Privacy policy
Last updated: 09/11/2026
This policy explains how EXIT The Coffee Spot processes your personal data when you order on https://pos.ikaros.pro/order/exit-cafe, under the General Data Protection Regulation (GDPR 2016/679).
1. Controller
Exit Cafe (EXIT The Coffee Spot)
Ανδρέου Δημητρίου 140, 67100 Ξάνθη
VAT no.: 1023456789, Tax office: ΞΑΝΘΗ
Tel.: 2541 300162
Email: exitcafe140@gmail.com
2. What we collect
- Order details: name, phone, email (if you give it), the products and your notes.
- Delivery: address, floor / doorbell and, if you choose, the point on the map or your location.
- Payment: the payment method. Card details go straight to the payment provider; we never see or store them.
- Account (optional): the above, your addresses, points and order history.
- Age statement: for 18+ products, your statement and the ID check on delivery (no copy of the ID is kept).
- Technical: IP address and browser, for security and abuse prevention.
3. Why we use it
| Purpose | Legal basis |
|---|---|
| Preparing and delivering the order, contacting you about it | Contract (art. 6.1.b) |
| Issuing receipts, keeping the books | Legal obligation (art. 6.1.c) |
| Reward points and account | Contract / your sign-up (art. 6.1.b) |
| Newsletters with offers | Only with your consent (art. 6.1.a) |
| Security, fraud prevention | Legitimate interest (art. 6.1.f) |
4. Who we share it with
- IKAROS POS (the system provider), which hosts the data on our behalf under a processing agreement.
- Payment provider (e.g. Viva Wallet, Stripe, EveryPay), only for card payments.
- E-invoicing provider / AADE (myDATA), for tax documents.
- SMS / email delivery, for sign-in codes and updates.
- Delivery platforms (efood, Wolt) only for orders you place through them.
We do not sell your data. Maps are loaded from OpenStreetMap through our own server, so your IP is not sent to third parties.
5. How long we keep it
- Orders and tax documents: as long as tax law requires (usually 5 years).
- Account and points: until you delete it or after long inactivity.
- Newsletters: until you withdraw consent (link in every email).
6. Your rights
You have the right of access, rectification, erasure, restriction, portability and objection, and to withdraw consent. If you have an account, you can download your data or delete your account on the "My account" page. For anything else contact exitcafe140@gmail.com / 2541 300162. You may also complain to the Hellenic Data Protection Authority (www.dpa.gr).
7. Cookies
We use only necessary cookies. See the cookie policy.