Privacy policy

INFORMATION - DECLARATION ON THE PROCESSING OF PERSONAL DATA BY THE COMPANY << FILL IN HERE >>

As Data Controller and Processor in accordance with the General Data Regulation EU 2016/679

For the Company, the respect and protection of your personal data is a commitment. We understand and take seriously the fact that you are aware of and interested in your personal data.

This Privacy Statement describes the personal data that the Company collects about you, how we use and protect your personal data, and the choices you have about how we use that data.

We recognize that protecting personal data is an ongoing responsibility and therefore we will update and amend this Statement from time to time. Please visit our website www.boutari.gr from time to time to ensure that you are aware of and happy with any changes.

1. What personal data we collect about you
1.1: We collect the names (first name, last name) and surnames of our customers and the names of our customers' contact persons when they express their interest in our services or subscribe to our newsletter or participate in our promotions.
1.2 Email address.
1.3 Postal address.
1.4 Other contact information: We collect other contact information, such as the telephone number of our customers or our customers' contact persons, in order to provide our products and services better and faster.
1.5 Billing information.
1.6 We try to minimise the risk to your rights and freedoms by not collecting sensitive personal data relating to you.

2. How we collect your personal data
We collect your personal data when you express your interest in our products and services and contact us, when we enter into a contractual relationship for the provision of our products and services, when you visit our website and fill in the contact form. We do not make your personal data available for sale to anyone and only share it with third parties who facilitate the provision of our services to you.

3. How we use (process) your personal data
We use your personal data for the following purposes:
3.1: Having as our business the production and marketing of wines and beverages, we have a well-organized sales network in order to serve our customers.
3.2 Marketing and/or promotional activities, such as participation in competitions or emails sent periodically to those who have subscribed to our newsletter. To the list of persons we send newsletters to we may add those who give us their email addresses when contacting us and who indicate that they wish to receive newsletters. In each newsletter the recipient is given the opportunity to indicate that they do not wish to receive any more newsletters from us.

4. Lawful basis for processing your personal data
4.1 The processing of your personal data carried out for the provision of our services to you is based on the conclusion and performance of a contract or - at your request - on preparatory actions for the conclusion and performance of a contract.
4.2 The processing of your personal data carried out for marketing and/or promotional purposes is based on your consent.
4.3 In certain cases, the processing of your personal data is necessary for the purposes of our legitimate interests or for the purposes of complying with national and/or European legislation.

5. Retention time of your personal data

5.1 We retain your personal data for the duration of our business relationship. We retain the personal data of our customers and consumers for at least fifteen (15) years in order to be able to fulfill our obligation to maintain accurate records for tax or other administrative authorities.

5.2 We retain the personal data of persons who have subscribed to our newsletters (and/or our promotions) until such persons have indicated to us that they no longer wish to receive newsletters and/or promotional material from us.

5.3 For more information about where and for how long your personal data is retained, please contact us at <<FILL HERE>>

6. Guarantees we receive for the protection of your data
When you give us your personal data, we take steps to ensure that it is kept securely. In order to protect your personal data, we take physical, technical and organisational measures to protect it. We update and monitor the security technology we use on an ongoing basis. We restrict access to your personal data to only those employees who need to know that data in order to provide services to you. In addition, we educate employees on the importance of confidentiality and maintaining the privacy and security of your personal data. Among other things, we have implemented the following technical and organizational measures and procedures to protect your personal data from any loss, alteration, unlawful processing or modification:

Encryption
Detection and management of security breach incidents
Use of servers located in rooms with restricted access and subject to regular audits
Use of information systems and computer programs installed in a way that minimises the use of personal and/or authentication data of the user
Adoption of individual procedures for the retention of personal data and their secure deletion/destruction
Access to systems and databases on a need-to-know basis.

7. When and how do we transfer your personal data to others?
As part of our activities, companies of our interest may also have access to your personal data. In addition, we use third party providers who provide services on our behalf. As such, we may need to share your personal data with them. However, we only share with them the personal data that is necessary for them to provide the services we request of them and we require them to protect your data and not to use it for other purposes. The personal data we collect from you is stored in one or more databases hosted by third parties located within the European Union. These third parties do not use or access your personal data for any purpose other than storage and retrieval in the cloud.

8. Your rights
You have the right to request access to your personal data that we process. In addition, you have the following rights:
8.1 Right to rectification or erasure (in certain cases) of your personal data.
8.2 Right to restrict processing or object to the processing of your personal data.
8.3 Right (subject to conditions) to receive your personal data in order to use it elsewhere.
8.4 Where we process your personal data on the basis of your consent, you also have the right to withdraw your consent at any time, without affecting the lawfulness of the processing for the period prior to the withdrawal of your consent.
Finally, you have the right to lodge a complaint with the competent Greek independent authority, which is the Hellenic Data Protection Authority.

9. Transfer of personal data outside the EU

The personal data we collect from you is not transferred or processed outside the European Union.

10. How to contact us?

You can contact us with any questions about our processing of your personal data or to exercise your rights by emailing us at << FILL IN HERE >>. The Company's data protection officer is designated << FILL IN HERE >>

11. If you need to contact us by email or by phone, please contact us by email or by phone at the address below.

We reserve the right to amend and update this Statement at any time, for any reason, without notice to you, other than by posting the updated Statement on our website. We may send periodic emails to remind you of changes and updates to this Statement, but you should check our website frequently to keep up to date with the current and applicable Privacy Statement.