Privacy Policy

The Data Controller responsible for the processing of personal data is:

Souvlaki N’ Wrap
Store Manager: Despoina Alefragki
Address: Oia, Thira, 84702, Greece
Telephone: +30 22860 72448
Email: souvlakinwrap@hotmail.com

When you visit or use our website, we may collect certain information, including:

• Name and contact details voluntarily provided by you
• Email address
• Telephone number
• Information submitted through contact forms
• IP address
• Browser type and version
• Operating system and device type
• Information about your visit and navigation through the website
• Information collected through cookies and website analytics tools

We only collect personal data that is necessary for the operation of our website, communication with visitors, improvement of our services, and compliance with applicable legal obligations.

Personal data collected through our website may be used for the following purposes:

• To operate, maintain, and manage the website
• To respond to questions, requests, or communications
• To improve the functionality and user experience of the website
• To analyse website traffic and performance
• To maintain the security of the website and prevent fraudulent or malicious activity
• To comply with applicable legal and regulatory obligations
• To send promotional or marketing communications only where the user has provided the necessary consent

Depending on the circumstances, we process personal data on one or more of the following legal grounds:

• Your consent
• The performance of a contract or steps taken before entering into a contract
• Compliance with a legal obligation
• Our legitimate interest in maintaining, protecting, and improving our website and services

Where processing is based on your consent, you have the right to withdraw your consent at any time.

Our website may use cookies to ensure its proper operation, improve the user experience, and analyse website traffic and performance.

Cookies are small data files that are stored on your device when you visit a website.

Our website may use:

• Essential cookies required for the proper operation of the website
• Functionality cookies that improve the user experience
• Analytics and performance cookies
• Advertising and marketing cookies, where applicable and subject to the user’s consent

Where required by applicable legislation, non-essential cookies will only be activated after the user has provided consent.

You can manage your cookie preferences through the cookie consent management system available on our website.

You may also manage, block, or delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality or performance of the website.

Our website may use third-party services for website analytics, functionality, advertising, content display, or other technical purposes.

These third-party service providers may process certain information in accordance with their own privacy policies.

Where required by applicable data protection legislation, non-essential third-party services will only be activated after the user has provided the necessary consent.

Certain photographs displayed on our website may originate from content publicly posted by users and visitors of our restaurant on online platforms such as Google Maps and Tripadvisor.

Such photographic material is used exclusively for the purpose of presenting the experience, products, food, and services offered by Souvlaki N’ Wrap.

If you are the creator of, hold rights to, or appear in a photograph displayed on our website and wish to request its removal, please contact us at souvlakinwrap@hotmail.com.

Upon receiving and reviewing your request, we will take the appropriate action regarding the removal of the relevant content where required.

We do not sell, rent, or disclose your personal data to third parties for their own commercial or marketing purposes.

Where necessary, personal data may be shared with:

• Website hosting and technical support providers
• IT service providers
• Professional advisers, including accountants or legal advisers
• Business partners and service providers necessary for the operation of our website and services
• Public, judicial, regulatory, or other competent authorities where disclosure is required by applicable law

Any service provider processing personal data on our behalf is required to implement appropriate technical and organisational measures to protect such data.

We do not sell, rent, or disclose your personal data to third parties for their own commercial or marketing purposes.

Where necessary, personal data may be shared with:

• Website hosting and technical support providers
• IT service providers
• Professional advisers, including accountants or legal advisers
• Business partners and service providers necessary for the operation of our website and services
• Public, judicial, regulatory, or other competent authorities where disclosure is required by applicable law

Any service provider processing personal data on our behalf is required to implement appropriate technical and organisational measures to protect such data.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected.

The retention period may vary depending on:

• The purpose of the processing
• Applicable legal, accounting, or regulatory requirements
• The need to establish, exercise, or defend legal claims

When personal data is no longer required, it will be securely deleted or anonymised where appropriate.

We implement appropriate technical and organisational measures to protect personal data against:

• Unauthorised access
• Loss
• Destruction
• Alteration
• Misuse
• Unlawful disclosure

Under applicable data protection legislation, including the GDPR, you may have the right to:

• Request access to your personal data
• Request the correction of inaccurate or incomplete personal data
• Request the deletion of your personal data
• Request the restriction of processing
• Object to the processing of your personal data
• Request data portability
• Withdraw your consent at any time where processing is based on consent

The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of your data protection rights, please contact us at:

souvlakinwrap@hotmail.com

If you believe that the processing of your personal data violates applicable data protection legislation, you have the right to lodge a complaint with the competent data protection supervisory authority.

In Greece, the competent supervisory authority is the Hellenic Data Protection Authority.

Our website may contain links to third-party websites or online services.

We are not responsible for the privacy practices, policies, security, or content of third-party websites.

We recommend reviewing the privacy policies of any third-party website before providing personal information.

We may update or modify this Privacy Policy from time to time to reflect changes in applicable legislation, our services, or the operation of our website.

Any updated version of this Privacy Policy will be published on this page.

We recommend reviewing this Privacy Policy periodically to stay informed about any changes.

If you have any questions regarding this Privacy Policy or the processing of your personal data, you can contact us using the following details:

Souvlaki N’ Wrap
Store Manager: Despoina Alefragki
Address: Oia, Thira, 84702, Greece
Telephone: +30 22860 72448
Email: souvlakinwrap@hotmail.com
G.E.MI. Registration Number: 175901438000