Privacy policy

Toolgini Genie — website guide

In its basic guide mode, Genie processes your choices and text locally in your browser tab. It does not send the conversation to an AI model or save it in cookies or persistent storage. Minimising keeps the conversation temporarily; the × button, Start again, refreshing or closing the tab deletes it. Only an indication that the welcome message has appeared is saved in the tab, so it is not repeated on every page; it contains no conversation text or personal information. Machine cards load only the website’s public catalogue. When AI chat is available, a notice appears in the chat before you send anything. Only when you press Send are your message, up to four previous messages, the last short response and the codes of suggested public products sent through our server to Anthropic. Common email and telephone formats are removed, without any assurance of complete anonymity. We do not store conversations on the server; we retain only the total monthly spend, random budget reservation identifiers and, for the limit of five AI questions (‘wishes’) per day, a counter per visitor. The counter uses an identifier derived from a cryptographic hash of the IP address and the day with a secret server key: the IP address itself is not stored, the identifier changes daily and is deleted after two days. Buttons and the catalogue do not count towards the limit. Deleting the conversation in the tab does not delete data already sent to Anthropic, where the API account’s data processing terms apply. Normal requests for pages and images still pass through the website’s hosting providers.

The microphone is optional and is enabled by pressing its button and granting browser permission. The browser’s speech recognition service may send audio to its provider under that provider’s privacy terms. Genie does not store audio recordings. You can always use buttons or the keyboard without microphone permission. Dictation stops when you minimise, close or leave the tab. Do not type or dictate personal or sensitive information.

1. Who we are

The controller responsible for your personal data on woodmachine.gr is WoodMachine LP (brand TOOLGINI), 35 Archipelagous Street, 13231 Petroupoli. Telephone +30 693 694 6070 and +30 210 574 2707, email Woodmachinelp@gmail.com.

For anything concerning your data, email or call us. We respond within one month at the latest.

2. What information we ask for, why, and on what legal basis

Machine listing (‘Sell your machine’): mobile number or email, photographs and machine details and, if you provide it, your town or region. We use these to publish the listing and contact you when a buyer is interested or you want a change. Legal basis: the service you requested (Article 6(1)(b) GDPR). Without a mobile number or email we cannot publish the listing.

‘I am interested’ in a listing: your telephone number and, if provided, your name, email and message. We use these to call you about that particular machine. Legal basis: steps you requested before a possible purchase (Article 6(1)(b)).

Quote form, ‘Shall we call you?’ and contact: name, telephone, email, business name and message, as provided. We send these to the company’s email so we can reply. Legal basis: Article 6(1)(b).

If you contact us on WhatsApp or Viber, those applications’ privacy terms also apply. We retain the conversation there for as long as needed to assist you.

Machine offers and news by email, SMS or Viber: ONLY if you tick the separate, optional box. Legal basis: your consent (Article 6(1)(a) GDPR and Article 11 of Greek Law 3471/2006). We record the date you give consent. If you do not tick the box, your details are not used for offers.

Protection against abuse: we retain request counters and a history of actions on listings. IP addresses are not stored in their original form, only in an unreadable form. Legal basis: our legitimate interest in protecting the website (Article 6(1)(f)).

We do not make automated decisions about you or carry out profiling. Some listings are automatically held for review (for example, a duplicate listing), but a person always makes the decision.

3. What is publicly visible

Only the following listing information is visible: title, description, photographs, price, town or region, status and listing reference.

Your name, email, telephone number and address are never displayed publicly. Buyers speak to us. We give your details to a buyer only if you agree.

Photographs are re-encoded before publication to remove location and device metadata. Please ensure that no faces, vehicle registration plates or documents are visible.

4. Who has access

Only WoodMachine LP. We do not sell or give your details to third parties for advertising.

We use providers that process data on our behalf under data processing agreements: Vercel (website hosting), Supabase (database and photographs, Frankfurt data centre), Google (company email and Google Analytics), Meta (Facebook Pixel, only with your cookie consent).

Vercel, Google and Meta are based in the USA. Where data is transferred outside the EU, the transfer uses GDPR safeguards: the adequacy decision for the EU–US Data Privacy Framework or standard contractual clauses.

5. How long we retain data

Listings: while active and for 12 months after withdrawal or sale. Unpublished drafts: 30 days.

Expressions of interest and form messages: 12 months. If a purchase takes place, we retain the sales records for the period required by tax legislation.

Consent to receive offers: until you withdraw it.

Request counters: 2 days. Provider backups: up to a further 7 days, until refreshed.

6. Your rights

You can request access, rectification, erasure, restriction and portability of your data, and object to processing.

You can withdraw consent to offers at any time, free of charge: tell us on +30 693 694 6070 or at Woodmachinelp@gmail.com, or reply ‘STOP’ to any message. Withdrawal does not affect processing carried out beforehand.

To delete a listing and its data: the listing is taken down immediately and its photographs are no longer public. Final deletion is completed within 30 days.

If you believe we are not handling your data properly, you can lodge a complaint with the Hellenic Data Protection Authority (1–3 Kifisias Avenue, 115 23 Athens, www.dpa.gr).

7. Security

All communication with the website is encrypted (HTTPS). Listing contact details are accessible only to company administrators, who sign in using a one-time code sent to their email.

8. Cookies

Essential (always active): a cookie to retrieve your listing draft on the same phone, one for administrator sign-in, and storage of your cookie choice.

Statistics without cookies: Vercel Web Analytics counts visits without storing anything on your device.

Google Analytics and Facebook (Meta Pixel) set their own cookies and load ONLY if you press ‘Accept’ in the cookie notice. Meta Pixel tells us whether a Facebook advert led to a visit or contact (telephone, WhatsApp, form), without your name or telephone number. If you press ‘Reject’, neither loads. You can change your choice at any time using ‘Cookie settings’ at the bottom of every page.

9. Changes

If anything material changes, the new version is published here with its date.