The privacy and protection of our customers’ personal data is of primary importance to us. We want you to feel satisfied and safe while visiting our website and to view our data protection practices as a customer-oriented quality standard. Please read this Privacy Policy carefully, as it informs you of your rights and the scope of personal data processing by our website, which is fully compliant with the General Data Protection Regulation (GDPR 2016/679). You can read the full regulation at: https://eur-lex.europa.eu/legal-content/EL/TXT/?uri=CELEX:32016R0679.

Our website provides information about our services and tourism news. Navigation is conducted via a secure server using Standard SSL 256-bit encryption. Minors may only use the services of https://be-fresh.gr/ with the consent of their parents or legal guardians. If such consent is not provided, minors must refrain from using any services or content of this site. What is personal data and what do we collect? “Personal data” means any information relating to an identified or identifiable natural person. Anonymous information is not included. When you fill out our contact form, sign up for the newsletter, contact us via social media, request support, or use our chat/messages, we may collect data such as identity, contact, or financial information. We may also receive personal data from third parties (e.g., Google Analytics, social media), only as permitted by law or your consent. We do not collect special categories of personal data (e.g., racial origin, political beliefs, religious views, biometric data, health, sexual orientation) or data on criminal convictions, in accordance with Articles 9 and 10 of the GDPR. If you do not consent to the collection of your data, we may be unable to provide our services effectively. How and why do we use your personal data?

• When necessary to fulfill a contract (e.g., purchase from our physical or online store).
• When required for legal compliance (e.g., tax or accounting purposes).

Marketing Communication With your explicit consent, we may send you marketing messages via email, SMS, Viber, etc. You can unsubscribe at any time via the link in our emails, by calling customer service at (+30) 2710 239 227, or by emailing logmandrakos@gmail.com. Cookies Cookies are small pieces of code that track your activity while browsing. Types of cookies we use:

• Session and persistent cookies (e.g., for login, form data).
• Authentication cookies.
• Security cookies (e.g., detecting failed login attempts).
• Multimedia cookies (e.g., video playback).
• Load balancing cookies.
• Preference cookies (e.g., language settings).
• Social media sharing cookies.
• Advertising cookies (first- and third-party).
• Analytics cookies (web analytics).

You must consent to the use of cookies when visiting our site. A relevant notice will be displayed upon entering the homepage. Data Sharing We do not transmit your personal data to third parties, unless:

• They are processors acting on our behalf (under Article 28 GDPR).
• It is necessary to fulfill a request (e.g., inquiries to suppliers).
• They are professionals involved in our operations (e.g., legal, transport, marketing, hosting, fraud prevention).

We do not transfer your data outside the European Union. Data Security We have implemented technical and organizational measures to ensure data protection principles and compliance with GDPR requirements. We only process the data necessary for each specific purpose. In the event of a data breach, we will notify you and the supervisory authority immediately. Data Retention We minimize data use and retain it only as long as necessary to fulfill the purposes described in this policy. Storage periods are based on legal timeframes and data minimization principles. Your GDPR Rights If you reside in the EU, you have the right to:

• Be informed about how we use your data.
• Access your personal data.
• Request data correction.
• Request deletion (“right to be forgotten”).
• Restrict processing.
• Data portability.
• Object to processing (e.g., direct marketing).
• Not be subject to automated decisions or profiling.
• File a complaint with a data protection authority.

Requests are answered within one (1) month. In complex cases, we will notify you if more time is needed. We may ask for proof of identity for your protection. Policy Updates This Privacy Policy was last updated on May 26, 2025. Please check periodically for any changes. Data Controller The Data Controller is Nikolaos Mandrakos (+30) 2710 239 227, logmandrakos@gmail.com. You may contact him for any questions or to exercise your rights under the GDPR.