Who is responsible
Νέα Αγορά Market, Ηράκλειο. Telephone 2810 000 000.
The shop is the data controller. The company that provides and maintains this website acts as a processor, that is, only on the shop’s instructions.
What we collect when you order
Your name and telephone number, both required so the order can be delivered or collected.
Your email address, optionally. If you give it, we use it to send you the order confirmation and updates on its progress.
If you choose delivery: address, area and postcode. If you choose collection from the shop, we do not ask for an address.
Optionally, a time that suits you and a note to the shop. The note is free text: put only what concerns your order in it.
The products, quantities and amounts of the order, and its status until it is completed.
What we do not do
No customer account is created. You do not need to register in order to place an order.
We neither ask for nor store card details. Payment is made on collection or on delivery.
We use no advertising or analytics cookies, we do not track you across other websites, and we build no profiles.
No automated decisions are made about you. Every order is handled by a person at the shop.
We do not sell your data or pass it to third parties for their own purposes.
Why we process it
To carry out your order — so it can be prepared, paid for and delivered or collected. Legal basis: performance of a contract, Article 6(1)(b) GDPR.
To keep our tax and accounting records. Legal basis: compliance with a legal obligation, Article 6(1)(c).
For the security of the website — for example limiting repeated automated requests. Legal basis: our legitimate interest in keeping the site working, Article 6(1)(f).
Cookies
We use strictly necessary cookies only: to hold your basket, protect forms from other websites, let you cancel your own order from its page, and recover that ability if the connection is interrupted while submitting your order.
Because they are necessary for a service you asked for, no consent is required and we show no pop-up. If you delete these cookies you lose the basket and the ability to cancel from the order page.
Who else sees it
The platform provider, which maintains the website and the database on the shop’s behalf. The servers are inside the European Union.
The email provider, so that the order confirmation reaches you.
If the shop has enabled Telegram notifications, a new-order alert is sent there containing your name, the total, the fulfilment method and a link to the order. Telegram operates outside the European Economic Area.
The contact page embeds a Google map. When it is shown, your browser contacts Google’s servers under Google’s own privacy policy. The map is not shown on the order page.
How long we keep it
Order records are kept for as long as tax and accounting law requires. We deliberately do not state a number of years here rather than risk stating a wrong one; the exact period is set by law and you may ask the shop for it.
After that period the contact details attached to an order stop being linked to you.
A basket that never became an order is deleted automatically.
Your rights
You have the right of access to your data, and rights to rectification, erasure, restriction of processing, portability and objection.
To exercise any of them, contact us at 2810 000 000. We will answer without undue delay. Because there is no customer account, we may need to confirm your identity before acting on a request — so that your data is not handed to somebody else.
Some data cannot be erased while the obligation to keep tax records still applies. Where that is the case we will explain it rather than ignore the request.
If you believe we have not handled your data properly, you may complain to the Hellenic Data Protection Authority, 1-3 Kifisias Ave., 115 23 Athens, Greece, www.dpa.gr.
Security
The connection to this website is encrypted. Each shop’s data is isolated from every other shop’s at the database level, and shop staff see only their own orders.
Your order link acts as a key: whoever holds it can see the order. Do not forward it to anybody else.