Privacy policy

Privacy Policy of Martell.gr Information on the Processing of Personal Data

1. Introduction The website Martell.gr (hereinafter: “the Website” or “we”), owned and managed by the business named “CHRISTOFORIDIS M. KAI E. E.E.” (hereinafter “the Company” or “we”), acting as Data Controller, with its registered office at Agr. odos Tombazi 1174a, Oraiokastro, 570 13, Greece, hereby informs you through this policy about how information concerning you is collected and processed.

Personal data (hereinafter “Data”) is any information relating to natural persons whose identity is known or can be ascertained (the “Data Subjects”).

The protection of your personal data is very important to us. We take all appropriate technical and organizational measures to protect the Data we collect and process. This Personal Data Protection Policy describes the type of information we may collect, how and for what purpose we process it, and your rights as data subjects. This policy applies to all visitors and users of the Website.

1. Data We Collect, Sources, and Purposes of Processing We collect and process Data that you provide to us directly, as well as data that may be collected automatically during your navigation on the Website.

• Data you provide to us: When you contact us via a contact form, email (e.g., at office@martell.gr), or telephone (e.g., at +30 2310696648), we may collect details such as your full name, email address, telephone number, and the content of your message, for the purpose of responding to your request. If the Website offers the possibility of registration or account creation, we may collect the data required for the creation and management of your account. If you subscribe to newsletters, we collect your email address to send them.
• Data collected automatically: During your navigation on the Website, technical information may be collected, such as your IP address, browser type, operating system, date and time of access, and the pages you visit, for the purpose of the proper functioning of the Website, its security, and traffic analysis to improve our services (see also section VII. Cookies).
• Sources: Data is primarily collected directly from you (via forms, email, telephone) or automatically during your use of the Website. As a rule, we do not collect data from publicly available sources unless there is a specific legal reason and we inform you accordingly.

III. Legal Basis for Processing The processing of your personal data is based on the following legal bases of the General Data Protection Regulation (GDPR):

• Your consent (Article 6(1)(a) GDPR): When your consent is required for specific processing purposes, such as sending newsletters or using non-essential cookies. You can withdraw your consent at any time.
• Performance of a contract or taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR): If the processing is necessary for the provision of a service you requested or for the performance of a contract to which you are a party.
• Compliance with a legal obligation (Article 6(1)(c) GDPR): When the processing is necessary for our compliance with obligations imposed by law (e.g., tax obligations).
• Our legitimate interest (Article 6(1)(f) GDPR): When the processing is necessary for the pursuit of our legitimate interests, such as ensuring the smooth operation and security of the Website, analyzing its use for improvement, responding to your requests, and establishing, exercising, or defending legal claims, provided that your interests and fundamental rights do not override these.

Any refusal on your part to provide us with data necessary for a specific purpose (e.g., for the performance of a service) may make it impossible to provide that service.

1. Disclosure and Transfer of Data We do not disclose your personal data to third parties unless it is necessary for:

• The fulfillment of processing purposes: We may share data with trusted third-party service providers (Data Processors) acting on our behalf, such as website hosting companies, analytics service providers, email marketing service providers (if you have consented). These providers are contractually bound to protect your data and process it only in accordance with our instructions.
• Compliance with the law: We may disclose data to public authorities if required by law or court order.

As a rule, your data is processed within the European Union (EU) or the European Economic Area (EEA). In the event that data needs to be transferred to third countries outside the EEA, this will only be done if an adequate level of protection is ensured in accordance with the GDPR (e.g., through EU standard contractual clauses).

1. Data Retention Period We retain your personal data only for the period necessary to fulfill the purposes for which it was collected, as described in this policy, unless a longer retention period is required or permitted by law.

• Data collected based on your consent is retained until your consent is withdrawn.
• Data necessary for the performance of a contract is retained for the duration of the contractual relationship and after its termination for as long as required for the establishment, exercise, or defense of legal claims or for compliance with legal obligations (e.g., tax legislation).
• Data we process based on our legitimate interest is retained for as long as necessary for the specific purpose, taking into account the need for retention and any legal obligations or statute of limitations periods.

After the necessary retention period has passed, your data is securely deleted or anonymized.

1. Your Rights According to the current legislation on the protection of personal data (GDPR), you have the following rights: (a) Right of access: To check if and what kind of personal data we hold about you and to obtain copies thereof. (b) Right to rectification: To request the correction or completion of inaccurate or incomplete data about you. (c) Right to erasure (“right to be forgotten”): To request the deletion of your personal data, under the conditions set by law. (d) Right to restriction of processing: To request the restriction of the processing of your data, under the conditions set by law. (e) Right to object: To object to the processing of your data for reasons related to your particular situation, especially when the processing is based on our legitimate interest. (f) Right to data portability: To receive the data you have provided to us in a structured, commonly used, and machine-readable format, and to request its transmission to another data controller, where technically feasible. (g) Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw it at any time, without affecting the lawfulness of processing based on consent before its withdrawal. (h) Right to lodge a complaint with a supervisory authority: To lodge a complaint with the Hellenic Data Protection Authority regarding issues concerning the processing of your personal data.

To exercise your rights (a) to (g), you can contact us:

• Via email at: office@martell.gr
• By post at the address: Agr. odos Tombazi 1174a, Oraiokastro, 570 13, Greece

We will respond to your request free of charge as soon as possible and in any case within one (1) month of its receipt, unless the request is particularly complex or there is a large number of requests, in which case the deadline may be extended by two (2) additional months, provided we inform you accordingly.

For lodging a complaint (right h), the details of the Hellenic Data Protection Authority are: Address: Kifisias 1-3, P.C. 115 23, Athens, Greece Telephone: +30 210 6475600 Fax: +30 210 6475628 E-mail: contact@dpa.gr Website: www.dpa.gr (My rights → Submitting a complaint)

VII. Cookies Our Website uses cookies to improve the Browse experience and for traffic analysis. Cookies are small text files stored on your device. Some are necessary for the operation of the Website, while others (e.g., analytics, advertising cookies) are used only if you provide your consent. For more information about the cookies we use and how to manage them, please refer to the Cookie Policy of the Website.

VIII. Changes to the Privacy Policy & Applicable Law We reserve the right to amend this Privacy Policy from time to time. Please check the “Last Updated” date at the beginning of this Policy to see when it was last revised. Any revision will become effective as soon as the revised Policy is posted on the Website.

If we make material changes that affect your rights or the way we process your data, we will notify you appropriately (e.g., via a notice on the Website or via email, if we have your details).

This Privacy Policy is governed by Greek Law and the provisions of the General Data Protection Regulation (EU) 2016/679. For the resolution of any dispute that may arise in connection with this policy, the courts of Thessaloniki, Greece are designated as exclusively competent.