Data Protection Policy

This privacy statement covers all subjects whose personal data has been collected, in compliance with the requirements of current legislation and GDPR.


The bakery management is responsible for ensuring that this statement will be available to data subjects before the company collects and processes their personal data.

All bakery staff as well as associates who are actively involved in personal data processing are responsible for ensuring that this statement-notice has received the attention of the data subject and that their consent to the processing of their data (where required) ) is secured.

Privacy Notice

Who we are;

Our company with the name NTOUROUNTOUS BAKERY OEBE has as its purpose, among other things, the exploitation of the Ntourountous bakery located in the country of Sfakion in the Prefecture of Chania, Crete and is responsible for processing according to the legislation in force for the protection of personal data.

You can contact our bakery directly:

Ntourountous bakery
Chora Sfakion 73011 Crete, Greece
Tel: +30 28250 91270 |

We may collect and process the following information which belongs to the category of personal data:

Type of personal data

Personal information you provide to us, such as your name, contact information such as your address, telephone number, email address, or any other information you provide upon your access to our services (may include sensitive personal information data such as health data in case you ask us for special services or help eg nutritional needs, room for the disabled)

Purpose of processing

From the moment of the order or the communication that you will make, we proceed to the collection and processing of your personal data in order to support the services that we provide to you and to maintain future communication between us.

Type of personal data

Information that we collect automatically using cookies when you browse our website (such as IP or preferences information)

Purpose of processing

This information allows us to remember you and your preferences when using our website in order to provide you with a better navigation experience and to provide you with higher quality services.

Type of personal data

Information required to provide work or services.

Purpose of processing

The initiation and maintenance of the contractual relationship as well as the safeguarding of any legal claims in accordance with the law.

Type of personal data

Information that we collect in the context of a contractual relationship such as pricing data and contractual data in the case of our counterparties.

Purpose of processing

Monitoring and execution of the contractual relationship.

Type of personal data

Identification information such as name, contact details and video image recording in case of a visit to our bakery.

Purpose of processing

The safety of our facilities and employees.

Our legal basis for the processing of personal data may be one or more of the following:

  • Your consent
  • The fulfillment of the contractual obligations between us
  • Compliance with legal obligations
  • The legal interests we pursue as a company
  • The establishment, exercise or support of legal claims


With the exception of the cases provided by the legislation and the GCC, our company will always obtain the explicit consent of the data subjects for the collection and processing of their data. By consenting to this privacy notice, you give us permission to process your personal data specifically for the purposes specified.

Consent is required for our company to process both types of personal data (simple and sensitive), but must be given explicitly. When you disclose sensitive personal data we will always inform you of the reason and how this information will be used.

For any processing that requires your consent, we know that you can withdraw it at any time by contacting us by phone or e-mail and following the instructions that we will indicate.


Our company may transfer your personal data to public, and / or independent Authorities, partners and assistants of our activities / events and partner companies of the Group and will not transfer your personal data to countries outside the EU without first has received your consent.

Conservation Period

Our company will only store your personal data for a period of two years in order to assist

Our company with you and for statistical reasons. In case of associates and employees of the company, the data will be kept for as long as required in accordance with the law and the protection of our legal interests.

Your rights as a data subject

At any time while we own or process your personal data, you, the data subject, have the following rights:

  • Right of access: you have the right to request a copy of the information we hold about you.
  • Right of correction: you have the right to correct data that we hold about you that is incomplete or inaccurate.
  • Right to forget: in some cases you may request that the data we hold about you be deleted from our files.
  • Right to restrict processing: where certain conditions apply to have the right to restrict processing.
  • Right of objection: you have the right to object to certain types of processing
  • Right to object to automated editing, including profiling: you also have the right to object to automated editing or profiling (if any).
  • Right of control: in case our company refuses to satisfy your request based on the above rights you have, we will give you a reason as to why. You have the right to protest as stated in paragraph 3.6 below.
  • All the above requests will be forwarded from the moment a third party is involved in the processing of your personal data.


If you wish to complain about the way our company handles your personal data, or the way your complaint was handled, you have the right to consult and / or file a complaint directly with the audit authority.

Contact details of APDPH

Address: Personal Data Protection Authority
Offices: Kifissias 1-3, PC 115 23, Athens
Email: &
Call Center: +30 2106475600
Fax: +30 2106475628

Updates to this Privacy Statement

We make every effort to continuously improve our services and processes, as well as to protect your rights regarding your personal data. Therefore, we may from time to time update this Privacy Statement. We, therefore, recommend that you check this statement on a regular basis.

Cookies Settings