# Privacy Policy
**Last Updated:** 17/09/2025
**Effective Date:** 17/09/2025
## 1. Introduction
Welcome to Brooklys.gr (“we,” “our,” or “us”). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website brooklys.gr (the “Website”).
Our Website currently serves as a showcase for our premium Extra Virgin Olive Oil (EVOO) products. We may expand to include e-commerce functionality in the future, and this policy covers both current and potential future services.
## 2. Information We Collect
### 2.1 Information You Provide Directly
– **Contact Information:** Name, email address, phone number, and postal address when you contact us through our contact forms or subscribe to our newsletter
– **Communication Content:** Messages, inquiries, and feedback you send to us
– **Account Information:** If/when we implement user accounts for our future e-shop, we will collect username, password, and profile information
### 2.2 Information We Collect Automatically
– **Technical Information:** IP address, browser type, operating system, device information
– **Usage Data:** Pages visited, time spent on the Website, referring/exit pages, click patterns
– **Cookies and Tracking Data:** As described in our Cookie Policy (see Section 8)
### 2.3 Future E-Commerce Information
When we launch our e-shop functionality, we may additionally collect:
– **Purchase Information:** Order history, payment information (processed securely by third-party payment providers)
– **Shipping Information:** Delivery addresses and preferences
– **Product Preferences:** Wishlist items, product reviews, and ratings
## 3. How We Use Your Information
We use the collected information for the following purposes:
### 3.1 Current Uses
– Responding to your inquiries and providing customer support
– Sending newsletters and marketing communications (with your consent)
– Improving our Website and product showcase
– Analyzing Website usage and performance
– Complying with legal obligations
### 3.2 Future E-Commerce Uses
– Processing and fulfilling orders
– Managing user accounts and profiles
– Providing personalized product recommendations
– Processing payments (through secure third-party processors)
– Managing returns and exchanges
– Preventing fraud and ensuring transaction security
## 4. Legal Basis for Processing (GDPR)
Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:
– **Consent:** When you voluntarily provide information or consent to marketing communications
– **Legitimate Interests:** For Website analytics, improving our services, and business development
– **Contract Performance:** For future e-commerce transactions and order fulfillment
– **Legal Obligation:** To comply with applicable laws and regulations
## 5. Information Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:
### 5.1 Service Providers
We may share information with trusted third-party service providers who assist us in:
– Website hosting and maintenance
– Email marketing services
– Analytics and performance monitoring
– Future payment processing and shipping services
### 5.2 Legal Requirements
We may disclose your information if required by law, court order, or government regulation, or to protect our rights, property, or safety.
### 5.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity.
## 6. Data Security
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
– SSL encryption for data transmission
– Secure server infrastructure
– Regular security assessments
– Access controls and authentication measures
– For future e-commerce: PCI DSS compliance for payment processing
## 7. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy:
– **Contact inquiries:** 3 years from last contact
– **Newsletter subscriptions:** Until you unsubscribe
– **Website analytics:** Anonymized after 26 months
– **Future transaction records:** As required by applicable tax and commercial laws (typically 7-10 years)
## 8. Cookies and Tracking Technologies
Our Website uses cookies and similar tracking technologies to enhance your browsing experience. We use:
### 8.1 Essential Cookies
– Required for basic Website functionality
– Cannot be disabled without affecting Website performance
### 8.2 Analytics Cookies
– Google Analytics (with IP anonymization)
– Help us understand Website usage and improve our services
### 8.3 Marketing Cookies (Future)
– When we implement e-commerce functionality, we may use cookies for:
– Personalized product recommendations
– Retargeting advertisements
– Social media integration
You can manage cookie preferences through your browser settings. For more information, see our detailed Cookie Policy.
## 9. Your Rights Under GDPR
As a data subject, you have the following rights:
– **Right of Access:** Request a copy of your personal data
– **Right to Rectification:** Correct inaccurate or incomplete data
– **Right to Erasure:** Request deletion of your personal data
– **Right to Restrict Processing:** Limit how we process your data
– **Right to Data Portability:** Receive your data in a portable format
– **Right to Object:** Object to processing based on legitimate interests
– **Right to Withdraw Consent:** Withdraw consent for marketing communications
To exercise these rights, contact us using the information provided in Section 12.
## 10. International Data Transfers
We primarily process data within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:
– Adequacy decisions by the European Commission
– Standard Contractual Clauses (SCCs)
– Binding Corporate Rules (where applicable)
## 11. Children’s Privacy
Our Website is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information.
## 12. Contact Information
For any questions about this Privacy Policy or to exercise your data protection rights, please contact us:
**Brooklys EVOO**
Email: [privacy@brooklys.gr]
Phone: [Phone Number]
Address: [Physical Address]
Data Protection Officer: [If applicable]
## 13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by:
– Posting the updated policy on our Website
– Sending email notifications to registered users
– Displaying a prominent notice on our homepage
The “Last Updated” date at the top of this policy indicates when the most recent changes were made.
## 14. Supervisory Authority
If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the relevant supervisory authority:
**Hellenic Data Protection Authority (HDPA)**
Website: [www.dpa.gr]
Email: [contact information]
—
*This Privacy Policy is designed to comply with the General Data Protection Regulation (GDPR) and Greek data protection laws. We recommend consulting with legal counsel to ensure full compliance with all applicable regulations.*
