Personal Data Protection Policy
One of our top priorities is the protection of your personal data, which we process in continuous compliance with the Personal Data Protection legislation in force.
Please read this personal data protection policy carefully to thoroughly understand the type of data we process.
1. General information and Controller
The company “ATHENIAN BREWERY S.A.”, seated at 102 Kifissou Ave., Aigaleo, 122 41, Athens, with Tax Identification Number 094000362 (FAE TAX OFFICE of Athens), as legally represented (hereinafter the “Company”) is the controller for the collection, storage and general processing of personal data of users of this website, as collected and stored through this website and though the social networking pages connected to the website.
2. What personal data do we collect and how?
We collect and process your personal data as follows:
- Participation in campaigns, prize draws, competitions
If you participate in competitions, draws or other events/campaigns, you will be asked for your name, email address, telephone number and answers to any open questions of the competitions. We need this information to process your participation and to be able to contact you about your prize. You may be also asked for your physical address or other information required for the dispatch of prizes/tickets/products by mail. All information regarding your participation in our campaigns, prize draws and competitions will be kept by us for a maximum period of 6 months after the end of the competition. The information will not be used for other purposes, unless you have been explicitly informed of these purposes or/and your consent has been previously requested. We inform you that we also use the social media (e.g. LinkedIn, Facebook, Google or Twitter) of the Company (e.g. regarding participation in competitions of the company) to collect information required for login or connection, for which you have authorized the social media provider to share with us, such as your name and email address. The collection of other information may depend on your privacy settings with the social media provider, so please refer to the statement or privacy policy of the relevant service.
- Information when you contact us
If you visit our website and have a question or comment to make, you can submit them to our Company by completing the contact form available on our website. You will be asked for your name and email address, as well as information about your request/question/comment. We will use this information only to respond to your query/request/comment. We will record your requests, questions/comments and our relevant responses, as well as any other actions to handle your request/communication. All information will be kept for 6 months after settling the question or complaint or closure of the case before court, investigating or/and any other supervisory authorities.
- Information about your visit and use of the website
When you visit our website, we collect information such as your IP address, the websites you visit, your device category, browser and type of browser, clicks and views. Information about your use of our website and services allows us to make categorizations, namely to form groups of website visitors or customers with certain common features such as age group, gender or region. We may add you to one of our categories. We use these categories for website personalization; for instance, we change the search results order or the display point of certain offers, so you are more likely to see them. We may also use these categories to display online advertisements that we believe are relevant to you and to send you commercial messages. We use those personal data as required in the context of our legitimate interests, for the promotion of our products and services to consumers and visitors to our website, for attracting more consumers and for improving our products and services sales. We retain personal data for a maximum period of 14 months.
- Marketing
In some cases, we combine information about your online searches (clicks and views), your settings on our website, your customer service requests and your contact history. This information allows us to use different channels for managing relationships and marketing our products and services to you via email, direct mail, social media, telephone or internet advertising, which may include personalized content and offers of the website to suit your preferences. You can opt out from receiving newsletters, direct mail, social media and phone calls and you can object to our use of your personal data for direct marketing purposes (for more information on this procedure, read the following paragraphs of this policy). We use those personal data as required in the context of our legitimate interests, for the promotion of our products and services to customers and visitors to our website, for attracting more customers and for improving our product sales. We retain personal data as specified in accordance with the relevant purposes for which the personal data have been collected (e.g. when you contact us, when you visit our website, for participation in prize draws). Personal data are deleted or anonymized usually within a maximum period of 14 months.
- Maintenance and optimization of our website
Your personal data are also used for the maintenance and analysis of our website, in order to resolve performance issues and optimize availability and user experience. We record every use of our website. Our use of your personal data for these purposes is necessary in the context of our legitimate interests and information is retained for a maximum period of 14 months. Our website use logs are deleted within 14 months of their creation.
3. Purposes of processing
a. IT system support/improving services provided: We use your personal data in order to detect server problems and ensure proper operation of our website. The Company uses personal data of users, which it collects through the website, in order to offer new services via the website or improve currently provided services.
Legal basis of processing: The legitimate interest of the Company to ensure the smooth operation of its website and improve the services provided by it.
b. Compliance with our legal obligations: When we receive relevant court or public authority orders, we process your personal data in order to respond to these requests.
Legal basis of processing: Compliance with our legal obligations.
c. Organization of corporate competitions: We process personal data you submit through the website and the social media connected to it for your participation in company competitions.
Legal basis of processing: Performance of contract (by participating in the competition you accept the terms of the competition and conclude a contract with the Company).
Promoting products and services of the Company: Information on the use of our website and services allow us to create segments, which group our website visitors and customers with common features such as age, gender and region. Segments are then used to customize our website and change e.g. the order of your search results or show you an advertisement that we think is of interest to you. We can also process data that you have posted on social media (if e.g. you participate in a corporate competition via a social network), provided you have authorized the social media provider to share said data with us.
Legal basis of processing: The company’s legitimate interests.
e. Legal protection of the company: Ensuring the implementation of the terms of use of our website and protecting our legal rights.
Legal basis of processing: The Company’s legitimate interests.
4. Cookies
Much of the information mentioned in this Privacy Policy is collected through the use of cookies and similar techniques. Cookies are small text files containing small amounts of information which are downloaded to your device, for example, your computer, tablet, or smartphone, when you visit a website. The techniques we use, which may be similar to cookies, are tracking pixels, Java scripts, tags and web beacons. These cookies and similar techniques are sometimes required to save the settings of your account, language and country, while allowing us to measure and analyze your behavior on our website and to display personalized advertisements on our website or third-party websites. If necessary, you will be asked for your consent to the use of cookies. For more information about the type of cookies we use and how we use them, please refer to the separate Cookies Policy (https://www.alfabeer.gr/cookies/).
5. Rights of access, rectification, erasure, restriction of processing and data portability
You have the right to request the review your personal data that is processed by us or on our behalf. You have the right to rectify, erase or restrict the processing (as appropriate) of your personal data. You can exercise these rights by contacting and submitting a relevant request to our Company’s Data Protection Officer (DPO) at [email protected].
Please note that requests that do not meet the requirements of the legislation in force may have to be re-drawn or may be rejected and that certain personal data may be exempted from such rights to access, rectification and erasure, in accordance with the applicable data protection laws and other laws and regulations.
You have the right to receive the personal data you have provided us in a structured, namely a usable and machine-readable format, and in some cases we will forward your data, upon your request, to another controller if this is technically feasible.
6. Right to object
You have the right, in some cases, to request that we stop processing your personal data; however, we will continue to process your personal data, if there are compelling legitimate reasons for this.
In any case, you have the right to object to our use of your personal data for direct marketing purposes, including profiling, and if you do so, we will satisfy your request.
If you have consented to the use of your personal data by us, you have the right to withdraw your consent without this affecting the legitimacy of our processing of such data prior to withdrawal of your consent.
User requests in relation to the exercise of the above rights may be sent to our Company’s Data Protection Officer (DPO) at
[email protected].
Users may also submit complaints about the exercise of their rights to the Personal Data Protection Authority (www.dpa.gr). According to the website of the Authority, complainants must first submit their complaint to the controller or the DPO.
7. Retention of personal data
Users’ personal data are retained only for the period required for meeting the purpose for which they were collected, in full compliance with the legislation in force. When the purpose of your personal data processing has been completed, said data will be deleted. The specific retention periods for each of the relevant processing purposes are listed above.
8.How and with whom we share your personal data (recipients of personal data)
We may need to share your personal data with third parties to help us provide you with services and products and to manage our website. Such third parties are:
- HEINEKEN Group companies, for the purpose of storing personal data, which are subject to processing through the website, due to shared information systems,
- service providers, when required, for providing us with a service and for providing data analysis services,
- service providers helping us organize campaigns and promotions,
- first and third party advertising companies,
- Media agencies for marketing and research purposes,
- in case HEINEKEN sells to third parties all or part of the assets or shares of a HEINEKEN group company to which personal data were transferred, your personal data may be provided to said third parties.
Said third parties may be seated in the European Union or in other countries of the European Economic Area or in other regions of the world. When we store personal data outside the EEA, we ensure an appropriate level of protection for the transferred data. If we are to transfer your personal data to a third country, namely to a country outside the EEA or to an international organization, you will be informed before they are transferred, as provided for in article 13(1f) of the GDPR.
We require service providers to take appropriate measures to protect the confidentiality and security of personal data.
Finally, it may be necessary to provide personal data to law enforcement bodies, in order to comply with a legal obligation or court order.
9. Data security
The Company ensures users that it takes all necessary technical and organizational measures for the security of their personal data, to ensure the confidentiality of their processing and to protect them against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access and any other form or unlawful processing.
Although the Company makes every effort to protect personal data, it cannot guarantee the security of data transferred to its website, since information transfer over the internet can never be completely secure.
Our website may contain links to other websites.
We are not responsible for the personal data protection policies, the content and security of other websites, which are not governed by this personal data protection policy and therefore advise you to carefully read the personal data protection policies in these websites. Moreover, if you choose to share information from our website via social media, you are advised to carefully read the personal data protection policies of the relevant social media.
10. Protection of Children’s Personal Data
Our website is not intended for use by persons under the age of 18. To determine your age and allow you to enter our website, we ask your date of birth. Please do not provide us with any personal data if you are under 18 years old.
11. Applicable Law
For any dispute arising out of the use of this website, the Greek courts shall be the courts of exclusive jurisdiction.
12. Amendments
This Personal Data Protection Policy has been prepared in accordance with the provisions of General Data Protection Regulation 2016/679/EC. When updated, any change will be posted on the official website of the COMPANY with an indication of the review date.
13. Data Protection Officer
You may contact the Company’s Data Protection Officer for matters concerning your personal data processing at [email protected].
