Privacy Policy

The société anonyme under the name “ELAIA SITIAS S.A.” and the distinctive title “LaSitia” (hereinafter referred to as the “Company”) based in Athens, 10-12 Dorileou Street, tel.: 2111033613 and contact e-mail: info@lasitia.com, is the Data Controller.

The company undertakes to comply with national and European rules for the protection of the rights and freedoms of individuals against the processing of personal data, as well as all regulatory provisions governing its operation and expressly declares that it will not make any unlawful use of your personal data and in no way discloses, publish, sell, lease, transfer or exchange your personal information and the information you submit to third parties. Access to and use of https://www.lasitia.com Website are subject to this Privacy Policy and the Terms of Use posted on https://www.lasitia.com/terms-of-use/ Company’s site.

This Privacy Policy may change from time to time, in accordance with legislation or industry developments. We encourage you to occasionally check this page for any changes to this privacy policy. The continued use of the website https://www.lasitia.com even after any changes to the Privacy Policy implies the unconditional acceptance of these terms by you. I. What data does the Company collect and process about you and for what purposes? Personal data includes any information, in printed or electronic media, which may lead, alone or in combination with other information, to the identification / verification of the identity of a natural person. Processing of Personal Data is the collection, registration, organization, storage, adaptation, alteration, retrieval, use, transmission to third parties, dissemination, association, combination, restriction, deletion and destruction of Personal Data of natural persons.

We inform you that the company, in the context of its activities, collects and processes the following personal data about you for the following purposes: – When navigating the website https://www.lasitia.com it is not normally necessary to provide information that constitutes personal data. However, in case you choose to participate in an event organized by our company, you will be asked for the following information: Contact information, such as name, email address, telephone. Credit card and billing information (if you choose to use a credit/debit card for payment) and your bank account information. Billing information (company name, VAT number, address, email).

The legal basis for processing is the performance of a contract with our customers (Article 6 (1) (b) GDPR). In this context, we collect information about you for the fulfillment of our contractual obligations and the optimal provision of our services. In addition, the legal basis for the processing of the above data is the legal obligation of the company (Article 6 (1) (c) GDPR), i.e. the company’s compliance with the provisions of the law, such as tax legislation. As a rule, the provision of the above personal data to the company is necessary to achieve the above purposes. If you refuse to provide the required information, the company will inform you if without it it is impossible to achieve the main purpose of collecting this data, for example, it may become impossible to provide our services to you.

– The above information is provided by you with your consent, for the purpose of communicating with us and managing your requests or providing information to you. – We inform you that the company, as a rule, does not collect and process personal data related to your image (videos, photos). If we exceptionally carry out such processing, you will be specifically informed and we will take all necessary legal actions in compliance with the applicable regulatory framework.

– For promotional or advertising activities of our company, your information is collected only with your consent. For this purpose, the company may use the personal contact data of visitors / users for information purposes and promotions regarding competitions, gifts, discounts on products, upon their explicit consent.

– Regarding suppliers and our third party partners, the company collects and processes the following information: name, VAT number, IBAN, contact phone, address, email, entity representing the natural person, billing information, bank account details. The legal basis for processing is the performance of a contract to which the subject is a party. It is reminded that the legislation on personal data concerns professionals / natural persons or sole proprietorships and not legal entities, to which the Data Protection Regulation does not apply.

Transmission of your data to third parties

As a rule, we do not collect or access in any way special categories of (“sensitive”) personal data. The company will not request or collect data regarding customers’ food or environmental allergies. II. Transmission of your data to third parties As a rule, we will not share your information with third parties without your consent. However, we may disclose your information to third parties only under the terms of this privacy policy and in particular: where required or approved by law (e.g. transmission of data to a tax authority), when it is necessary to provide you with the services requested by you (e.g. to a transport company), as well as to our third party partner – processor, providing accounting services and bound by the relevant contract.

Data Retention Period

Your personal data will only be retained for as long as necessary and for the purpose for which it was collected or for as long as required under applicable law. In particular, the company will store your Personal Data: (i) For the data necessary to comply with our legal obligation, e.g. tax or labor law, for as long as the legal obligation exists or for as long as it is provided by law. (ii) For your data relating to the performance of our contract, the company retains your data for as long as the contractual relationship between us lasts, as well as for a period of three (3) years from the last calendar day of the year of termination of your relationship with our company, for the possibility of future cooperation / contact and for reasons of proof against the authorities and public services. Exceptionally, the company may retain your data beyond the aforementioned period, if it has a legitimate interest or when these are required to assert or defend its rights against legal claims. (iii) If you have given your consent, for the use of your data for advertising / promotional purposes, until the withdrawal of such consent. You should be aware that you have the right to withdraw your consent at any time. However, the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. If you wish your personal information to be permanently deleted, you can inform us in writing by email and we will delete it immediately.

Your Rights

Regardless of the purpose or legal basis on which we process your data, you have the following rights: Ask us for access and be informed about the data we hold about you (right of access). Ask us to correct your data so that it is true and accurate (right to rectification). You have the right to request the deletion or removal of your personal data when there is no legitimate reason for continuing processing. You should be aware that the Company may have the right or obligation to retain the information in cases where it has a particular legal obligation to do so or has another legal reason to retain it (e.g. tax liability or claims). Ask us to restrict the processing of your personal data (right to restriction). Request to receive your personal data that you have provided to us in a structured, widely used and machine-readable format in order to transmit them directly to another legal entity without hindrance on our part (right to portability). Object to the processing of your data, in particular if your data is collected for direct marketing purposes (right to object).

To exercise your above rights, you can submit the corresponding request to the company at the following email address: info@lasitia.com. For each of your requests, the Company will respond to you, as a rule, within one (1) month and a maximum of three (3) months, after being informed of this delay and of the reasons that make it difficult to process your request. If your requests are manifestly unfounded or excessive, in particular due to their repetitive nature, the company may impose a reasonable fee, taking into account the administrative costs of providing the information or performing the requested action. V. Right to complain to the competent Authority. If you consider that the protection of personal data is affected in any way, you may appeal to the Hellenic Data Protection Authority (www.dpa.gr, 1-3 Kifissias Avenue, PC 115 23, Athens, +30 210 6475600, +30 210 6475628, contact@dpa.gr).

This Privacy Policy was posted in January 2024