Privacy Policy

CreteRoots
Last updated: January 2026

CreteRoots (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store, and protect personal information when you visit or interact with www.creteroots.com (the “Website”).

This policy complies with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Greek data protection laws.

1. Data Controller

The data controller responsible for your personal data is:

CreteRoots
📍 Address: Diatoniou 40, Heraklion, Crete, Greece
📧 Email: crete.olive.roots@gmail.com

2. Personal Data We Collect

We may collect and process the following categories of personal data:

a) Information you provide directly

• Full name

• Email address

• Phone number

• Postal address (where applicable)

• Any information you voluntarily submit via contact forms or participation programs

b) Automatically collected data

• IP address

• Browser type and version

• Device and operating system information

• Pages visited, time spent, and interaction data

This information is collected through cookies and similar technologies (see Section 8).

3. Legal Bases for Processing (GDPR Article 6)

We process personal data only when a lawful basis applies, including:

• Consent – when you voluntarily provide data or accept cookies

• Contractual necessity – to manage participation in our programs

• Legal obligation – for tax, accounting, or regulatory compliance

• Legitimate interest – to improve our Website, security, and services, provided your rights are not overridden

4. How We Use Your Data

We use personal data to:

• Respond to inquiries and requests

• Manage symbolic participation programs

• Send participation-related updates when relevant

• Improve Website functionality and user experience

• Ensure Website security and prevent misuse

• Comply with legal obligations

We do not sell personal data and do not use automated decision-making or profiling.

5. Data Sharing & Third Parties

We may share personal data only with:

• Trusted service providers (e.g. hosting, analytics, email services) under GDPR-compliant agreements

• Public authorities, where required by law

All third parties are required to process data securely and only for the specified purpose.

6. Data Retention

We retain personal data only for as long as necessary for the purposes outlined in this Policy or as required by law.

When data is no longer required, it is securely deleted or anonymized.

7. Your GDPR Rights

Under GDPR, you have the right to:

• Access your personal data

• Rectify inaccurate or incomplete data

• Request deletion (“right to be forgotten”)

• Restrict processing

• Object to processing

• Request data portability

• Withdraw consent at any time

• Lodge a complaint with a data protection authority

To exercise your rights, please contact us at:
📧 crete.olive.roots@gmail.com

8. Cookies & Tracking Technologies

We use cookies to ensure proper Website functionality and to improve user experience.

Cookies may include:

• Strictly necessary cookies (essential for Website operation)

• Preference cookies (language or consent settings)

• Analytics cookies (used only with user consent)

You can manage or withdraw cookie consent at any time through your browser settings or our cookie banner.
For more information, please refer to our Cookie Policy.

9. International Data Transfers

If personal data is transferred outside the EU, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

10. Security of Personal Data

We implement appropriate technical and organizational measures to protect personal data.
However, no method of online transmission or storage is completely secure, and absolute security cannot be guaranteed.

11. Children’s Privacy

Our Website and services are not intended for individuals under the age of 16.
We do not knowingly collect personal data from minors.

12. External Links

Our Website may contain links to third-party websites.
We are not responsible for the privacy practices or content of external sites.

13. Changes to This Policy

We may update this Privacy Policy from time to time.
Any changes will be published on this page with an updated revision date.

14. Contact

If you have any questions about this Privacy Policy or your personal data, please contact us at:

📧 crete.olive.roots@gmail.com