Privacy Policy
STOA | Privacy Policy
This Privacy Policy explains how the company LEGENDARY FOOD SA (44-46 Stadiou & Pesmazoglou 5, 10564, Athens, Tel.: 2103221184, E-mail: info@legendary-food.com) (hereinafter the “Company”, “we”) collects, uses and protects the personal data of visitors/users of the website www.stoa.gr (hereinafter the “Website”).
1. Data Controller
- Brand Name: LEGENDARY FOOD SA
- Distinctive Title: LEGENDARY FOOD SA
- GEMI No.: 145885701000
- Tax Identification Number: 800964780
- Headquarters: 44-46 Stadiou Street, 10564, Athens
- Contact Email: info@legendary-food.com
- Telephone: +30 210 3221184
2. Purposes of processing
The Website is for informational purposes only. The personal data we collect and process are limited exclusively to the following processing purposes:
- Technical operation of the Website through the use of strictly necessary cookies (see Cookies Policy).
- Contacting users or producers who send a request via email.
We do not carry out marketing, profiling or automated decision-making through our Website.
3. Legal basis for processing
The processing of personal data is based on:
- the fulfillment of our legal obligations , if required (Article 6 par. 1 f. c of the GDPR, Article 4 par. 4 of Law 3471/2016, as amended and in force),
- in our legitimate interest for the proper operation of the Website and the service of requests (Article 6 par. 1 (f) GDPR),
- the user’s explicit consent only if explicitly requested for a special purpose (e.g. if it is possible toduring the User’s subscribe subscription to a receiving newsletters and other promotional messages via email in the future).
4. Data categories
Depending on your use of the Website, we collect and process the following personal information:
- Contact details provided by the visitor/user directly to our Company (e.g. name, email, telephone number).
- Technical navigation data (IP address, browser, strictly necessary cookies).
We do not collect or process special categories of data (sensitive data) through the Website.
5. Retention period
- In case a message or request is received from a visitor/user (e.g. via e-mail), the identity and contact data included in it are kept only for as long as it is necessary for the examination and service of the request and are then deleted within twelve (12) months from its final processing.
- In case the User subscribes to receive newsletters and other informative and promotional messages via email, the User’s data (email) is retained for as long as the relevant declaration of consent is valid and in case of cancellation of the registration (withdrawal of consent) they are deleted immediately.
- Strictly necessary cookies are necessary for the operation of the website and allow navigation and the use of its basic functions. These cookies are automatically deleted when you close your browser (session cookies).
- Traffic analytics cookies are used only if the visitor/user have given their consent through the relevant selection mechanism (cookie banner). These cookies are kept for a period of up to 365 days from the moment of their acceptance, unless the user deletes them earlier through the browser settings or the cookie management function of the website.
6. Access to data – Third party recipients
Access to personal data is granted exclusively to authorized members of the Company and any external cooperating third-party IT providers, such as providers of hosting/support services of the Website. These third-party providers acting in the name and on behalf of our Company undertake contractually strict obligations to maintain confidentiality, privacy and personal data protection, as required by law.
We do not transfer personal data of visitors/users to third parties for advertising or commercial purposes.
We do not transfer in any way personal data of visitors/users to third parties established in third countries outside the EU/EEA.
7. Rights of subjects
Visitors/users of our Website have the rights provided for by the General Data Protection Regulation (GDPR), and in particular:
- right of access,
- right to rectification;
- right to erasure (‘right to be forgotten’);
- right to restriction of processing;
- right to object,
- right to data portability.
Requests for the exercise of the above rights are submitted by sending an email to the Company: info@legendary-food.com and by post by sending a written letter to the postal address: 44-46 Stadiou & Pesmazoglou 5, 10564, Athens.
8. Data Security
The Company implements appropriate technical and organizational measures to protect personal data from loss, accidental or unlawful destruction, unauthorized access or disclosure.
9. Competent Authority – Right to complain
In case you consider that we have not adequately satisfied any of your requests and/or the protection of your personal data is affected in any way, you can submit a complaint through the relevant special web portal to the Personal Data Protection Authority (Athens, 1-3 Kifissias Avenue, P.C. 115 23 | tel: +30 210 6475600). Detailed instructions for submitting a complaint are provided on the Authority’s website.
10. Amendments
The Company reserves the right to update or modify this Policy at any time. The current version will always be available on the Website.
Last updated: 15.10.202527.03.2026