Privacy Policy

1. Introduction and Data Controller

Evangelia Migiaki Helios Imperial IKE (hereinafter the “Company” or “we”), whose registered office is at 7 Ivis Street, Galatsi, 111 46 Athens, VAT No. 801924104, Tax Office: KEFODE Attikis, General Commercial Registry (G.E.MI.) No. 166015302000, attaches great importance to the protection of the personal data of visitors to the website emiyaki.gr (hereinafter the “Website”).

This Privacy Policy explains how we collect, process, store and protect your personal data, in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), Greek Law 4624/2019 and all other applicable Greek and EU legislation.

Contact details of the Data Controller: email: info@emiyaki.gr, evimigiakihelios@gmail.com — telephone: (+30) 210 6463666, (+30) 694 807 6325.

2. Definitions

For the purposes of this Policy:

• “Personal data” means any information relating to an identified or identifiable natural person.
• “Processing” means any operation performed on personal data, such as collection, recording, storage, use or erasure.
• “Controller” means the person who determines the purposes and means of the processing.
• “Processor” means the person who processes data on behalf of the controller.

3. What Data We Collect

In line with the principle of data minimisation (Article 5(1)(c) GDPR), we collect only the data that is necessary for the purposes described in this Policy:

• Contact form data: your full name, email address, telephone number and the content of your message.
• Newsletter subscription data: your email address.
• Technical data: IP address, browser type and version, operating system, and the date and time of your visit, all of which are recorded automatically in the log files of the hosting server.

The Website is not directed at minors, and we do not knowingly collect data from persons under the age of 15.

4. Purposes and Legal Bases of Processing

We process your data solely for the following purposes and on the corresponding legal bases:

• Handling and responding to enquiries — legal basis: taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR) and/or our legitimate interest in communicating with interested parties (Article 6(1)(f)).
• Sending newsletters — legal basis: your explicit consent (Article 6(1)(a) GDPR), which you may withdraw freely at any time, without affecting the lawfulness of processing carried out before withdrawal.
• Ensuring the security and proper functioning of the Website — legal basis: our legitimate interest (Article 6(1)(f) GDPR).

No automated decision-making or profiling within the meaning of Article 22 GDPR takes place.

5. Newsletter

Subscription to the newsletter is entirely on your own initiative. Every message we send includes a link to unsubscribe immediately; alternatively, you can ask to be removed by writing to info@emiyaki.gr.

Subscriptions are managed and messages are sent through the Mailchimp platform, operated by Intuit Inc., which acts as our processor under a contract concluded pursuant to Article 28 GDPR.

6. Recipients and Processors

Your personal data is not sold, rented or disclosed to third parties for marketing purposes. Access is given only to the technical service providers listed below, to the extent strictly necessary and subject to confidentiality obligations:

• Hostinger International Ltd. — hosting services for the Website.
• Mailchimp (Intuit Inc.) — newsletter delivery services.

The fonts used on the Website are hosted on our own server. No data, including your IP address, is sent to Google or any other third party in order to load them.

Data may also be disclosed to public or judicial authorities where required by applicable law.

7. Transfers Outside the EEA

Some of the providers mentioned above (Mailchimp/Intuit) are based in, or maintain infrastructure in, the United States of America. Such transfers are carried out lawfully, on the basis of the European Commission’s adequacy decision on the EU-U.S. Data Privacy Framework and/or the Standard Contractual Clauses under Article 46 GDPR, with additional safeguards where required.

8. Retention Period

Your data is kept only for as long as is necessary to fulfil the relevant purpose of processing:

• Contact form messages: for as long as is needed to deal with your enquiry and in any case no longer than twenty-four (24) months after our last communication, unless there is a legal reason for keeping them longer.
• Newsletter data: until you withdraw your consent or unsubscribe.
• Technical log files: for a limited period, in accordance with the hosting provider’s policy.

Once these periods have elapsed, the data is securely deleted or anonymised.

9. Your Rights

Under Articles 15–22 GDPR, you have the following rights:

• The right of access to the data we hold about you and to obtain a copy of it.
• The right to rectification of inaccurate data and to completion of incomplete data.
• The right to erasure (“right to be forgotten”), where the legal conditions are met.
• The right to restriction of processing.
• The right to data portability.
• The right to object to processing based on legitimate interests.
• The right to withdraw your consent, without affecting the lawfulness of processing carried out before withdrawal.

To exercise your rights, please write to us at info@emiyaki.gr. We will reply within one month; in complex cases this period may be extended by a further two months, in which case we will let you know.

If you believe your rights have been infringed, you have the right to lodge a complaint with the Hellenic Data Protection Authority (1-3 Kifissias Avenue, 115 23 Athens, tel. 210 6475600, www.dpa.gr).

10. Security of Processing

We implement appropriate technical and organisational measures under Article 32 GDPR to protect data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These include, by way of example: an encrypted SSL/TLS connection across the whole Website, restricted and controlled access to administration systems, regular software updates, and server hardening measures.

11. Third-Party Links and Social Media

The Website contains links to social media accounts (Facebook, Instagram, TikTok). This Policy does not cover the processing of data by those platforms, which is governed by their own privacy policies; we recommend that you read them.

12. Obligation to Provide Data

You are not required by law to provide your data. However, without the necessary details (for example, your email address) we cannot respond to an enquiry or send you the newsletter.

13. Changes to This Policy

The Company reserves the right to amend this Policy, in particular to comply with legal or technological developments. The version currently in force is published on this page, together with the date of the last update.

Last updated: October 2026