can update much of your data yourself from your account. For anything else, email info@codepresta.com and we'll reply within one month. If you believe your rights have been infringed, you can lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr) or the authority in your country.
8. Security
We use encryption in transit (HTTPS), encrypted storage for license keys and access details, restricted staff access and regular backups.
9. Changes
We may update this policy. The current version is always on this page, and we'll email you about significant changes.
Last updated: 19 October 2026