Olympic Catering

Menu

PRIVACY POLICY

The Societe Anonyme under the corporate name “Olympic Catering Single Member S.A.” (hereinafter referred to as the “Company”), headquartered in Spata, Attica, Athens International Airport “EL. VENIZELOS”, Building 14B, Postal Code 19019, acting as the Data Controller, is subject to all obligations and commitments arising from the applicable data protection legislation at any given time, including the General Data Protection Regulation (EU) 2016/679 (hereinafter the “GDPR”) and Law 4624/2019 (hereinafter the “Data Protection Legislation”).

For the Company, respect for and protection of your personal data is an absolute commitment. We understand and take seriously the fact that you are aware of and interested in your personal data.

This Privacy Policy describes the personal data that the Company collects and processes in the context of its business activities, the sale of products and services, the evaluation of job candidates, as well as the operation of its official website, the manner in which we use and protect them, the legal bases for processing, and your available rights and choices. Its purpose is to provide you with comprehensive and transparent information regarding your personal data, the purpose of its processing, the categories of recipients, and the procedures for exercising your legal rights.

Recognizing its ongoing responsibility for data protection, the Company implements appropriate technical and organizational measures based on the principles of lawfulness, proportionality, purpose and storage period limitation, and data minimization.

We acknowledge that data protection is an ongoing responsibility; therefore, we will update and amend this Policy from time to time. Please visit our website periodically to ensure that you are informed of any changes.

The Company does not knowingly process personal data concerning minors under the age of 18, except with the explicit consent of the parent or person exercising parental responsibility.

The Company has appointed a Data Protection Officer (DPO), with contact details: email dpo@evergood.group

2. Basic Principles of Processing

The processing of personal data is conducted in accordance with the data protection principles set out in Article 5 of the GDPR:

  • Lawfulness, fairness, and transparency: Data are processed lawfully, fairly, and in a transparent manner in relation to the data subject.
  • Purpose limitation: Data are collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes.
  • Data minimization: Data are adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.
  • Accuracy: Every reasonable step is taken to ensure that personal data that are inaccurate are erased or rectified without delay.
  • Storage limitation: Data are kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed.
  • Integrity and confidentiality: Appropriate technical and organizational measures are implemented to ensure security against unauthorized or unlawful processing and against accidental loss, destruction, or damage.
  • Accountability: The Company is responsible for and capable of demonstrating compliance with all the above principles.

3. Who We Are

Olympic Catering S.A. is a company belonging to the Goody’s-Everest Group, which is part of the Goody’s | everest Group of Companies, the leading food and beverage group in the market. Olympic Catering was established in the 1970s with the primary purpose of covering the difficult and demanding task of catering and ramp handling for the historic Olympic Airways.

The provision of high-quality services meeting the needs and desires of all its customers, the production of products emphasizing Greek-Mediterranean cuisine, and the adherence to high hygiene standards are criteria that have defined Olympic Catering throughout its journey to date.

4. What Personal Data We Collect About You

The provision of certain personal data is necessary for the fulfillment of contractual obligations, invoicing, or the handling of requests. Failure to provide them may prevent the provision of the respective service or the completion of the transaction/evaluation. The non-provision of other, non-mandatory personal data shall under no circumstances affect our provision of services. Specifically, we collect:

  • Identity and Contact Details: Full name, contact telephone number (landline/mobile), email address, and postal address, which are collected when you communicate with us, submit requests via the website, or order products and services.
  • Billing & Financial Transaction Data: We collect details of our customers/partners necessary for invoicing our services, such as Tax Identification Number (VAT/A.F.M.), Tax Office (D.O.Y.), professional activity, and bank account details (IBAN) when required for the payment or certification of a payable fee.
  • CV & Job Candidate Data: Depending on the position for which you apply, we collect the details submitted by you and process, indicatively, the following personal data: your educational background, employment history, previous employers, areas of specialization, professional and other work licenses and certifications, educational institutions from which you graduated, job type preferences, verification of information regarding references and previous employers, any other information you choose to submit through the CV submission process, and any other data provided to us during a telephone contact, application, or other communications. For the purpose of reviewing your application history, we may also receive information about you from other sources where permitted by applicable law, such as former employers, subcontractors providing technical services, and publicly available sources, such as information posted on publicly available and accessible websites, social media profiles, and public search engine results, where such information is relevant and appropriate for your evaluation for the position applied for.
  • Evaluation & Customer Satisfaction Survey Data: Opinion data and responses to customer satisfaction questionnaires regarding the quality of provided products and services.
  • Technical Browsing Data: Data collected via cookies during navigation on the website. We do not process sensitive personal data (special categories), unless there is an explicit legal obligation (e.g., in the field of labor law and food hygiene/safety).

5. How We Collect Your Personal Data

We collect your personal data through the following channels:

  • Directly from you when purchasing a product or service, within the framework of concluding and executing the relevant commercial contract or order.
  • When you voluntarily submit or send us your CV (via email, dedicated platform, job posting, or in print).
  • Via the website’s electronic contact form, direct email, or telephone communication with the Company.
  • During your participation in customer satisfaction surveys.
  • From third-party/public sources, exclusively for job candidates to the extent permitted by law (e.g., professional platforms, referrals upon your indication).

6. Method of Data Processing

The processing of your personal data includes operations such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, restriction, erasure, or destruction, as defined in Article 4(2) of the GDPR. Processing is carried out primarily by electronic and automated means and secondarily through physical archives, always applying strict security procedures.

7. Who Else is a Recipient of Your Personal Data?

The company does not transmit, disclose, or assign your personal data in any way to third-party companies or external providers, with the exception of specialized partners such as the company under the distinctive title “Strings Digital”, who, within the framework of our activities and specifically for the technical implementation, maintenance, and management of the website as well as the management of digital campaigns, may have access to the environment or data, acting strictly as Data Processors on behalf of the Company and bound by the foreseen confidentiality and data protection agreements (DPAs).

The processing of your personal data is carried out exclusively internally by the Company and specifically by our authorized personnel, who are bound by strict obligations of confidentiality and secrecy, solely to the extent necessary for managing and responding to your requests. Access by unauthorized persons, including unauthorized employees, is strictly prohibited.

In any case, our Company will not sell, transfer, or publicize personal details of visitors/users of its website to third parties, with the exception of the application of relevant legal mandates, where access may also be obtained by:

  • Lawyers, court bailiffs, or other persons necessary for the judicial or out-of-court handling of company claims.
  • Public services, administrative and judicial authorities, supervisory and regulatory authorities, provided this is required by law, court order, or any other act binding upon the company, in the context of compliance with general statutory obligations.

8. Why We Use Your Data & Legal Bases for Processing

The Company collects and processes your personal data exclusively for the following purposes and on the respective legal bases (Article 6(1) GDPR):

  1. Contract execution, sale of products/services, and invoicing: For processing orders, providing catering/food service operations, issuing statutory documents (invoices/receipts), paying fees for rendered services, and certifying payable fees, pursuant to Article 6(1)(b) GDPR (performance of a contract or taking steps prior to entering into a contract).
  2. Compliance with legal obligations (tax, commercial, etc.): Such as the issuance, transmission (e.g., via the myDATA platform), and maintenance of tax records and documents, as well as compliance with labor, insurance, and market regulations, pursuant to Article 6(1)(c) GDPR (compliance with a legal obligation).
  3. Customer support and inquiry responses: Such as managing, serving, and processing requests submitted via the website’s contact form, email, or telephone, pursuant to Article 6(1)(b) GDPR and secondarily Article 6(1)(f) GDPR (Company’s legitimate interest for effective service and communication).
  4. Evaluation of CVs and recruitment candidacies: For evaluating a candidate’s application for a specific job opening, conducting interviews, and verifying professional history, pursuant to Article 6(1)(b) GDPR (taking steps at the request of the data subject prior to entering into an employment contract) and Article 6(1)(a) GDPR (consent, particularly for retaining the CV for future job vacancies).
  5. Conducting customer satisfaction surveys: For evaluating provided services and products, upgrading customer experience, and improving business operations, pursuant to Article 6(1)(f) GDPR (overriding legitimate interest of the Company to ensure high-quality services) or Article 6(1)(a) GDPR where specific consent is required.
  6. Establishment, exercise, or defense of legal claims: For the legal protection of the Company, proving compliance, and defending its rights in out-of-court or judicial settings, pursuant to Article 6(1)(f) GDPR (legitimate interest).
  7. Compliance with legal obligations of the Company: Compliance with obligations imposed by law, e.g., tax or other applicable legislation, pursuant to Article 6(1)(c) GDPR.

9. How Long We Retain Your Personal Data

Data are retained only for the period necessary to fulfill the purposes for which they were collected.

  • Legal/Tax Obligations: Where retention is mandated by legislative provisions (e.g., tax, market regulations), personal data are retained for the period explicitly stipulated by the respective provisions.
  • Request / Communication Data: Data submitted via the contact form are retained for the period required for the complete examination, response, and handling of your request, unless the content of the request indicates a need for retention for a longer period.
  • CV Data: Retained during the evaluation and selection process for the respective position, unless deletion is requested earlier.
  • Satisfaction Surveys: Retained in a form permitting identification only for the period of results analysis and subsequently anonymized.
  • Legal Claims / Legitimate Interest: The company may continue storing your personal data for a longer period if necessary to protect its legitimate interests regarding potential liability related to the provision of its Services. Especially in the event of any legal claim by a customer against the company, data will be retained until the relevant claim becomes irrevocable.

10. Guarantees and Security Measures

When you provide us with your personal data, we take steps to ensure they are kept and managed securely. To protect your personal data, we adopt adequate physical, technical, and organizational security measures. We continuously update and review our security technology. We limit access to your personal data to those employees who need to know such data to provide you with your desired services. Furthermore, we train all employees on the importance of confidentiality, privacy preservation, and personal data security. Among other measures, we have implemented the following technical and organizational procedures to protect your personal data from loss, alteration, unlawful processing, or modification:

  • Access to your personal data is restricted solely to authorized individuals for specific purposes.
  • Access to IT systems used for data processing is secured and restricted exclusively to authorized personnel.
  • Access to such IT systems is monitored to immediately detect and prevent unauthorized access.
  • Use of IT systems and software applications installed in a manner that minimizes the use of personal data and/or user identification data.
  • Adoption of individual data retention procedures and secure disposal/destruction practices.

11. Your Rights

As a data subject, you possess the following rights under the terms and specific provisions of the GDPR:

  • Right of access (Article 15 GDPR): You have the right to be informed whether we process your personal data and, if so, to access your personal data undergoing processing, as well as information concerning the processing. Within this scope, you have the right to request a free copy of your processed personal data from the Company. If requests are repetitive and manifestly unfounded, the Company reserves the right to charge a reasonable fee.
  • Right to rectification (Article 16 GDPR): You have the right to request the correction of inaccurate data or the completion of incomplete data.
  • Right to erasure (“right to be forgotten”) (Article 17 GDPR): You have the right to request the deletion of data without undue delay upon your relevant request under the conditions stipulated by relevant Greek and European Data Protection legislation. In certain cases (such as when there is a legal obligation to process personal data mandated by law or public interest), this right is subject to specific limitations or does not apply.
  • Right to restriction of processing (Article 18 GDPR): You have the right to request the restriction of processing, meaning the suspension or limitation thereof, when you contest the accuracy of the data, object to their processing, or another ground provided by relevant Greek or European Data Protection legislation applies.
  • Right to data portability (Article 20 GDPR): You have the right to receive the data you have provided to us based on your consent so that you can use them elsewhere.
  • Right to object (Article 21 GDPR): You have the right to object at any time to the processing of your data based on legitimate interest (Article 6(1)(f) GDPR). In this case, we will cease processing unless we demonstrate compelling and legitimate grounds that override your interests, rights, and freedoms.
  • Right to withdraw consent (Article 7(3) GDPR): Where we process your personal data based on your consent, you have the right to withdraw your consent at any time or change the level of consent granted without affecting the lawfulness of processing prior to the withdrawal.
  • Right to lodge a complaint with the Hellenic Data Protection Authority (HDPA) (Article 77 GDPR): You have the right to file a complaint with the competent supervisory authority if you believe your rights are violated (detailed below in Section 14).

In the event you exercise any of the above rights, the Company will respond within one month.

12. Transmission of Personal Data Outside the EU

Personal data collected via the website www.olympic-catering.gr are stored on servers within the European Union (EU) / European Economic Area (EEA) and are neither transmitted nor processed in third countries outside the EU.

13. Use of Cookies & Links to Other Websites

Our website may contain links to other websites. This privacy policy applies solely to data provided through the website www.olympic-catering.gr. Therefore, whenever you follow a link from this website to another, we recommend that you carefully read the privacy policies of the respective website. In the event you choose to connect with any third-party website via special links (links, hyperlinks, banners) contained within the website, the Company bears no liability for the terms of management and protection of personal data applied by such third parties.

14. How to Contact Us & Submitting Complaints

You may contact us for any question regarding the processing of your personal data, our use of cookies, or to exercise your rights by using the online contact form on our website.

Please visit the company’s website www.olympic-catering.gr periodically to stay informed of any updates to this Policy.

If you wish to submit any inquiry regarding the terms of this Policy, please address it either via email to itsoukalis@vivartiafs.com or by telephone at +30 216 93 92 900.

If the company fails to appropriately satisfy any request of yours without adequately justifying its refusal, or otherwise violates its obligations under the Data Protection Legislation, you are entitled to file a complaint or grievance with the Hellenic Data Protection Authority (www.dpa.gr, telephone: +30 210 6475600, fax: +30 210 6475628, email: contact@dpa.gr).

You may contact the Data Protection Officer by sending an email to dpo@evergood.group.

15. Version Information – Changes and Updates

This Policy was last updated on October 7, 2026.

We reserve the right to modify and update this Policy, either wholly or partially, at our absolute discretion at any time. Any modification hereto shall enter into force immediately upon the posting of the modified Policy on the Website. Simultaneously, an indication will appear on our home page highlighting the change. In any case, if you continue to use the Website and its services after modifications have been made pursuant to the above, you shall be deemed to accept such modifications. If you do not agree with the terms of this Policy as it may be amended, either wholly or in part, you must cease using the Website.

Every change to this Policy will be posted here immediately.