Privacy Policy

Last updated: 11 October 2026

At Mylonas Food Market we respect your privacy. This Privacy Policy explains in plain language what personal data we collect through the website mylonasfoodmarket.gr and our contact channels, why we collect it, how long we keep it and what rights you have. It is governed by the General Data Protection Regulation (EU) 2016/679 («GDPR»), Greek Law 4624/2019 and Greek Law 3471/2006 on electronic communications.

1. Data controller

The data controller is «ΓΡΗΓΟΡΗΣ ΜΥΛΩΝΑΣ ΕΜΠΟΡΙΟ ΦΡΟΥΤΩΝ ΜΟΝΟΠΡΟΣΩΠΗ Ε.Π.Ε.» (Grigoris Mylonas Emporio Frouton Single-Member Ltd), trading as «Mylonas Food Market» (hereinafter «the Company», «we»).

• Registered office: 155 Charilaou Trikoupi St, 14561 Kifisia, Attica, Greece
• VAT No: EL997057980
• G.E.MI. (General Commercial Registry) No: 137435801000
• Email: info@mylonasfoodmarket.gr
• Phone: +30 211 012 5010

We are not required to appoint a Data Protection Officer (DPO). For any matter concerning your data you can write to us at info@mylonasfoodmarket.gr.

2. What data we collect and how

2.1 Contact form

When you fill in the contact form we receive your full name, your email address and the content of your message, as well as the date and time it was sent. We use them only to reply to your request.

2.2 Contact by email or phone

If you contact us by email or by phone at one of our stores, we process the details you give us (e.g. name, phone number, email, content of your request) in order to assist you.

2.3 Newsletter and offers

If you subscribe to our newsletter, we process your email address (and your name, if you provide it), as well as information on whether you open our emails and click their links, so we can improve our content. We only send it with your consent and you can unsubscribe at any time using the link included in every email.

2.4 Orders through our app

This website does not sell anything and does not collect payment details. The «Order online» link takes you to our ordering app/platform, which is operated by a third-party provider. We receive the details you enter there (e.g. full name, delivery address, phone number, order details) only to the extent needed to prepare and deliver your order. Payment details are processed exclusively by the payment provider and we have no access to them. The platform's own terms and privacy policy also apply when you use it.

2.5 Loyalty programmes

In our stores you can collect Alpha Bonus points. Alpha Bonus is a programme of Alpha Bank, which is responsible for processing your data within the programme under its own privacy policy. We do not receive your card details.

2.6 Technical and security data

When you visit the website, the server automatically logs technical information such as your IP address, date and time, pages requested, browser and device type. This information is needed to operate and secure the website and to protect it from misuse.

2.7 Cookies (only with your consent)

We use strictly necessary cookies to run the website and, only if you accept them in the cookie banner, marketing cookies. Full details are in our Cookie Policy.

2.8 Social media

We maintain pages on Facebook, Instagram and YouTube. The website contains plain links to them, not embedded content, so no data is sent to these platforms just because you visit our website. When you interact with us on those pages, the privacy policies of the respective platforms also apply.

We do not process special categories of data (e.g. health data) through the website. Please do not send us such information through the contact form.

3. Purposes and legal bases

• Answering questions and requests you send us: steps taken at your request and our legitimate interest in serving our customers (Article 6(1)(b) and (f) GDPR).
• Processing and delivering orders you place through our app: performance of a contract (Article 6(1)(b) GDPR).
• Sending our newsletter and offers: your consent (Article 6(1)(a) GDPR and Article 11 of Law 3471/2006).
• Marketing cookies: your consent (Article 4(5) of Law 3471/2006 and Article 6(1)(a) GDPR).
• Operating, securing and improving the website, preventing fraud and abuse: our legitimate interest (Article 6(1)(f) GDPR).
• Complying with tax, accounting and other legal obligations: legal obligation (Article 6(1)(c) GDPR).
• Establishing, exercising or defending legal claims: our legitimate interest (Article 6(1)(f) GDPR).

We do not take decisions based solely on automated processing, nor do we carry out profiling that has legal or similarly significant effects on you.

4. Who receives your data

We do not sell, rent or trade your data. Only our authorised staff and the partners below have access to it, to the extent necessary and always under a contract binding them to confidentiality and security (Article 28 GDPR):

• our website hosting and email service provider,
• BI-Enterprises (Bogdan Group LTD), which designs, develops and maintains the website,
• email marketing providers (Klaviyo, Mailchimp), only if you have subscribed to our newsletter,
• the provider of our ordering app/platform and the payment providers, for orders you place there,
• our accountants, lawyers and other advisers, who are bound by professional secrecy,
• public, tax, judicial and supervisory authorities, where required by law.

5. Transfers outside the European Economic Area

Some providers (such as Klaviyo, Mailchimp and Google for Google Fonts) may process data outside the European Economic Area, mainly in the USA. In those cases transfers take place only with the safeguards provided by the GDPR, such as the EU-US Data Privacy Framework or the Standard Contractual Clauses approved by the European Commission. You can ask for more information about these safeguards at info@mylonasfoodmarket.gr.

6. How long we keep your data

• Contact messages and requests: up to 2 years after our last communication, unless needed to handle a legal claim.
• Newsletter details: until you unsubscribe. We keep proof of your consent and unsubscription for as long as needed to show that our emails were sent lawfully.
• Order details and invoices/receipts: for as long as tax and accounting law requires, generally 5 years from the end of the financial year they relate to, or longer if a tax audit or legal dispute is pending.
• Server logs: up to 6 months, unless needed to investigate a security incident.
• Cookies: for the period stated for each one in our Cookie Policy.

When the retention period ends, data is securely deleted or anonymised.

7. How we protect your data

We apply appropriate technical and organisational measures to protect your data from loss, misuse and unauthorised access, such as an encrypted HTTPS connection, regular software and security updates, restricted access with strong passwords, backups and the selection of partners that offer sufficient guarantees. No transmission over the internet is completely secure, so we continuously review and improve our measures. If a breach occurs that may affect you, we will notify the competent authority and, where required, you.

8. Your rights

Under the GDPR you have the following rights:

• Access: to find out whether we process your data and to receive a copy of it.
• Rectification: to have inaccurate data corrected or incomplete data completed.
• Erasure: to have your data deleted when there is no longer a reason for us to keep it.
• Restriction: to have processing restricted in certain cases, e.g. while its accuracy is being checked.
• Portability: to receive the data you gave us in a structured, commonly used format or have it transferred to another controller.
• Objection: to object to processing based on our legitimate interest and, at any time, to processing for direct marketing.
• Withdrawal of consent: at any time, without affecting the lawfulness of processing carried out before the withdrawal.

9. How to exercise your rights

Send us an email at info@mylonasfoodmarket.gr or a letter to our registered office, stating which right you wish to exercise. We may ask for information to confirm your identity. We will reply without undue delay and within one month at the latest, a deadline that may be extended by two months in complex cases, in which case we will let you know. Exercising your rights is free of charge. You can change your cookie settings at any time using the «Cookie settings» link at the bottom of every page.

10. Right to lodge a complaint

If you believe that the processing of your data breaches the law, you have the right to lodge a complaint with the Hellenic Data Protection Authority, 1-3 Kifisias Ave, 11523 Athens, tel. +30 210 6475600, www.dpa.gr. We would appreciate it, however, if you contacted us first so that we can try to resolve the matter.

11. Minors

This website is not aimed at people under 15 and we do not knowingly collect their data. If you believe a child has given us personal data, please contact us so we can delete it.

12. Cookies

Information about the cookies we use, their purpose and duration, and how to change your choices is available in our Cookie Policy.

13. Links to third parties

The website contains links to third-party websites and apps, such as the ordering platform, social media and Google Maps. We do not control and are not responsible for their privacy practices. We recommend reading their policies.

14. Changes to this Privacy Policy

We may update this Policy when our services or the law change. The current version is always available on this page, with the last updated date at the top. We will announce significant changes clearly on the website.

15. Contact

For any question about this Policy or your data: «ΓΡΗΓΟΡΗΣ ΜΥΛΩΝΑΣ ΕΜΠΟΡΙΟ ΦΡΟΥΤΩΝ ΜΟΝΟΠΡΟΣΩΠΗ Ε.Π.Ε.», 155 Charilaou Trikoupi St, 14561 Kifisia, Greece, email: info@mylonasfoodmarket.gr, tel.: +30 211 012 5010.