Legal
Privacy Policy
How we handle the personal data you send us through this website, and your rights over it.
Last updated: 05/10/2026
On this page
Other policies
Who is responsible for your data
PotPan SA (“PotPan”, “we”, “us”), with its registered office at 70th km National Road Athens–Lamia, 32009 Avlida, Greece, is the controller of the personal data described in this Privacy Policy. General Commercial Registry (G.E.MI.) no. 046635822000, VAT no. 999859867, Tax Office of Chalkida.
For any question about your data, or to exercise your rights, write to info@potpan.gr or to the address above, marked “Data protection”.
This policy explains how we handle personal data collected through potpan.gr, in line with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and Greek Law 4624/2019.
What we collect
We only collect the data you choose to send us and the minimum technical data needed to run the website.
Enquiry and contact forms
When you send an enquiry through our Contact, Exports & B2B or Who We Serve pages, we receive the details you enter: your name, company, email address, and, where you provide them, your phone number, country or market, sector, sales channel, products of interest, estimated volumes, timing and your message. We also record which page and which kind of enquiry the form was sent from.
Job applications
When you apply through the Careers section of our Contact page, we receive your name, email address, phone number, area of interest, your CV and any message you add. Your application and CV reach us by email; they are not stored on the website. Please include in your CV only what is relevant to the application.
Newsletter
When you sign up to our newsletter, we receive your email address.
Technical data
Like every website, our server records technical data when you visit, such as your IP address, browser type, the pages requested and the date and time of the request. This is used to deliver the website securely and to investigate faults or misuse.
We do not ask for, and ask you not to send us, special categories of data such as health information.
Why we use it, and on what legal basis
| Purpose | Data | Legal basis |
|---|---|---|
| Answering your enquiry, sending the catalogue or information you asked for, and preparing a possible business relationship | Enquiry form data | Steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in responding to business enquiries (Art. 6(1)(f)) |
| Assessing your job application for the role or area you applied for, and contacting you about it | Application data and CV | Steps taken at your request before entering into an employment contract (Art. 6(1)(b) GDPR) and our legitimate interest in recruiting (Art. 6(1)(f)) |
| Keeping your application for future roles | Application data and CV | Your consent (Art. 6(1)(a)), which you can withdraw at any time |
| Sending our newsletter about product ranges, export news and company updates | Email address | Your consent (Art. 6(1)(a)), which you can withdraw at any time |
| Running the website securely, preventing abuse and fixing faults | Technical data | Our legitimate interest in a secure, working website (Art. 6(1)(f)) |
| Meeting legal obligations and defending legal claims | Any of the above, as needed | Legal obligation (Art. 6(1)(c)) and our legitimate interest (Art. 6(1)(f)) |
We do not use your data for automated decision-making or profiling, and we do not sell it.
Who we share it with
Your data is handled by the PotPan staff who need it to answer you. Where your enquiry concerns another company of the PotPan Group, for example a Parnassos Delicatessen product, we may pass it to that company so it can respond. Job applications are seen only by the people involved in recruitment.
We may disclose data to public authorities, courts or our legal advisers where the law requires it or where it is needed to establish or defend legal claims.
Transfers outside the EU
We keep your data within the European Economic Area wherever possible. If a service provider processes data outside it, we make sure the transfer is protected, for example by a European Commission adequacy decision or the Commission’s standard contractual clauses. You can ask us for details.
How long we keep it
- Enquiries that do not lead to a business relationship: 24 months after our last contact with you.
- Enquiries that lead to a business relationship: for as long as the relationship lasts and afterwards for as long as Greek tax and commercial law requires.
- Job applications that do not lead to employment: 6 months after the position is filled, or after we receive them if you applied without a specific opening. If you agree, we keep them for up to 12 months for future roles.
- Newsletter: until you unsubscribe or withdraw your consent.
- Server logs: 90 days, unless needed longer to investigate a security incident.
Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and receive a copy of it;
- have inaccurate data corrected;
- have your data erased, where there is no longer a reason for us to keep it;
- restrict how we use your data;
- receive data you gave us in a structured, machine-readable format and have it passed to another controller;
- object to our use of your data based on legitimate interest;
- withdraw your consent at any time, for example by using the unsubscribe link in every newsletter. This does not affect the lawfulness of what we did before you withdrew it.
To exercise any of these rights, write to info@potpan.gr. We will reply within one month, free of charge, and may ask you to confirm your identity first.
Complaints
If you believe we have not handled your data correctly, please tell us first so we can put it right. You also have the right to lodge a complaint with the Hellenic Data Protection Authority, 1–3 Kifisias Avenue, 115 23 Athens, www.dpa.gr, or with the supervisory authority of the EU country where you live or work.
Security
We use appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access, including encrypted connections (HTTPS) across the whole website and access to enquiries limited to the staff who need it. No transmission over the internet is completely secure, so please do not send us confidential business information through the website forms.
Cookies
How the website uses cookies and similar technologies is explained in our Cookie Policy.
Changes to this policy
We may update this Privacy Policy when our practices or the law change. The version on this page, with the date shown at the top, is the current one. If a change materially affects how we use data we already hold, we will tell you directly where we can.