Last updated: May 13, 2026
Nova Luce S.A. ("Nova Luce", "Company", "we", "us" or "our") is committed to protecting personal data and handling it responsibly, transparently, and in accordance with applicable data protection laws.
This Privacy Policy explains how personal data is collected and used when individuals visit novaluce.com, contact Nova Luce, subscribe to newsletters, or access the Company’s business-to-business platform.
1. Data controller
The data controller for the processing described in this Privacy Policy is:
Nova Luce S.A.
63rd km Athens-Lamia National Road
Pefkou Dima Area
32009 Schimatari
Viotia, Greece
Tel: +30 2262058121
Email: [email protected]
For any question regarding this Privacy Policy or the processing of personal data, requests may be sent to [email protected].
2. Who this policy applies to
This Privacy Policy applies to:
visitors to the public website;
individuals contacting Nova Luce through contact forms, email, or other communications;
individuals subscribing to newsletters or marketing communications;
authorized users of the B2B platform; and
representatives, employees, and contact persons of customers, suppliers, and business partners.
The B2B platform is intended for business users. User accounts are created by Nova Luce for established business customers and are not self-registered by website visitors.
3. Categories of personal data
Depending on the relationship with Nova Luce and the way the website or platform is used, Nova Luce may process the following categories of personal data:
Data provided directly
name and surname;
email address;
telephone number;
billing address;
shipping address;
account and login-related information;
company and business contact details;
the content of messages sent through contact forms or email; and
newsletter subscription details.
Data collected automatically
When the website or platform is used, certain technical and usage data may also be collected automatically, including:
IP address;
browser type and version;
device and operating system information;
usage and navigation data;
date and time of access;
referral URLs and pages visited; and
diagnostic, crash, error, and performance data.
4. How personal data is collected
Nova Luce may collect personal data directly from the data subject, from the business customer that designates its authorized users, and automatically through the operation of the website and platform.
Data may be collected when:
a visitor submits a contact request;
a person subscribes to the newsletter;
an account is created for an authorized business user;
an authorized user submits or manages B2B orders;
a user communicates with Nova Luce; or
website technologies generate technical and log information.
5. Purposes of processing
Nova Luce may process personal data for the following purposes:
to operate, maintain, and secure the website and B2B platform;
to create and manage user accounts for authorized business users;
to receive, process, and manage order submissions and related communications;
to respond to requests, inquiries, and messages;
to provide customer service and account support;
to send newsletters and marketing communications where permitted by law or based on consent;
to monitor website performance, usage, and technical issues;
to prevent fraud, misuse, unauthorized access, and other security incidents;
to maintain internal business records;
to comply with legal, tax, accounting, regulatory, and contractual obligations; and
to establish, exercise, or defend legal claims.
6. Legal bases for processing
Where the General Data Protection Regulation (GDPR) applies, Nova Luce relies on one or more of the following legal bases, depending on the circumstances:
performance of a contract or steps taken before entering into a contract;
legitimate interests, including customer relationship management, operation and security of the website and platform, business administration, service improvement, and protection of legal rights;
consent, where required, including for newsletter subscriptions and certain cookies or similar technologies; and
compliance with legal obligations.
Where personal data is necessary to establish or manage a business relationship, create an account, or process an order, failure to provide that data may prevent Nova Luce from providing the relevant service or responding effectively.
7. Newsletter and marketing communications
Where an individual subscribes to receive newsletters or marketing communications, Nova Luce may process contact details and subscription-related information for that purpose.
Individuals may unsubscribe from marketing communications at any time by using the unsubscribe mechanism included in the relevant communication.
8. Recipients and disclosures
Personal data may be disclosed, on a need-to-know basis, to categories of recipients such as:
providers supporting website hosting, infrastructure, maintenance, communications, analytics, security, and monitoring;
professional advisers, auditors, insurers, and legal counsel;
competent authorities, regulators, courts, law enforcement bodies, or other third parties where disclosure is required by law or is necessary to protect rights and legitimate interests; and
third parties involved in a merger, acquisition, reorganization, sale of assets, financing, or similar business transaction.
Nova Luce does not sell personal data for monetary consideration and does not knowingly share personal data for cross-context behavioral advertising.
9. International transfers
Because some service providers or technical systems may operate internationally, personal data may be processed in countries outside the country from which the data subject accesses the website, including outside the European Economic Area or the United Kingdom.
Where required by law, Nova Luce will implement appropriate safeguards for such transfers, including transfer mechanisms recognized under applicable data protection law.
10. Retention
Nova Luce retains personal data for as long as necessary for the purposes for which it was collected, including for the management of business relationships, account administration, order handling, legal compliance, dispute resolution, security, and the protection of legitimate business interests.
Retention periods may vary depending on the category of data and the context of processing. In particular:
security and access logs may be retained for a minimum of 12 months for security monitoring, incident investigation, fraud prevention, troubleshooting, and system integrity purposes;
customer account, order, and business relationship records may be retained for the duration of the commercial relationship and for a reasonable period thereafter, including as necessary to comply with legal, tax, accounting, audit, and evidentiary requirements;
contact requests and related correspondence may generally be retained for up to 24 months after the last relevant interaction, unless a longer period is necessary for follow-up, dispute handling, legal claims, or business recordkeeping; and
newsletter subscription data may be retained until the individual unsubscribes, withdraws consent, or the mailing list is otherwise updated or cleaned.
Where deletion is not possible or is not required due to legal, regulatory, contractual, evidentiary, security, or legitimate business reasons, the data may be retained and access may be limited as appropriate.
11. Data subject rights
Subject to applicable law, individuals may have the right to:
request access to personal data;
request correction of inaccurate or incomplete personal data;
request deletion of personal data;
request restriction of processing;
object to processing carried out on the basis of legitimate interests;
request data portability, where applicable;
withdraw consent at any time where processing is based on consent; and
lodge a complaint with a competent supervisory authority.
These rights are not absolute and may be subject to legal limitations or exceptions.
To exercise privacy rights, a request may be sent to [email protected]. Nova Luce may request information necessary to verify the identity of the requester before taking action on a request.
12. California privacy notice
If the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies, California residents may have the right, subject to verification and applicable exceptions, to:
know the categories of personal information collected, used, and disclosed;
request access to specific pieces of personal information;
request deletion of personal information;
request correction of inaccurate personal information; and
receive equal treatment for exercising applicable privacy rights.
Nova Luce does not sell personal information and does not knowingly share personal information for cross-context behavioral advertising.
Requests relating to California privacy rights may be sent to [email protected].
13. Security
Nova Luce implements reasonable technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or unauthorized access.
However, no method of transmission over the internet or method of electronic storage can be guaranteed to be completely secure.
14. Minors
The website is a general business and product website. The B2B platform is intended only for authorized business users and is not designed for children.
Nova Luce does not knowingly collect personal data from children through the B2B platform. If it becomes aware that personal data has been collected from a child in circumstances requiring action under applicable law, appropriate steps will be taken.
15. Third-party websites
The website may contain links to third-party websites, social media pages, or embedded third-party content. Nova Luce is not responsible for the privacy practices of those third parties, and users should consult the relevant privacy notices of those services.
16. Changes to this Privacy Policy
Nova Luce may update this Privacy Policy from time to time to reflect legal, technical, or business developments. The latest version will be published on the website with the updated date shown at the top of the policy.