1. Who is responsible
Athens Pantry Stories IKE, company number 179642503000, operates Pickpantrystorypuls at pickpantrystorypuls.online and is the controller of personal information described here. Our registered correspondence address is 24 Solonos Street, Athens 10673, Greece. Contact [email protected] for privacy enquiries, rights requests or questions for our privacy lead. This is also our DPO contact channel; we do not represent that a statutory Data Protection Officer has been appointed.
2. Information we collect
You can read the guides without creating an account. The static site has no account system, checkout, newsletter subscription or embedded advertising. Our hosting infrastructure may process technical request information such as IP address, requested page, browser information, timestamp and error details to deliver pages and investigate security incidents.
The contact form validates information in your browser and prepares an email link. It does not submit information to a website server or save your message in local storage. If you choose to send the prepared email, we receive your name, email address, subject, message and ordinary email metadata. Avoid including medical records, payment details or other sensitive information.
Homepage photographs are requested directly from images.unsplash.com. When an image loads, that service receives your IP address and technical information needed to handle the request, such as browser headers and the requested image URL. These requests do not include contact-form entries. Our image elements use a no-referrer policy to avoid sending the referring page address.
3. Purposes and legal bases
We use correspondence to answer questions, address corrections and manage legitimate business enquiries. Our legal basis is our legitimate interest in responding to people who contact us, or taking requested steps before a contract where applicable. Security processing supports our legitimate interest in maintaining a reliable website. We use external image delivery to display editorial photography, relying on our legitimate interest in presenting the website’s content. We may retain particular records where a legal obligation requires it. Optional device storage would require consent; declining it does not block access to our guides.
4. Cookies and local storage
We use a localStorage record named pps-cookie-consent-v1 to remember your privacy selection for up to six months. This is browser storage, not an HTTP cookie. No analytics, advertising pixels or optional functional integrations are installed in this release. Accepting all categories does not itself add tracking tools. External photographs load independently of these choices. Read the cookie policy for details and use the footer preferences control to change your selection.
5. Processors and disclosures
Infrastructure hosting and business email providers may process technical information or correspondence on our behalf, subject to appropriate contractual and security arrangements. This site loads no external fonts or embedded maps. It does load homepage photographs from Unsplash’s image service. Provider-side handling of image requests is described in Unsplash’s privacy policy, including its retention and international processing practices. You can block images.unsplash.com with browser controls or a content blocker without losing access to the written guides.
We do not sell personal information or share it for cross-context behavioural advertising. Information may be disclosed to professional advisers or authorities when necessary and lawful. You can request information about relevant processors by contacting our privacy lead.
If a processor transfers personal information outside the European Economic Area, applicable safeguards must be used, such as an adequacy decision or approved standard contractual clauses with any necessary supplementary measures.
6. Retention and security
Routine enquiries are normally deleted within twelve months after the conversation closes. Security logs should be retained only as long as necessary, normally no more than thirty days unless an incident requires investigation. Legal claims or statutory duties may justify longer retention of specific records. We apply access controls and proportionate safeguards, but no electronic communication method is completely secure. Your browser removes or expires its saved privacy preference independently of our email records.
7. Your rights and complaints
Subject to applicable conditions, GDPR rights include access, correction, erasure, restriction, portability and objection. You can withdraw optional consent without affecting earlier lawful processing. We normally respond within one month, with permitted extensions explained where necessary. You may complain to the Hellenic Data Protection Authority or your local supervisory authority.
Where the CCPA/CPRA applies, California residents may request access, correction or deletion, and exercise applicable sale, sharing and sensitive-information rights without unlawful discrimination. We do not sell or share data for behavioural advertising and do not use sensitive information for profiling. We may verify a request proportionately and accept authorised-agent requests where legally required. Applicable California response periods generally begin at forty-five days.
8. Children and updates
The site is intended for a general audience and does not knowingly solicit personal information from children. Contact us if a child has sent information that should be removed. We may update this policy when our practices change and will publish the revised effective date here. Material new processing will be explained before it begins where required.