Privacy & GDPR Data Protection Policy

Privacy & GDPR Data Protection Policy

Last updated: October 2026

Fourlanos B2B (“we,” “us,” or “our”) operates the European commercial HVAC procurement hub fourlanosb2b.com and its associated digital store shop.fourlanosb2b.com. This Privacy Policy explains our practices regarding the collection, processing, confidentiality, and protection of your personal and business data.

We are committed to full compliance with the EU General Data Protection Regulation (Regulation (EU) 2016/679 - GDPR) and relevant Greek data protection legislation (Law 4624/2019).

1. Data Controller Identification

The legal entity responsible for the processing of your data is:

2. Scope of This Policy

This Privacy Policy applies universally across our entire digital infrastructure:

  1. Procurement & Technical Content Hub (fourlanosb2b.com): Handling contractor inquiry forms, Tender Bill of Materials (BOM) fast-quotes, equipment schedule uploads, and direct trade correspondence.
  2. E-Shop Catalog & Ordering (shop.fourlanosb2b.com): Handling customer account registration, catalog browsing, shopping cart management, orders, and payment processing.

3. Information We Collect & Process

A. Trade Contact & Quotation Information

When you submit an RFQ, request a quote, or call our trade desk, we process:

  • Full name and professional title
  • Company name, registered address, and country
  • European VAT number (VIES-verified for 0% intra-EU billing)
  • Business email address and direct phone number
  • Project name, equipment schedule specifications, and Bill of Materials (BOM) files

B. Order & Transaction Data (E-Shop)

When you place an order on our e-shop:

  • Billing address and physical delivery address (site contact details)
  • Selected payment method and transaction identifiers (card numbers are tokenized and processed securely by certified PCI-DSS Level 1 payment processors; we never store raw credit card details)
  • Invoicing records, dispatch notes, and transport tracking numbers

C. Technical & Browsing Data

When navigating our websites:

  • IP address (anonymized for analytics)
  • Browser type, device operating system, and language settings
  • Time of visit, page views, and referring domain

4. Strict Confidentiality for Project Tenders & Contractor BOMs

We recognize that commercial mechanical contractors, project managers, and facility specialists submit proprietary project schedules, tender bills of materials, and sensitive bidding specifications to our trade desk.

  • Non-Disclosure: All project schedules, equipment lists, and tender files uploaded via our Tender Fast-Quote desk or emailed to [email protected] are treated as strictly confidential trade information.
  • Zero Third-Party Sharing: We never share, sell, or disclose your project BOMs to third-party competitors or unverified bidding parties. Information is accessed solely by Fourlanos B2B trade specialists for the purpose of equipment sizing, compatibility verification, and formal quotation.

We process your data under the following GDPR lawful bases:

  • Performance of a Contract (Art. 6(1)(b) GDPR): Processing RFQs, preparing proforma quotes, fulfilling product orders, and coordinating freight delivery.
  • Compliance with Legal Obligations (Art. 6(1)(c) GDPR): Issuing official tax invoices, reporting intracommunity VIES trade, and maintaining statutory accounting records under Greek and EU tax law.
  • Legitimate Business Interests (Art. 6(1)(f) GDPR): Enhancing our B2B catalog, preventing fraud, maintaining website security, and communicating with existing commercial trade partners.
  • Consent (Art. 6(1)(a) GDPR): Where explicitly provided (such as opting in to trade stock updates).

6. Data Sharing & Third-Party Service Providers

We never sell, rent, or monetize your personal or trade data. We disclose data strictly to vetted service providers necessary for business operations:

  • Freight Carriers & Couriers: Trusted national and international freight partners (e.g., DHL, FedEx, TNT, Schenker, and Greek logistics agencies) strictly for physical delivery.
  • Certified Payment Processors: Secure gateway providers operating under PCI-DSS compliance.
  • European Tax & Customs Authorities: Greek Independent Authority for Public Revenue (AADE) and EU VIES databases for statutory tax and export compliance.

7. Your Statutory GDPR Rights

Under the General Data Protection Regulation, you have the following enforceable rights:

  • Right of Access (Art. 15): Request a copy of all personal data held about you.
  • Right to Rectification (Art. 16): Request immediate correction of inaccurate or incomplete records.
  • Right to Erasure / “To Be Forgotten” (Art. 17): Request deletion of your personal data, subject to statutory tax retention requirements.
  • Right to Restriction of Processing (Art. 18): Limit how your data is used under specific circumstances.
  • Right to Data Portability (Art. 20): Receive your personal data in a structured, commonly used, machine-readable format.
  • Right to Object (Art. 21): Object to processing based on legitimate interests.

To exercise any of these rights, email our trade desk at [email protected] with the subject line “GDPR Data Request”. We respond to all verified requests within 30 calendar days.

8. Cookies & Local Analytics

Our platform uses essential and functional cookies to maintain session states, authenticate customer logins on the e-shop, and analyze aggregated traffic. You can manage or disable cookies via your browser settings at any time.

9. Data Retention Period

  • Commercial Inquiries & RFQs: Retained for up to 3 years to facilitate repeat equipment matching and spare parts re-ordering.
  • Tax & Invoicing Records: Retained for 10 years in strict compliance with Greek commercial code and European taxation regulations.

10. Contacting Our Data Protection Desk

If you have any questions, concerns, or requests regarding this Privacy Policy: