Privacy Policy

We care about the protection of your privacy and, in particular, the Personal Data concerning you. We have adopted this Privacy Policy in order to inform visitors to https://kourtidis.group about the types of data processed, the purposes of their collection and processing, the manner in which the data are processed and their recipients, your rights and choices, and how you may contact us regarding any issue concerning your personal data.

This Privacy Policy includes:

Information about the Controller of your personal data.
The types of data we collect about you.
The purposes of collecting and processing your personal data and the legal basis for processing.
The security measures we take to protect your personal data.
The period for which your personal data are retained.
Information about your rights and how to exercise them.

Data Controller

The société anonyme under the corporate name “KOURTIDIS GROUP S.A.”, with registered office at Paralia Ofriniou, Kavala, P.C. 64008, telephone +30 25940 31500, email info@kourtidis.group.

Information we collect

“Personal Data” means any information that can be used to identify a natural person. KOURTIDIS GROUP S.A. collects such information when you use or interact with us through our Website. In particular:

If you are a candidate associate/employee, please click here.

If you are a visitor to the Website or communicate with our official social-media accounts, the following applies.

Through the contact form on our Website, in order to respond to requests and questions regarding our services, you may be asked to provide your name, email address and mobile telephone number. During browsing, you may also be asked to provide personal information such as your full name and telephone number in order to receive information about services or benefits that interest you. If you consent to promotional communications, newsletters and news about our services, your email address will be requested. In any other case, you will be informed of the purpose of processing before collection and, where required, your explicit consent will be requested.

When you communicate with us through the Company’s social-media channels (Facebook, Instagram, LinkedIn, etc.), you provide identification and contact data which we process, as appropriate, solely in order to respond to your request.

Collection of data by automated means

Log files

When you visit our Website, certain information is automatically collected by our server and recorded in dedicated log files.

The purpose of storing this information is to monitor the security of the Website’s information and services, ensure the ability to investigate cyber-attacks and incidents and support any related legal claims.

The legal basis for this processing is Article 6(1)(f) GDPR, which permits processing where necessary for the legitimate interests of KOURTIDIS GROUP S.A.

Log files are retained for 12 months and may be disclosed to processors for Website administration and to competent authorities where necessary to investigate a cyber-attack or incident. Data under investigation or used in connection with legal claims are retained for as long as required for those purposes.

Cookies

When you interact with our Website, certain data are automatically collected from your device or web browser through cookies. Cookies are small text files used by websites to make the user experience more effective.

Detailed information about data collected by automated means is available in our Cookie Policy.

Information concerning minors

Our Website and services are not intended for use by minors under 15 years of age. KOURTIDIS GROUP S.A. does not collect Personal Data of minors under 15 without the consent of a parent or guardian. In any event, the Company deletes any personal data relating to a child under 13. If you are a parent or guardian of a child under 13 and are concerned that the child may have provided personal data to us, please contact info@kourtidis.group.

Why we use your Personal Data

We use your data in order to:

respond to requests for information concerning our services;
manage, process and complete your payments, including the security of financial transactions and issuance of invoices;
handle complaints;
create, store and maintain a customer database and analyse it, including keeping contact lists updated;
send newsletters and promotional communications regarding Company news, offers and promotional activities;
understand and analyse the results of advertisements and promotional activities;
respond to requests to exercise your rights regarding personal data;
conduct business analysis and improve our business activities and services, including market availability of services and optimization of your experience and service;
conduct market research and statistical analysis, develop marketing strategies and manage marketing campaigns, including collection of Website traffic statistics;
detect, prevent and address fraud or other unlawful activity;
protect our rights and property and those of third parties;
use your data for other purposes where appropriate. In such cases, we will provide specific notice when collecting the data and obtain consent before processing where consent is required.

For these purposes, we collect and process only data that are compatible with the relevant purpose of processing.

Recipients of your Personal Data

Personal data we collect may be disclosed to third parties, in particular:

competent supervisory, public or judicial authorities where required by applicable law or a court decision;
external partners acting as processors on our behalf and bound to an equivalent level of protection, including law firms, financial advisers/accountants, advertising agencies, providers of IT products/services and support for information systems and networks, courier companies and similar providers.

We do not disclose personal data to third parties outside the European Union in countries without an adequate data-protection regime. If such a transfer becomes necessary, we will take all appropriate measures to ensure secure processing, for example by using Standard Contractual Clauses (SCCs) adopted by the European Commission.

Legal bases for processing

KOURTIDIS GROUP S.A. relies on four legal bases when processing your personal data:

Performance of a contract: where processing is necessary to fulfil obligations arising from a contract.
Legal obligation: where we must process your data to comply with a legal obligation, such as keeping records for tax purposes or providing information to a public authority or law-enforcement body.
Legitimate interests: where we have a legitimate interest in carrying out a lawful activity and ensuring continuity of that activity, provided that our interests do not override your interests, rights and freedoms.
Your consent: where we ask for your specific consent to process certain personal data. Processing takes place only if you agree. You may withdraw consent at any time without retroactive effect by contacting KOURTIDIS GROUP S.A. at info@kourtidis.group.

Your rights

Under Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation), you have the following rights:

Right of access to the personal data we process about you.
Right to rectification of incomplete or inaccurate data held by KOURTIDIS GROUP S.A.
Right to erasure of your personal data.
Right to restriction of processing.
Right to data portability to you or to third parties. Subject to the legal requirements, you may receive personal data concerning you in a structured, commonly used and machine-readable format and transmit them to another controller, provided that this does not adversely affect the rights and freedoms of others. This applies only to automated processing of information that you provided to us based on consent or for performance of a contract.
Right to object to processing of your personal data at any time. KOURTIDIS GROUP S.A. may refuse to comply where it demonstrates compelling legitimate grounds for processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.
Right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr) if you believe that your rights have been infringed. Postal address: 1-3 Kifisias Avenue, P.C. 115 23 Athens; telephone +30 210 6475600; email contact@dpa.gr.

For further information and to exercise your rights, please write to the Company’s registered office at Paralia Ofriniou, Kavala, P.C. 64008 or email info@kourtidis.group. As a rule, your request will be fulfilled within one month of receipt. Information, communications and actions taken under Articles 15 to 22 and 34 GDPR are provided free of charge.

Security and Retention of Personal Data

We retain personal data only for as long as required for the purposes of processing, including the duration of our contractual relationship, your consent, our legal obligations (such as tax-record retention) and our legitimate interests, as applicable.

Personal-data processing is carried out in a manner that ensures confidentiality. KOURTIDIS GROUP S.A. applies appropriate technical and organizational measures to ensure a level of security appropriate to the risks of accidental or unlawful destruction, accidental loss, alteration, unauthorized disclosure or access and any other form of unlawful processing.

Data you provide are protected through appropriate information-security measures to ensure secure transmission over the Internet and secure storage in Information Systems.

We require all third parties that may receive your personal data to maintain appropriate technical and operational security measures in accordance with Greek and EU data-protection law.

Special Categories of Data

Please do not disclose bank data or sensitive/special-category personal data to us by email. Processing such categories of personal data does not serve the processing purposes described above.

Links

Our Website contains links to other websites. This Privacy Policy does not apply to your access to other websites. Please consult those websites’ privacy policies for further information on how they process your data.

The Controller is not responsible for the content or services of third parties reached through links, hyperlinks or banners, including without limitation social-networking websites such as Facebook, YouTube, LinkedIn or Google+. The Controller does not guarantee and cannot control the availability, content or personal-data management policy of linked websites. Any issue arising during use should be addressed to the relevant third-party website, which bears sole responsibility for its services. Access to linked websites is at the user’s sole risk.

There are also electronic links to websites of other companies belonging to KOURTIDIS GROUP S.A. Each website is governed by its own Privacy Policy, which you should review on the corresponding website.

Updates to this Policy

This Policy was last updated on 11 September 2026.

This Policy may change from time to time. If we decide to amend it, we will inform you through notices displayed on our Website.

If we decide to materially change the processing of your personal data, you will receive prior notice or, where required, your consent will be requested before the new policy is implemented.

Contact

For any question or comment regarding this Policy and our practices, please contact us at info@kourtidis.group.