Privacy Policy
1. Introduction
Midifiles.gr takes user privacy very seriously and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect your data when you visit our website.
Midifiles.gr is an online store for digital products. MIDI files are delivered exclusively in digital form, via a download link and email. We do not ship physical goods and we do not collect delivery addresses.
We comply with the General Data Protection Regulation (GDPR) 2016/679 and Greek data protection law (Law 4624/2019).
2. Data Controller
Data Controller:
Stylianos-Andreas Iliakis (Music Producer)
Email: stelino1976@gmail.com
Website: midifiles.gr
For any questions or concerns regarding privacy, please contact us using the details above.
3. What Information We Collect
3.1 Personal Information You Provide
- Contact Details: Name, email address
- Order Information: The products you purchased, the date and amount of the transaction
- Communication Data: Messages sent through our contact form
- Account Information: If you create an account on our website
Payment details: Payments are handled exclusively by our payment provider. We never see, process or store card numbers or banking details anywhere on our website.
3.2 Automatically Collected Information
- Technical Data: IP address, browser type, device information
- Website Usage: Pages visited, time on site, download activity
- Cookies: See our Cookie Policy for detailed information
3.3 Special Categories of Data
We do not intentionally collect sensitive personal data (such as health information, religious beliefs, etc.). If such data is provided by mistake, it will be deleted immediately.
4. How We Use Your Information
4.1 Core Services (Legal Basis: Performance of a Contract)
- Processing your orders
- Digital delivery of the MIDI files you purchased, via download link and email
- Providing customer service
- Managing your transactions
4.2 Website Operation (Legal Basis: Legitimate Interest)
- Ensuring the security and functionality of the website
- Analysing website performance and usage
- Preventing fraud and abuse
4.3 Marketing (Legal Basis: Consent)
Only with your explicit consent:
- Sending newsletters about new MIDI files
- Marketing communications about our services
- Promotional offers and updates
4.4 Legal Compliance (Legal Basis: Legal Obligation)
- Compliance with tax and accounting requirements
- Responding to legal requests from authorities
5. Data Sharing and Disclosure
We do not sell your personal data to third parties. We may share your data only in the following limited circumstances:
5.1 Service Providers
- Payment Provider: For secure payment processing
- Hosting Provider: For the operation and maintenance of the website
- Email Delivery Service: For delivering your files and order notifications
- Analytics Service: For analysing website usage
Each provider processes data solely on our behalf and only for the purpose for which it was entrusted to them.
5.2 Legal Requirements
- When required by law or legal process
- To protect our rights and prevent unlawful activity
- In the event of a business transfer or merger
5.3 International Transfers
Some providers we use may process data outside the European Economic Area. In such cases we ensure adequate protection through:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions by the European Commission
- Your explicit consent, where required
6. Data Retention
We retain your personal data only for as long as necessary:
- Order & Invoicing Data: 10 years — required for the retention of accounting records (Greek Law 5104/2024)
- User Account: For as long as it remains active; deleted upon your request
- Marketing Consent: Until you withdraw your consent
- Website Analytics: Maximum 14 months
- Contact Requests: 1 year after the request is resolved
After these periods, data is deleted or anonymised.
7. Data Security
We apply the following measures to protect your information:
- Encryption: All data transfers are encrypted (SSL/TLS)
- Two-Factor Authentication: For access to website administration
- Restricted Access: Data is accessible only to the data controller
- Regular Backups: Secure, verified backups
- Regular Security Updates: Ongoing maintenance of the website and its systems
8. Your Privacy Rights
Under the GDPR, you have the following rights:
8.1 Access Rights
- Right of Access: Request a copy of your personal data
- Right to Rectification: Correct inaccurate information
- Right to Erasure: Request deletion of your data
Note: order and invoicing data cannot be deleted before the end of the statutory retention period, as we are legally required to keep it.
8.2 Control Rights
- Right to Restriction of Processing: Limit how your data is used
- Right to Data Portability: Receive your data in a portable format
- Right to Object: Object to processing based on legitimate interest
8.3 Consent Rights
- Right to Withdraw Consent: Stop marketing communications at any time
- Right to Lodge a Complaint: File a complaint with the Hellenic Data Protection Authority
To exercise your rights, contact us at: stelino1976@gmail.com
We respond to every request within one month.
9. Cookies and Tracking
Our website uses cookies to improve your experience:
9.1 Essential Cookies
- Required for website functionality (cart, login, language)
- Cannot be disabled
9.2 Analytics Cookies
- Help us understand how the website is used
- Require your consent
9.3 Marketing Cookies
- Used for advertising and personalisation
- Require your consent
For detailed information, see our Cookie Policy.
10. Third-Party Websites
Our website may contain links to external websites. We are not responsible for the privacy practices of those websites. Please review their privacy policies before sharing any personal information.
11. Children’s Privacy
Our website is not intended for children under 16. We do not knowingly collect personal information from children. If we discover that we have collected such information, we will delete it immediately.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last Updated” date. For significant changes, we will notify you by email or through a notice on the website.
13. Contact Details
For any questions about this Privacy Policy or your personal data:
Stylianos-Andreas Iliakis
Email: stelino1976@gmail.com
Website: https://midifiles.gr
Hellenic Data Protection Authority
Website: www.dpa.gr
Email: contact@dpa.gr
Last Updated: 31 August 2026