Privacy policy
This policy explains how we process personal data when you visit www.hot-krispy.gr or order from us by phone, in line with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and Greek law 4624/2019.
1. Data controller
«ΑΡΒΑΝΙΤΙΔΗΣ ΝΙΚΟΛΑΟΣ ΚΑΙ ΣΥΜΕΩΝ ΟΕ» (ARVANITIDIS NIKOLAOS KAI SYMEON OE)
9 Kyrillou St., 303 00 Nafpaktos, Greece
Phone: +30 26340 23540 · Email: hotnkrispy@hotmail.com
Contact person: Nikolaos Arvanitidis
2. What data we process and why
a) Visiting the website
- Server logs. Our hosting provider automatically records technical data for every request (IP address, date and time, page requested, browser type). We use them only for the security and proper operation of the website. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR). They are kept for a short period (usually up to 30 days) and then deleted.
- Essential local storage. Your browser stores your cookie choice and accessibility settings. This data stays on your device and is not sent to us.
- Statistics (Google Analytics 4) – only with your consent. If you click “Accept” or enable statistics in “Cookie settings”, we use Google Analytics 4 to understand how the website is used (pages visited, approximate location at city level, device type, visit duration). Legal basis: your consent (Art. 6(1)(a) GDPR). Without consent Google Analytics is not loaded at all. Data is kept in Google Analytics for up to 14 months.
b) Orders
Online orders are made on our separate ordering site hotkrispy.gr; the processing of data there is described in that site’s own privacy policy.
When you order by phone, we ask for your name, delivery address and phone number in order to prepare and deliver your order. Legal basis: performance of a contract (Art. 6(1)(b) GDPR). We keep this data only as long as needed for the order and our tax obligations.
We do not use your data for advertising, we do not sell it and we do not make automated decisions or profiles about you.
3. Recipients
- Our website hosting provider, as a processor, for the operation of the website.
- Google Ireland Limited, as a processor, for Google Analytics – only if you consent. Google may transfer data to the USA; such transfers rely on the EU-US Data Privacy Framework and the European Commission’s standard contractual clauses. More: Google privacy policy (opens in a new tab).
- Public authorities, when required by law.
4. Your rights
You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to data portability (Articles 15–22 GDPR). Where processing is based on consent, you may withdraw it at any time, without affecting the lawfulness of processing before the withdrawal – for statistics, simply use “Cookie settings” at the bottom of every page.
To exercise your rights, contact us at hotnkrispy@hotmail.com or on +30 26340 23540. We will reply within one month.
You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr (opens in a new tab), Kifissias 1-3, 115 23 Athens).
5. Security
The website is served only over an encrypted connection (HTTPS), does not collect data through forms and uses no user accounts. We apply appropriate technical and organisational measures to protect personal data.
6. Minors
The website is not addressed to children under 15 and we do not knowingly collect their data.
7. Changes
We may update this policy, for example when the law or our services change. The current version is always published on this page.
Last updated: