1. Introduction
This Privacy Policy describes how the partnership under the name “E. & K. STERGIOU & SIA O.E.” (hereinafter the “Company”), which manages the websites stergiou.com, stergiou.gr, stergiou.com.gr, donuts.gr, freshandfresh.gr, sandwich.gr, croissant.gr (hereinafter the “Website”), collects, uses, stores, and protects your personal data, in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the applicable Greek legislation (Law 4624/2019).
The protection of your personal data is our priority. Please read this Policy carefully to understand how we handle your information.
2. Data Controller
The Data Controller for your personal data is:
Corporate Name: E. & K. STERGIOU & SIA O.E.
Registered Office: 4 Kleisouras & Tatoiou Str., 144 52 Metamorfosi, Attica, Greece
Tax Registration No. (AFM): 092156190 (KEFODE Atticas)
Telephone: +30 2102881900
Email: info@stergiou.com
3. What Data We Collect
Depending on how you use the Website, we may collect the following categories of data:
a) Data provided by you:
- Full Name
- Email address
- Contact telephone number
- Address (in case of an order or shipment of products/services)
- Content of messages submitted via contact forms
- Data included in your curriculum vitae (CV) for the evaluation of your candidacy for a job position within our Company
b) Data collected automatically:
- IP Address
- Browser and device type
- Pages visited and duration of visit
- Cookies data (see Section 8)
The Company does not collect special categories of data (sensitive data) through the Website under any circumstances.
4. Purposes of Processing
We process your personal data for the following purposes:
- Communicating with you and responding to your requests
- Executing orders and providing our services/products
- Issuing fiscal documents and complying with legal obligations
- Sending newsletters, provided that you have given your explicit consent
- Improving the functionality and user experience of the Website
- Ensuring the security of the Website and preventing malicious activities
- Evaluating your candidacy for a job position in our Company, with such data being retained for two (2) years from submission
5. Legal Basis for Processing
The processing of your data is based, as applicable, on:
- Performance of a contract (Article 6(1)(b) GDPR): for the completion of orders and provision of services.
- Your consent (Article 6(1)(a) GDPR): e.g., for sending newsletters or using non-essential cookies.
- Legal obligation (Article 6(1)(c) GDPR): e.g., tax and accounting legislation compliance.
- Legitimate interest (Article 6(1)(f) GDPR): e.g., Website security, statistical analysis of traffic.
6. Data Recipients
Your personal data is not sold or transferred to third parties for commercial/marketing purposes. It may only be shared with:
- Partner service providers acting on our behalf (e.g., web hosting companies, courier companies, payment providers, accountants), who are contractually bound to protect your data.
- Public or judicial authorities, provided that this is required by law.
In case of data transfers outside the European Economic Area (EEA) (e.g., via tools like Google Analytics and Meta Pixels), appropriate safeguards provided by the GDPR are implemented (e.g., Standard Contractual Clauses).
7. Retention Period
- Order and document data: for the duration specified by tax legislation.
- Communication data: for the period required to process and complete your request.
- Newsletter data: until the withdrawal of your consent (unsubscribe).
We retain your personal data only for the period necessary to fulfill the purposes for which it was collected:
Upon the expiration of the above periods, the data is securely deleted or anonymized.
8. Cookies
The Website uses cookies for its smooth operation and to improve your experience. Cookies are small text files stored on your device.
Categories of cookies we use:
- Absolutely necessary cookies: essential for the basic functionality of the Website. No consent is required.
- Statistics/Performance cookies: help us understand how visitors use the Website (e.g., Google Analytics). Your consent is required.
- Marketing cookies: used to display relevant advertisements. Your consent is required.
You can manage your cookie preferences through the relevant banner during your first visit or via your browser settings.
9. Your Rights
According to the GDPR, you have the following rights:
- Right of access: to be informed about which data of yours we process.
- Right to rectification: to request the correction of inaccurate data.
- Right to erasure (“right to be forgotten”): to request the deletion of your data under certain conditions.
- Right to restriction of processing.
- Right to data portability: to receive your data in a structured, commonly used format.
- Right to object: to object to the processing, particularly for direct marketing purposes.
- Right to withdraw consent: at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise your rights, you may contact us at info@stergiou.com. We will respond to your request within one (1) month.
If you consider that your rights are violated, you also have the right to lodge a complaint with the Hellenic Data Protection Authority (1-3 Kifissias Ave., 115 23 Athens, tel. +30 2106475600, www.dpa.gr).
10. Data Security
We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, alteration, or leakage. Indicatively, the Website utilizes SSL/TLS encryption for the secure transmission of data.
11. Links to Third-Party Websites
The Website may contain links to third-party websites. We bear no responsibility for the privacy practices or the content of these websites. We recommend that you read their respective privacy policies.
12. Minors
The Website is not addressed to persons under 15 years of age, and we do not knowingly collect data of minors without the consent of the person exercising parental responsibility.
13. Amendments to the Policy
We reserve the right to amend this Privacy Policy. Any changes will be posted on this page with an updated modification date. We recommend that you check this page periodically.
14. Contact Us
For any questions regarding this Privacy Policy or the processing of your personal data, you can contact us:
Email: info@stergiou.com
Telephone: +30 2102881900
Address: 4 Kleisouras & Tatoiou Str., 144 52 Metamorfosi, Attica, Greece
Last modified: 8/7/2026