Preamble

For Koukakis Farm, respect and protection of your personal data is a commitment. We recognize that your privacy is important to us, and we are informing you about the ways we collect, use, and manage your personal data.

This Privacy Policy Statement describes the privacy and confidentiality practices of Koukakis Farm, which complies with the European General Data Protection Regulation (GDPR 2016/679) and the applicable Greek data protection laws. It specifically describes the personal data we collect on your behalf, how we use and protect it, as well as the rights you have regarding how we use that data.

Its purpose is to inform you about the policy we apply concerning your personal data, which you provide to us, so that you know the purpose of processing it by us, the category of recipients, and the procedures you can follow to exercise your legal rights.

How We Collect Your Personal Data

When you communicate with us through our website by entering your data in the contact forms with Koukakis Farm, via email, or by phone.

When submitting your CV either through the website or any other suitable method (e.g., email, mail).

If your personal data is lawfully transferred to us by commercial partners.

Through social media, if you have granted access to your data on one or more social media platforms.

During your visit to our facilities.

Why We Collect/Process Your Personal Data

We process the personal data you provide us for the following purposes:

To communicate with you and manage our relationship with you. For processing your requests and orders.

To ensure our legitimate interests. We also use closed-circuit television (CCTV) and security cameras during your visit to Koukakis Farm’s physical locations, to ensure the security of individuals, materials, and our facilities. For the same reason, we also record the details of visitors and contractors entering our facilities to perform work, etc.

For compliance with the law, sale, or transfer of any relevant part of our company, management of our systems and finances, conducting surveys, and exercising our legal rights. We combine the personal data we collect from all sources to gain a more comprehensive view of you to improve and personalize your experience during your interactions with us.

Koukakis Farm makes every effort to minimize risks to your rights and freedoms by not collecting more personal data than necessary to achieve the above purposes. Your data is not further processed in a way incompatible with the purpose.

What Personal Data We Collect for You

Personal data that you provide to us, e.g., when creating accounts, making purchases, connecting to our websites, communicating with us, sharing feedback, completing forms, sending emails, contacting us by phone, or posting information about Koukakis Farm on social media platforms. For example: We collect contact information such as full name, address, postal code, phone numbers, and email address when you communicate with us directly, either through the online contact form or by phone, or when you send us your CV. These details are also requested from individuals who collaborate with Koukakis Farm. Additionally, we collect billing details from individuals who provide products or services to us, such as their home/business address, tax identification number (TIN), and the name of their tax office, to verify the amount due from us and to comply with tax regulations. Depending on the position you apply for, we collect the details you submit and process personal data such as: your educational background, employment history, previous employers, areas of expertise, professional and other work permits and certifications, the educational institutions you graduated from, and your work preferences. For the purpose of verifying your application history, we may also obtain information about you from other sources where permitted by applicable law, such as previous employers, subcontractors providing technical services, and publicly available sources. We also collect the information you provide and the content of the messages you send to us, such as inquiries and information provided through the online contact form. We do not use email content or conversations for advertising targeting.

Data that we create (e.g., when you make purchases) and data that is collected automatically when you visit any of our websites or applications, such as IP address, device identifier, browser used, or how you interact with Koukakis Farm websites.

Data we collect from other legitimate sources, such as Koukakis Farm partners for promotional activities, publicly available sources, data from your interactions with our ads, or personal data that forms part of your social media profile and that you have made available to us.

If you visit Koukakis Farm facilities, your image may be recorded by our CCTV and security cameras, which are used to detect and prevent malicious activities.

Personal Data of Minors

Koukakis Farm does not knowingly process or collect personal data of minors. If it is found that personal data of a minor has been collected without verifiable consent from a parent or guardian, Koukakis Farm will take appropriate steps to immediately delete such data from its databases.

Legal Basis for Processing Your Personal Data

We process your personal data lawfully in accordance with the principles of GDPR 2016/679 (Lawfulness, Objectivity, Transparency, Purpose Limitation, Data Minimization, Accuracy, Storage Limitation, Integrity, Confidentiality, and Accountability) for one or more of the following reasons:

When processing is necessary for the performance of a contract or to comply with a legal obligation as a Data Controller towards supervisory or judicial authorities.

When processing is necessary for compliance with legal, tax, and other obligations related to labor, health, and insurance laws.

When processing is necessary to comply with national and/or European law.

When processing is necessary to serve our legitimate business interests (and third parties), respecting your fundamental rights.

When you explicitly consent (opt-in) to a promotional or advertising activity outside of the main contract with us.

In case of public disclosure by the data subject.

When processing is necessary for the protection and safeguarding of legitimate interests, both ours and yours.

Recipients

In fulfilling our contractual and legal obligations, your personal data may be provided to various service providers and suppliers. In such cases, it is assumed that these third parties agree to comply with the GDPR provisions. Any companies to which Koukakis Farm discloses your personal data under a service provision contract will process your personal data solely for the specific purpose and on behalf of Koukakis Farm and are obliged to ensure confidentiality and protection of the data in accordance with the Data Protection Regulation. These recipients may include: Courts, prosecutors, police, or other public authorities, external legal, tax, and accounting advisors, technical support and IT companies, cloud providers, financial and business organizations, and marketing companies, building security services, etc. Within Koukakis Farm, your personal data will be shared only with the relevant personnel for the purpose of servicing you and managing our relationship.

In any case, unauthorized access by persons, including Koukakis Farm staff, to your personal data is prohibited.

Duration of Retention of Your Personal Data

Your personal data is retained only for as long as necessary to fulfill the purpose for which it was collected and processed and for the duration necessary to fulfill our contractual and legal obligations. The retention period is determined based on the following specific criteria depending on the case:

We retain the CVs we receive from you for job applications, whether in paper or electronic form, for at least until the recruitment process is completed and for two years after we receive them for potential future employment, for five (5) years for those who entered into an apprenticeship contract with Koukakis Farm, and for five (5) years after the departure of an employee with an employment contract.

We delete your data when it is no longer necessary for the purposes for which it was collected and processed, or when you request deletion through a request or by exercising your right of objection, provided there are no compelling legal reasons requiring us to retain this information. If the data collection for marketing or promotional purposes was solely based on your consent, it will be deleted after you withdraw or revoke the consent you have given.

Guarantees for the Security of Your Personal Data

Koukakis Farm applies appropriate technical and organizational measures to ensure the secure processing of your personal data and to prevent accidental loss, destruction, unauthorized and/or illegal access, use, modification, or disclosure. Although the nature of the internet and the fact that it is open to anyone does not allow us to guarantee that unauthorized third parties will never have the ability to breach the implemented technical and organizational measures, we strive to prevent unfortunate circumstances.

Transfer of Personal Data Outside the European Union

Your personal data is primarily stored in Greece and the European Economic Area (EEA), which includes the 28 EU countries and Iceland, Liechtenstein, Norway.

The personal data we collect from you is not transferred or processed outside the European Union, except in certain cases where it may be transferred to third countries outside the EEA, in compliance with the provisions of the GDPR, such as adequacy decisions on privacy laws of the destination country, standard corporate rules, standard contracts, or approved codes of conduct, or because you have given us explicit consent.

Links to Other Websites

Our website may contain links to other websites. This Privacy Policy applies only to Koukakis Farm. Therefore, whenever you follow a link from this website to another, we recommend that you carefully read the privacy policies of the respective websites. If you choose to connect to any third-party website via special links (e.g., links, hyperlinks, banners) contained on the website, the company bears no responsibility for the management and protection of personal data applied by these third parties.

Your Rights

Any natural person whose personal data is being processed by the company may exercise the following rights under the terms and specific provisions of Regulation (EU) 2016/679:

Right of Access: You may request and receive from Koukakis Farm information regarding your personal data we process, as well as information about the processing, such as the purposes, recipients, and retention period (Article 15 of the Regulation). As part of this right, you may request a free copy of your personal data being processed. In case of repeated and obviously unjustified requests, Koukakis Farm reserves the right to charge a reasonable fee.

Right of Rectification: You may request the correction of inaccurate or the completion of any incomplete data, actions that the company will undertake without undue delay (Article 16 of the Regulation). Our company is committed to informing the recipients to whom your data has been disclosed (Article 19 of the Regulation).

Right of Objection: You may object to the processing of your personal data when there is a legitimate interest for it, according to the terms of Article 21 of the Regulation, including your right to object to automated processing of your data and processing for commercial promotion purposes.

Right of Deletion (“Right to be Forgotten”): You may request the deletion of your personal data if there is no longer a legal obligation for us to retain it, or if you object to its processing based on a legitimate interest (Article 17 of the Regulation). In certain cases (e.g., when there is a contract, a legal obligation to process personal data, public interest), this right is subject to specific limitations or may not exist, depending on the case. Our company will delete your data without undue delay upon your request, under the conditions specified by the relevant Greek and European data protection laws. The company is committed to informing the recipients to whom your data has been disclosed (Article 19 of the Regulation).

Right to Withdraw Consent: If we process your personal data based on your consent, you may withdraw it at any time or change the level of consent you have provided without affecting the legality of the processing before the withdrawal.

Right to Portability: You can obtain your personal data in a structured, commonly used, and machine-readable format, and request that the data be transferred to other data controllers (Article 20 of the Regulation).

Right to Restriction: You may request the suspension of processing of your personal data: (a) when you dispute its accuracy, and until verification is done, (b) when you object to the deletion of personal data and request instead a restriction on its use, (c) when personal data is no longer needed for processing purposes but is necessary for the establishment, exercise, or defense of legal claims, and (d) when you oppose processing and until it is verified that there are legitimate reasons outweighing the reasons you oppose processing (Article 18 of the Regulation).

Right to Lodge a Complaint: You can address the competent Greek independent authority, which is the Hellenic Data Protection Authority, in case of unlawful processing of your data (http://www.dpa.gr/). Telephone: +30 210 6475600, Fax: +30 210 6475628, Email: contact@dpa.gr.

If you exercise any of your rights above, Koukakis Farm will respond within one month, unless your request is particularly complex or there is a large number of similar requests. In any case, Koukakis Farm is committed to informing you in detail of any incidents of data breaches that may put your rights and freedoms at high risk, as well as the measures to address them.

Contact with Data Controller & Data Protection Officer

The Data Controller is “Koukakis Farm S.A.”. You can contact Koukakis Farm for any questions or concerns regarding your personal data and its processing, as well as to exercise the above rights by:

(i) via email at info@koukakisfarm.gr.
(ii) by phone at 2341094455 or
(iii) by mail at Koukakis Farm S.A., Kato Apostoloi, Kilkis, 61100.

You can also contact the DPO for any issue concerning your personal data via physical or electronic correspondence (Koukakis Farm S.A., Data Protection Officer, Kato Apostoloi, Kilkis 61100, Kilkis, dpo@koukakisfarm.gr).

Changes

Koukakis Farm reserves the right to modify and update this Privacy Statement at any time and for any reason. Please check our website periodically for updates. Any changes to this statement will be posted immediately here.