Welcome to our Privacy Notice. It’s very important for us to keep you informed on how we handle and keep your data safe. This Notice will give you information on:
• What kind of personal data we collect
• How we collect your personal data
• Why we collect your personal data
• How long do we keep your data
• Your privacy rights


Who we are

1.1. We are a bakery, owned and managed by Karavolias Athanasios with Τax ID Number 101688878 (Tax Office of Rhodes), based in Irakleidon Avenue n.51a, in Ialysos, Rhodes, with telephone number +30 2241 0 92336, +30 2241094574, and

1.2. This privacy Notice issued on behalf of Karavolias Bakery (KB). KB is the data controller -the one responsible and in charge for any personal data (i.e. any information that would allow to identify you, either directly or indirectly) you provide us through our website at So when we say ‘we’, ‘us’, or ‘our’ in this Notice we are actually talking about KB.


How to contact us

If you have any questions about this Notice, please contact our legal department at:

Karavolias Bakery

Iraklidon 51a, Ialysos, Rhodes
Telephone: +30 2241 0 92336, +30 2241094574

Please include your name and the reason for contacting us. If you don’t provide that information, it’s absolutely fine and we will then, treat your request as if the question relates directly to the company.


What types of data we collect?

Types of personal information we collect:

1.In case you want to communicate with us by using our website’s contact form you have to provide us with your name, your email, subject and your message.
2.In case you want to work with us by using our website’s contact form you have to provide us with your name, your email, message and your CV.
3.We may collect additional information such as your mobile/landline number, your address, your allergies/food preferences/intolerances only in case you contact us via phone, viber, whatsapp and mail and place an order or ask to prepare for you a specific product.

In some exceptional circumstances we may collect certain Personal Data that constitutes sensitive data, such as (indicatively but not limited to): data related to health conditions (for instance, allergies). In this case we will collect this data under your explicit, clear and freely given consent and only for the purpose of delivering tailor made products to you.


How we collect your data ?

We may collect information in two ways. One is by the information our visitors provide on a voluntary basis and other is by the information we receive from our visitors via cookies.


Why we collect your data?

We process your Personal Data and other information if such processing is necessary:

• To execute the contract of delivering the requested products to you;

Legal grounds: pre-contractual or contractual obligation.

• to protect the interests, rights, safety, or property of us or others.Legal grounds: where necessary for our legitimate interests, which are to protect such interests, rights, safety and property;
• to hire personnel

Legal ground: pre-contractual or contractual obligation.


How long do we keep your data?

We retain personal data about our customers for as long as necessary for the purposes for which it was collected, or unless otherwise allowed or required by you or by law. We collect Personal Data for a number of purposes (see above) and may be required to retain it for legal (including tax, civil or other legal regulations) reasons for a period which is longer than the time we need or use the data for the purpose of providing our products to you. We maintain a data retention policy to cover all the Personal Data we retain across our systems. In any case, we maintain your personal data in our records for a maximum period of 1 year.


The criteria used to determine our retention periods include:

• Whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them)
• Whether retention is advisable considering our legal position (such as, for statutes of limitations, litigation or regulatory investigations)
• Our relationship prospects;


In the event you request to delete your data to delete any information concerning you before the set retention periods (when applicable), we may not be able to do so for technical, legal, regulatory or contractual constraints. Your information will be retained in order to comply with legal and regulatory obligations as well as for analysis, to prevent fraud, collect any remaining amount of money owed, and to resolve disputes.

We will destroy your personal information as soon as possible and in a non-restorable, non re-identifiable manner.


How do we share your data?

We do not share your personal information with others.

We do not transfer your personal data to countries outside the EU.


Technical and organizational measures

We use reasonable administrative, technical, personnel, and physical measures (a) to safeguard Personal Data against loss, theft, unauthorized use, disclosure, or modification; and (b) to ensure the integrity of your Personal Data.

Communication with you

As you may be aware, there is no completely secure method of transmitting or storing data. Although their physical characteristics are different, postal mail, telephone calls, text messages, faxes and transmissions over the Internet or wireless networks all present possibilities of loss, misrouting, interception and misuse of the data that is transmitted. If you have reason to believe that our website is no longer secure, you must immediately contact us.


Your rights

You have the right to:

be informed. The information that Karavolias Bakery supplies about the processing of personal data will be concise, transparent, intelligible; written in clear and plain language; and easily accessible.
Access all personal data you provide to us, in printed or in electronic form free of charge;
• Obtain rectification of any inaccurate or outdated data, or to complete any incomplete data;
• Receive or ask us to provide you or transmit your data in common format (data portability);
Delete your personal data, provided we have no legal obligation to do otherwise;
• Ask for the restriction of any data processing activities;
Object to certain types of processing including direct marketing;
• Submit a complaint to the Greek Data Protection Authority. You can see further information on their webpage (;


All rights can be exercised by submitting a written request to the Reception or via email free of charge (e-mail:

Our designated officer will respond to your request within thirty (30) calendar days.


Changes to our Privacy Notice

From time to time we may make changes to this Notice. This might be in relation to changes in the law, best practice, changes to the services we provide or collection and use of your personal information. We will always display clearly when the Notice was last updated and where appropriate, notify you of any relevant changes.


Contact us

If you would like to get in touch with us, please contact:

Karavolias Bakery
Iraklidon 51a, Ialysos, Rhodes
Telephone: +30 2241 0 92336, +30 2241094574