Legal
Privacy policy
We respect your privacy. This policy explains how KATHENERA collects, uses and protects information related to you.
Last updated: 2026-09-17
Optional enquiry source analysis
If you allow enquiry analytics, a first-party cookie (kathenera_attribution_v1, up to 30 days) remembers the first observed public page, referring website domain and campaign labels, plus the source of the enquiry session. We attach these observations to an enquiry you submit and make the separate CRM source record eligible for removal after 90 days; a daily 02:00 UTC job removes eligible records, so removal may occur on the next run. Backup and older notification-email copies follow separate retention. The cookie recording your choice lasts up to 180 days. We do not store search queries, full referral URLs or advertising click IDs. Advertising measurement and personalisation are not active, and this choice does not authorise future advertising. You can reject or withdraw optional analysis through Cookie settings without affecting your enquiry. Product choice, language and submission page are recorded to handle your enquiry even when optional analysis is off. CHUANDONG MA operates this website under the KATHENERA name and is its data controller. Contact info@kathenera.com to request access to or deletion of existing enquiry data.
Controller and data we collect
CHUANDONG MA operates this website under the KATHENERA name and is its data controller. You can contact us at info@kathenera.com. We collect information you give us, including contact details, delivery and billing information, order, account, quotation and support messages. We also process limited technical and security information, such as request logs and device/browser data, where necessary to operate and protect the service.
Purposes and legal bases
We process personal data to take steps at your request and perform a contract (orders, payments, delivery, account and installation coordination); to meet legal obligations (for example tax, accounting and fraud prevention); and for our legitimate interests in secure operation, customer support and defending legal claims, where those interests are not overridden by your rights. Product choice, language and submission page are handled as enquiry context even without optional analytics. First-party enquiry source analysis requires separate analytics consent; advertising measurement and personalisation are not active. We do not make decisions based solely on automated processing that produce legal or similarly significant effects.
Recipients and international transfers
We do not sell personal data. We may share it with processors that help us host the service, process payments, deliver goods, provide customer support or meet legal duties, only as needed and under appropriate contractual safeguards. If data is transferred outside the EEA, we use an adequacy decision or appropriate safeguards such as the European Commission’s standard contractual clauses, unless another lawful transfer mechanism applies.
Retention and security
We keep data only for as long as needed for the purpose for which it was collected, to comply with applicable record-keeping obligations, and to establish, exercise or defend legal claims. The relevant factors include the nature of the request or order, the relationship with you, statutory retention periods and applicable limitation periods. Separate CRM source records become eligible for deletion after 90 days and are cleared daily at 02:00 UTC; they may remain until the next run. Local SQLite backups rotate by a configured file-count limit, not a fixed number of days. Older notification emails are separate copies pending a reviewed retention inventory; ordinary business correspondence is not covered by the source-record cleanup. We use reasonable technical and organisational measures to protect data, but no internet service can guarantee absolute security.
Your rights and how to complain
Subject to applicable law, you may request access, rectification, erasure, restriction, objection, data portability, or withdrawal of consent at any time. To exercise a right, contact info@kathenera.com. You also have the right to lodge a complaint with your local data protection supervisory authority, including the Hellenic Data Protection Authority if Greece is your usual place of residence, work or the place of the alleged infringement.