1. Introduction

The protection of your personal data is an important priority for Vorizanakis Winery.

This Privacy Policy describes the way in which we collect, use, store and protect the personal data of visitors and customers of our website and online store.

The processing of personal data is carried out in accordance with the General Data Protection Regulation (EU) 2016/679 – GDPR, the applicable Greek and European legislation on personal data protection and, where applicable, legislation on electronic communications.

2. Data Controller

The controller responsible for the processing of personal data is:

Business Name: VORIZANAKIS GEORGIOS
Trade Name: Vorizanakis Winery
Registered Office: DAFNES, HERAKLION
Tax Identification Number (VAT No.): 159225390
Tax Office: HERAKLION
Email: gvorizanakiswines@yahoo.com
Telephone: 2810792071
Website: https://vorizanakiswinery.com/

For any matter concerning the processing or protection of your personal data, you may contact us using the above contact details.

3. Personal Data We Collect

When using the website and particularly when placing an order through our online store, we may collect personal data that is necessary for the completion and management of the transaction.

Such data may include:

• Full name
• Billing address
• Shipping address
• Email address
• Telephone number
• Details of the order and the products purchased
• Selected payment method
• Selected shipping method
• Information necessary for the issuance of a tax document when an invoice is requested
• Order history and related communication with the business

When browsing the website, certain technical data may also be collected, such as the IP address, device type, operating system, browser and information regarding the use of the website.

The collection of data through non-essential cookies and related technologies is carried out in accordance with the user’s choices and, where required, the user’s consent.

4. Purposes of Personal Data Processing

The personal data we collect is used, depending on the circumstances, for the following purposes:

• Receipt and processing of orders.
• Completion of purchases through the online store.
• Management and confirmation of payments.
• Issuance of receipts, invoices and other tax documents.
• Preparation and shipment of products.
• Delivery of orders through cooperating courier or transport companies.
• Communication with the customer regarding the progress of their order.
• Management of cancellations, returns, refunds and complaints.
• Provision of customer service.
• Prevention and handling of incidents of fraud, malicious use or security breaches.
• Fulfilment of tax, accounting and other legal obligations of the business.
• Sending informational or promotional messages when there is an appropriate legal basis.
• Measurement and analysis of website traffic, in accordance with the user’s cookie choices.
• Measurement of the effectiveness of advertising activities and, where applicable, display of more relevant advertising content, provided that the required consent has been given.

5. Legal Basis for Processing

Personal data is processed only when there is an appropriate legal basis.

Depending on the purpose of the processing, the legal basis may be:

Performance of a Contract

The processing of information necessary for ordering, payment, shipment and delivery of products is carried out because it is necessary for the performance of the sales contract between the business and the customer.

For this reason, the processing of the information necessary for an order is not based on the customer’s consent.

Legal Obligation

Certain personal data is retained or processed when this is necessary for the business to comply with tax, accounting or other obligations provided for by law.

Consent

Consent is used where required, such as, indicatively, for certain forms of electronic commercial communication and for the installation of non-essential cookies or other tracking technologies.

When processing is based on consent, the user may withdraw it at any time.

Legitimate Interest

In certain cases, we may process data on the basis of the legitimate interests of the business, such as for website security, fraud prevention, protection of our legal rights or improvement of our services, provided that the rights and freedoms of the data subject do not override such interests.

6. Electronic Payments

For electronic payments, the services of PayPal (Europe) S.à r.l. et Cie, S.C.A. and VIVABANK SINGLE MEMBER BANKING S.A. (VIVABANK S.A. – Viva.com) are used.

During the payment process, the information necessary for the completion and confirmation of the transaction may be transferred to the respective payment service provider.

Payment providers process the relevant data in accordance with their own privacy policies, terms of operation and applicable security measures.

7. Courier / Transport Company

For the shipment and delivery of orders, we cooperate with FedEx Express Greece Single Member Limited Liability Company.

Only the personal data necessary for carrying out the delivery is transferred to the courier company, such as indicatively:

• Recipient’s full name
• Delivery address
• Postal code and area
• Telephone number
• Any necessary information relating to the shipment

This data is used for shipment, delivery and, where required, communication relating to the delivery of the order.

8. Recipients of Personal Data

The business does not sell customers’ or visitors’ personal data to third parties.

In the context of operating the online store, personal data may be disclosed only when necessary to categories of partners such as:

• PayPal (Europe) S.à r.l. et Cie, S.C.A.
• VIVABANK SINGLE MEMBER BANKING S.A. (VIVABANK S.A. – Viva.com)
• FedEx Express Greece Single Member Limited Liability Company
• Accountants, tax consultants or other professional partners, where required.
• Website hosting and technical support providers.
• Information technology and security service providers.
• External newsletter / email marketing service providers.
• Website traffic measurement and online advertising service providers, in accordance with the user’s consent choices.
• Public, tax, judicial or other competent authorities, where required or imposed by law.

Partners receive only the data necessary for the provision of the respective services.

9. Newsletter and Email Marketing

Subscription to the newsletter is optional and is not a prerequisite for making a purchase from our online store.

For the sending of informational and promotional electronic messages, we may use an external email marketing / newsletter service provider.

Only the personal data necessary for managing the subscription and sending the relevant communications is transferred to that provider, such as the email address and, where provided, the subscriber’s name.

Newsletters are sent only when there is an appropriate legal basis and, where required, after the user’s prior consent has been obtained.

The user may at any time request that promotional communications cease by using the unsubscribe link included in the relevant messages or by contacting us.

Where processing is based on consent, its withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

The respective provider is used in accordance with the applicable personal data protection legislation and appropriate contractual and technical safeguards.

10. Emails Relating to Orders

Electronic messages that are necessary for managing a purchase, such as:

• Order confirmation
• Payment update
• Shipping update
• Delivery update
• Order cancellation
• Refund
• Other necessary communication relating to the transaction

do not constitute newsletters.

These messages are sent in the context of the performance and management of the order.

11. Cookies and Similar Technologies

The website uses cookies and similar technologies for its proper operation, the operation of the online store and, depending on the visitor’s choices, for statistical and advertising purposes.

Cookies are indicatively divided into the following categories:

A. Strictly Necessary Cookies

These cookies are necessary for the proper operation of the website and online store.

They may be used, among other things, for:

• The operation of the shopping cart.
• Maintaining the user’s session.
• Website security.
• The order completion process.
• Storing the user’s choices regarding cookies.

Prior consent is not required for cookies that are genuinely technically necessary for the provision of the service requested by the user.

B. Statistics and Analytics Cookies

The website may use traffic measurement and analysis services, such as Google Analytics, to understand how visitors use the website.

Through these technologies, information relating to browsing and use of the website may be collected.

Where consent is required, the relevant cookies or technologies are activated only after the user’s choice.

C. Functionality Cookies

Functionality cookies allow the website to remember certain user choices and provide enhanced or personalised functions.

Depending on the specific function, consent may be required before they are activated.

D. Advertising and Targeting Cookies

The website may use services such as Google Ads and Meta Pixel to measure the effectiveness of advertising activities and, where applicable, to display more relevant advertising content.

These technologies may collect information relating to the user’s interaction with the website and may be used for measurement, targeting or remarketing purposes.

Advertising cookies and corresponding non-essential technologies are activated only after the required consent has been provided by the user.

12. Management and Withdrawal of Cookie Consent

During the first visit to the website, the user is informed about the use of cookies through the relevant consent management mechanism.

The user has the option to choose which categories of non-essential cookies they wish to allow.

The user may also change or withdraw their choices at any time through the website’s Cookie Settings.

Rejecting non-essential cookies does not prevent the basic use of the website or the placing of an order, although certain optional functions may not be available.

Further information regarding the cookies used, their purpose, provider and duration is provided in the website’s separate Cookie Policy.

13. Google Analytics, Google Ads and Meta Pixel

Depending on the technologies that are active on the website and the visitor’s consent choices, third-party services may be used, such as:

• Google Analytics
• Google Ads
• Meta Pixel

These services may process technical information relating to the device, browsing and the visitor’s interaction with the website.

The use of these services is carried out in accordance with the user’s consent choices and the respective privacy policies of the providers.

Where the activation of these technologies requires consent, they must not be activated before the relevant consent has been provided.

14. Transfer of Data Outside the European Economic Area

Certain technology providers that may be used by the website may process personal data or maintain infrastructure in countries outside the European Economic Area.

Where an international transfer of personal data takes place, it is carried out in accordance with the requirements of applicable legislation and using appropriate safeguards, where required, such as adequacy decisions of the European Commission or appropriate contractual safeguards.

15. Personal Data Retention Period

Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected or for as long as required by law.

In particular:

• Data relating to orders and transactions is retained for as long as necessary to manage the transaction and thereafter for as long as required under the applicable tax, accounting and other legal obligations.
• Information relating to requests, complaints, returns or disputes may be retained for as long as necessary to address them and, where necessary, for the establishment, exercise or defence of legal claims.
• Information used for newsletters or promotional communications is retained for as long as the corresponding legal basis exists or until consent is withdrawn, where processing is based on consent, unless further retention is required for a lawful purpose.
• Data resulting from cookies is retained according to the purpose and duration of the respective cookies, as described in the Cookie Policy.

After the necessary retention period has expired, personal data is deleted, anonymised or is no longer processed, unless there is a lawful reason for its further retention.

16. Personal Data Security

We take appropriate technical and organisational measures to protect personal data against:

• Unauthorised access.
• Unlawful use.
• Loss.
• Alteration.
• Destruction.
• Disclosure or other unauthorised processing.

Communication with the website is carried out through a secure HTTPS/TLS connection, where applicable.

Access to personal data is restricted to persons and partners who require such access for the performance of their duties or services.

Security measures are reviewed and adapted according to the nature of the data, the technologies used and the associated risks.

17. Rights of Data Subjects

In accordance with the GDPR and applicable legislation, each data subject has, where applicable, the following rights:

Right of Access

You may request information about the personal data we hold about you and receive a copy thereof, where provided for.

Right to Rectification

You may request the correction of inaccurate personal data or the completion of incomplete data.

Right to Erasure

You may request the deletion of your personal data where the legal conditions are met.

The right to erasure is not absolute. The business may be required to retain certain data, for example for tax, accounting or other lawful purposes.

Right to Restriction of Processing

You may, in the cases provided for by law, request the restriction of the processing of your personal data.

Right to Object

You may object to certain forms of processing where the relevant legal conditions are met.

Right to Data Portability

Where applicable, you may request to receive the personal data you have provided to us in a structured, commonly used and machine-readable format or request its transmission to another data controller.

Right to Withdraw Consent

Where processing is based on your consent, you may withdraw it at any time.

Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

18. Exercising Your Rights

To exercise any of the above rights or for any questions regarding the protection of your personal data, you may contact us at:

Email: gvorizanakiswines@yahoo.com

Where necessary, we may request additional information solely for the purpose of verifying the identity of the person making the request and protecting personal data from unauthorised requests.

19. Right to Lodge a Complaint

If you believe that the processing of your personal data violates the applicable personal data protection legislation, you have the right to lodge a complaint with the competent supervisory authority.

For Greece, the competent supervisory authority is the:

Hellenic Data Protection Authority

Exercising the right to lodge a complaint does not limit your right to use any other administrative or judicial remedy provided for by law.

20. Changes to the Privacy Policy

This Privacy Policy may be amended or updated whenever necessary, particularly due to:

• Changes in the operation of the website or online store.
• Addition or removal of services and partners.
• Changes in the technologies used.
• Changes in personal data processing procedures.
• Changes in the applicable legal and regulatory framework.

The current version of the Privacy Policy will be available on this page.

Last updated: 8 August 2026