Privacy Notice

Notice on the Processing of Personal Data pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”)

Dear user, the company under the name “CONDITO – ANONYMI EMPORIKI VIOMICHANIKI ETAIRIA TROFIMON” and the distinctive title “Condito Foods”, with registered offices at NB 6 OT 55, Industrial Area of Sindos, P.C. 57022 (hereinafter the “Company”), welcomes you to its Website www.conditofoods.com (hereinafter the “Website”) and invites you to carefully read the following notice (the “Notice”), issued pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“GDPR”).

This document describes the processing activities carried out by the Data Controller, as defined below, through the Website. Please note that the information provided applies exclusively to this Website and does not extend to any third‑party websites to which you may be redirected.

1. Data Controller

The Data Controller is the Company, as defined above. This means that the Company manages the Website and determines the purposes and means of processing your personal data in accordance with the GDPR and applicable legislation.

The Company has also appointed Ms. Anna Kokkini as its representative for personal data protection matters. You may contact her directly to exercise your rights or to obtain any information regarding the processing of your personal data and/or this Notice at the following email address: akokkini@conditofoods.com, and at the following telephone number: +30 2310 795055.

2. Sources of Personal Data Collection

The Company collects personal data directly from you and not from third parties. Your personal data are provided during your visit to the Website, specifically through the contact form or through communication with the Company via telephone or email. For the purpose of serving the above and fulfilling the service you may request as a user, it is necessary for us to process the personal data listed below; otherwise, the provision of the service will not be possible.

3. For What Purposes Do We Process Your Personal Data and What Is the Legal Basis?

The table below outlines the purpose of processing, the categories of personal data involved, and the corresponding legal basis.

1. Communication with the user

(via contact form, telephone, or email)

Personal details (e.g., full name)
Contact details (e.g., telephone number, email)
Information provided by the user in the message content

Legal basis: Article 6(1)(f) GDPR – processing is necessary for the purposes of the legitimate interests pursued by the Company, specifically corporate communication and promotion of corporate objectives.

2. Website management

IP address
Cookies data
Visit data

3. Sending of Newsletter (via the Website)

Personal details (full name)
Contact details (email address)

Legal basis: Article 6(1)(a) GDPR – processing is based on the user’s prior consent.

4. Security

For the purpose described above, your personal data may be disclosed to external service providers contracted by the Company or, where applicable, to public authorities for the fulfilment of your requests.

The Company does not transfer your personal data to any third country or international organisation.

5. Disclosure to Third Parties and Categories of Recipients

For the purpose described in Section 3, your personal data may be disclosed to external service providers contracted by the Company or, where applicable, to public authorities for the fulfilment of your requests.

The Company does not transfer your personal data to any third country or international organisation.

6. Data Subject Rights

This section outlines your rights regarding your personal data. These rights are subject to certain exceptions, reservations, or limitations. Please submit your requests responsibly. The Company will respond as soon as possible and in any case within one (1) month of receiving your request. If more time is required, you will be informed accordingly.

To exercise your rights, you may contact: akokkini@conditofoods.com

The Company ensures the unhindered exercise of the following rights:

6.1 Right to information

You have the right to request and receive clear, transparent, and easily understandable information about how we process your personal data, in accordance with the Company’s policies and procedures.

6.2 Right of access

You have the right to access your personal data free of charge, except in the following cases where a reasonable fee may apply to cover administrative costs:

manifestly unfounded, excessive, or repeated requests
additional copies of the same information

6.3 Right to rectification

You have the right to request the correction of your personal data if they are inaccurate or incomplete.

6.4 Right to erasure

You have the right to request the deletion of your personal data when they are no longer necessary for the purposes for which they were collected or when there is no lawful basis for their continued processing. This right is not absolute where a legal obligation or other lawful reason requires the Company to retain the data.

6.5 Right to restriction of processing

In certain cases, you have the right to restrict or suspend further processing of your personal data. When processing is restricted, your data will be stored but not further processed.

6.6 Right to data portability

You have the right to request the personal data you have provided to us in a structured, commonly used, machine‑readable format, and to request that these data be transmitted to another controller.

6.7 Right to object

You have the right to object, at any time and for reasons related to your particular situation, to the processing of your personal data based on Article 6(1)(f) GDPR (legitimate interests). In such a case, the Company will cease processing unless it demonstrates compelling legitimate grounds that override your interests, rights, and freedoms, or for the establishment, exercise, or defence of legal claims.

6.8 Right to withdraw consent

Where processing is based on your prior consent, you have the right to withdraw your consent at any time. The Company will cease the relevant processing unless another legal basis exists, in which case you will be informed.

6.9 Rights related to automated decision‑making and profiling

The Company does not engage in automated decision‑making, including profiling.

6.10 How to exercise your rights

Exercising your rights requires submitting a written request to the Company. The Company will respond within one month, in accordance with the GDPR and its internal policies.

7. Data Retention Period

For each category of personal data, the Company determines the retention period in accordance with legal requirements and its internal policies and procedures.

8. Contacting the Supervisory Authority

For further information or advice regarding your rights, or to lodge a complaint, you may contact the Hellenic Data Protection Authority:

Address: 1–3 Kifisias Avenue, P.C. 115 23, Athens
Telephone: +30 210 6475600
Fax: +30 210 6475628
Email: contact@dpa.gr

9. Revisions to this Notice

We aim to continuously review and update this Notice to ensure compliance with data protection legislation and new developments. Any updates will be communicated to you promptly.