Privacy Policy

  1. Preamble

The société anonyme under the corporate name “EVERGOOD Single-Member Société Anonyme”, having its registered office in Spata, Attica, Athens International Airport “EL. VENIZELOS”, Building 14B, P.C. 19019, (hereinafter referred to as the “Company”), acting as Data Controller, is subject to all obligations and commitments arising from data protection legislation, including the General Data Protection Regulation (EU) 2016/679 (hereinafter the “GDPR”) and Law 4624/2019 (hereinafter the “Data Protection Legislation”).

For the Company, respecting and protecting your personal data is an absolute commitment. We understand and take seriously the fact that you are aware of and care about your personal data.

This Privacy Policy describes the personal data that the Company collects and processes in the context of operating the website www.flocafe.gr, how we use and protect it, the legal bases for processing, as well as the rights and choices available to you. Its purpose is to inform you about the Company’s policy regarding the personal data you provide to us, so that you are aware of the purpose of processing by us, the categories of recipients, and the procedures you can follow to exercise your legal rights.

The Company, recognizing its ongoing responsibility in protecting your personal data, provided that as a Data Controller it engages in lawful processing thereof, has implemented all technical and organizational measures based in particular on the principles of proportionality, purpose limitation, storage limitation, and data minimization, exclusively for the processing purpose for which they were collected and solely for the duration of each respective processing purpose, ensuring that your personal data is fully secure.

We acknowledge that the protection of personal data is a continuous responsibility, and therefore we will periodically update and amend this Policy to ensure it remains fully compliant with applicable legislation. Please visit our website https://www.flocafe.gr from time to time to ensure that you are aware of and satisfied with any changes. In case of any doubt regarding any term of this Privacy Policy, you may contact us via email at info@flocafe.gr.

We would also like to assure you that the Company does not process personal data concerning minors under the age of 18.

The Company has appointed Mr. Emmanouil Laskaridis as Data Protection Officer (DPO), with contact email: dpo@evergood.group.

  1. Basic Processing Principles

The processing of personal data is carried out in accordance with the data protection principles set out in Article 5 of the GDPR. All policies and procedures have been designed to ensure compliance with these principles:

  • Personal data is processed lawfully, fairly, and in a transparent manner in relation to the data subject (lawfulness, fairness, and transparency).
  • Personal data must be collected for specified, explicit, and legitimate purposes and not further processed in a manner that is incompatible with those purposes.
  • Personal data is adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed (data minimization).
  • Every reasonable step must be taken to ensure that personal data that is inaccurate, having regard to the purposes for which it is processed, is erased or rectified without delay (accuracy).
  • Personal data is kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data is processed.
  • Personal data is processed in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organizational measures (integrity and confidentiality).
  • The controller is responsible for, and able to demonstrate compliance with, the basic principles of processing (accountability).
  1. Who We Are

The Company operates in the food service / catering market, with stores and a presence in Greece and abroad. Through this website, www.flocafe.gr, our purpose is direct communication, information provision, and support to our users and visitors.

  1. What Personal Data We Collect About You

The provision of the following personal data is by no means mandatory. However, failure to provide data that has been designated as mandatory will prevent us from providing the contractual service. Failure to provide other, non-mandatory personal data shall in no way affect the provision of our services.

For the service of www.flocafe.gr, we collect the names (first name, last name), contact telephone number, and email address of our customers in order to respond to and manage their requests when contacting us via the website’s dedicated form. In the event that the customer voluntarily provides further personal data within the message sent, such data will be retained for the better and more direct handling of their request. The Company does not use email contents, chats, or other personal files for advertising targeting purposes.

We do not process sensitive personal data within the scope of our website’s services and content.

Our Company does not knowingly process personal data relating to minors under the age of 18. If it comes to the Company’s knowledge that online personal data of an individual under 18 has been submitted without the consent of a parent or legal guardian, the Company will take appropriate steps to delete such data from its databases and refrain from using it.

  1. How We Collect Your Personal Data

We collect your personal data directly from you when you fill out and submit the dedicated online contact form on the website www.flocafe.gr, or when you contact us directly via email or telephone using the listed contact details.

  1. Method of Data Processing

The processing of your personal data includes operations such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, restriction, erasure, or destruction, in accordance with the definition of Article 4(2) of the GDPR. Processing is carried out primarily by electronic means and secondarily by hard-copy (paper) means, always adhering to strict security procedures.

  1. Who Else Receives Your Personal Data?

The Company does not transfer, disclose, or make available your personal data in any way to third-party companies or external providers.

The processing of your personal data is carried out exclusively internally by the Company, specifically by our authorized personnel who are bound by strict obligations of confidentiality and secrecy, solely to the extent necessary to manage and respond to your requests.

The information you fill in on the contact form is forwarded strictly internally to the email addresses of the competent personnel and departments within the Company, depending on the nature of your request (e.g., customer support, technical support, legal department), solely for the purpose of reviewing, managing, and responding to it. All our personnel are bound by strict contractual obligations of confidentiality and secrecy. Access by unauthorized persons, including non-competent employees, is strictly prohibited.

Access to strictly necessary technical data may be granted solely to external providers supporting the technical operation of the website and corporate mail servers (web hosting & email hosting providers). These providers act strictly as Data Processors on our behalf, are bound by data processing agreements (DPAs) pursuant to Article 28 of the GDPR, adhere to strict confidentiality clauses, and are expressly prohibited from using your data for any purposes of their own.

In any event, our Company will not sell or otherwise transfer or disclose personal data of visitors/users of its website to third parties, with the exception of compliance with relevant legal mandates, where access may also be granted to:

  • lawyers, court bailiffs, or other persons necessary for the judicial or out-of-court handling of the Company’s claims;
  • public services, administrative and judicial authorities, supervisory and regulatory bodies, where required by law, court order, or any other binding act for the Company within the framework of general compliance with its legal obligations.
  1. Why We Use Your Data & Legal Bases for Processing

The Company collects, maintains, and processes only the minimum and strictly necessary personal data for the following purposes and on the following legal bases under Article 6(1) of the GDPR:

    1. Management, handling, and responding to your requests via the contact form:
      • Legal Basis: Article 6(1)(b) GDPR (taking steps at the request of the data subject prior to entering into a contract or in the context of contract performance) and, secondarily, Article 6(1)(f) GDPR (legitimate interest of the Company for effective communication, proper customer/user service, and maintaining high service quality standards).
    2. Compliance with the Company’s legal obligations:
      • Legal Basis: Article 6(1)(c) GDPR (compliance with a legal obligation to which the controller is subject, e.g., tax or other applicable legislation).
    3. Establishment, exercise, or defense of the Company’s legal claims:
      • Legal Basis: Article 6(1)(f) GDPR (legitimate interest of the Company for the protection of its rights and defense against potential judicial or extrajudicial claims).
  1. How Long We Retain Your Personal Data

Your personal data will be retained for as long as necessary to fulfill the purposes for which it was collected.

  • Inquiry / Communication Data: Data submitted via the contact form is retained for the period necessary to fully review, respond to, and process your request, unless the content of the request necessitates longer retention.
  • Legal Claims / Legitimate Interest: The Company may continue to store your personal data for a longer period if necessary to protect its legitimate interests in connection with potential liability related to the provision of its Services. In particular, in the event of any legal claim by a customer against the Company, the data will be retained until the relevant claim is definitively and conclusively resolved.
  • Legal/Tax Obligations: Where retention is mandated as an obligation under statutory provisions (e.g., tax, market regulations), personal data is retained for the period expressly stipulated by the relevant provisions.
  1. Safeguards We Take to Protect Your Data

When you provide us with your personal data, we take measures to ensure that it is kept and managed securely. To protect your personal data, we adopt adequate physical, technical, and organizational security measures. We update and test the security technology we use on a continuous basis. We restrict access to your personal data solely to those employees who need to know such data in order to provide you with the services you desire. Furthermore, we train all employees regarding the importance of confidentiality and maintaining the secrecy and security of your personal data.

Among others, we have implemented the following technical and organizational measures and procedures to protect your personal data from any loss, alteration, unlawful processing, or modification:

  • access to your personal data is restricted solely to the number of authorized individuals for specific purposes;
  • IT systems used for processing data ensure access is limited strictly to authorized individuals;
  • access to said IT systems is monitored in order to detect and immediately prevent unauthorized access;
  • use of information systems and computer software installed in a manner that minimizes the use of personal data and/or user authentication data;
  • adoption of specific procedures for data retention and secure erasure/destruction.
  1. Your Rights

As a data subject, you have the following rights under the terms and specific provisions of the GDPR:

    1. Right of access (Article 15 GDPR): You have the right to be informed whether we process your personal data and, where that is the case, to access your personal data undergoing processing, as well as information regarding its processing. Within the scope of this right, you are entitled to request that the Company provide you, free of charge, with a copy of the personal data concerning you undergoing processing. Where requests are repetitive and manifestly unfounded, the Company reserves the right to charge a reasonable fee.
    2. Right to rectification (Article 16 GDPR): You have the right to obtain the rectification of inaccurate data or the completion of incomplete data concerning you.
    3. Right to erasure (“right to be forgotten”) (Article 17 GDPR): You have the right to request the erasure of data without undue delay upon your request under the conditions set out in applicable Greek and European Data Protection legislation. In certain circumstances (such as where processing is required by law or for reasons of public interest), this right is subject to specific limitations or does not apply, as the case may be.
    4. Right to restriction of processing (Article 18 GDPR): You have the right to obtain restriction of processing—meaning the suspension or restriction thereof—where you contest the accuracy of the data, object to its processing, or where another condition provided under applicable Greek or European Data Protection legislation applies.
    5. Right to data portability (Article 20 GDPR): You have the right to receive the data you have provided to us with your consent, in order to use it elsewhere.
    6. Right to object (Article 21 GDPR): You have the right to object at any time to the processing of your personal data based on legitimate interests (Article 6(1)(f) GDPR). In such case, we will cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
    7. Right to withdraw consent (Article 7(3) GDPR): Where we process your personal data based on your consent, you also have the right to withdraw your consent or change the extent of consent you have granted at any time, without affecting the lawfulness of processing for the period prior to the withdrawal of your consent.
    8. Right to lodge a complaint with the HDPA (Article 77 GDPR): You have the right to lodge a complaint with the competent supervisory authority if you consider that your rights are being infringed (see Section 14 below for details).

If you exercise any of your rights above, the Company will respond within one (1) month, unless your request is particularly complex or there is a high volume of similar requests.

  1. Transfer of Personal Data Outside the EU

Personal data collected through the website www.flocafe.gr is stored on servers within the European Union (EU) / European Economic Area (EEA) and is not transferred to or processed in third countries outside the EU.

  1. Links to Other Websites

Our website may contain links to other websites. This Privacy Policy applies solely to data provided through the website www.flocafe.gr. Consequently, whenever you follow a link from this website to another, we advise you to carefully read the privacy policies of the respective website. If you choose to connect to any third-party website via links, hyperlinks, or banners that may be contained on our website, the Company bears no responsibility for the terms of personal data management and protection applied by said third parties.

  1. Use of Cookies

We use cookies (small text files stored on your device during your browsing) for the technical operation of the website, facilitating your browsing experience, and collecting anonymous website usage statistics.

For more detailed information regarding the types of cookies used, their management, and deactivation, please refer to our dedicated Cookie Policy at https://www.flocafe.gr/politiki-cookies/ .

If you access third-party websites through our website or connect to social media platforms (Twitter, Facebook, YouTube), please note that these third-party websites or platforms may install cookies immediately upon clicking the relevant link, which are beyond our control and are governed by their respective individual cookie policies.

  1. How to Contact Us

You may contact us for any question regarding the processing of your personal data or our use of cookies, or to exercise your rights, using the online contact form on our website.

Please visit the Company’s website www.flocafe.gr at regular intervals to remain informed of any changes to this Policy.

If you wish to submit any question regarding the terms of this Policy, please direct it to us either by sending an email to info@flocafe.gr or by calling 2169392900.

If the Company fails to properly satisfy any of your requests without providing adequate justification for its refusal, or generally violates its obligations under the Data Protection Legislation, you have the right to lodge a complaint or other grievance with the Hellenic Data Protection Authority (www.dpa.gr), telephone: 2106475600, fax: 2106475628, email: contact@dpa.gr.

You can contact the Data Protection Officer by sending an email to dpo@evergood.group .

  1. Version Information – Amendments and Updates

This Policy was last updated on October 6, 2026.

We reserve the right to amend and update this Policy, in whole or in part, at our sole discretion at any time. Any amendment hereto shall take effect immediately upon posting the amended Policy on the Website. Concurrently, an indication will be displayed on our homepage highlighting the change. In any case, by continuing to use the Website following any such modifications, you will be deemed to have accepted these changes. If you do not agree with the terms of this Policy as may be amended, whether in whole or in part, you must cease using the Website.

Any change to this Policy will be posted immediately here.