GR
Privacy Policy
Privacy Policy (Goody's Privacy Statement)
1. Preamble
The company under the trade name "EVERGOOD Μονοπρόσωπη Ανώνυμη Εταιρεία Α.Ε.", with the distinctive title "GOODY’S" and registered seat at Spata, Attica, Athens International Airport "EL. VENIZELOS", Building 14B, Postal Code 19019 (hereinafter the "Company"), acting as the Data Controller, is subject to all obligations and commitments arising from data protection legislation, including the General Data Protection Regulation (EU) 2016/679 (hereinafter the "GDPR") and Law 4624/2019 (hereinafter the "PD Legislation").
For the Company, respect for and protection of your personal data is an absolute commitment. We understand and take seriously the fact that you are aware of and interested in your personal data.
This Privacy Policy describes the personal data that the Company collects and processes in the context of operating the website www.goodys.com (hereinafter the "Website"), the mobile application "Goody’s app" (hereinafter the "Application"), and the loyalty program "All Star Club" (hereinafter the "Program"), the way we use and protect them, the legal bases for processing, as well as your rights and choices. Its purpose is to inform you about the company's policy regarding the personal data you provide to us, so that you know the purpose of our processing, the category of recipients, and the procedures you can follow to exercise your legal rights.
Recognizing its ongoing responsibility to protect your personal data as a Data Controller processing them lawfully, the Company has implemented all technical and organizational measures based in particular on the principles of proportionality, purpose limitation, storage limitation, and data minimization, exclusively for the purpose for which they were collected and solely for the duration of the respective processing purpose, ensuring that your personal data remain completely secure.
We recognize that data protection is an ongoing responsibility and consequently will update and amend this Policy from time to time to remain fully compliant with the law. Please visit our website www.goodys.com periodically to ensure you are informed of and satisfied with any changes. In case of doubt regarding any term of this privacy statement, you can contact us via e-mail at info@goodys.com.
We would also like to assure you that the company does not process personal data concerning minors under the age of 18.
The Company has appointed Mr. Emmanouil Laskaridis as Data Protection Officer, with contact email dpo@evergood.group.
2. Basic Processing Principles
The processing of personal data is carried out in accordance with the data protection principles set out in Article 5 of the GDPR. All policies and procedures are designed to ensure compliance with these principles.
Personal data shall be processed lawfully, fairly, and in a transparent manner in relation to the data subject (lawfulness, fairness, and transparency).
Personal data shall be collected for specified, explicit, and legitimate purposes and not further processed in a manner that is incompatible with those purposes.
Personal data shall be adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed (data minimization).
Every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay (accuracy).
Personal data shall be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed (storage limitation).
Personal data shall be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organizational measures (integrity and confidentiality).
The controller shall be responsible for, and be able to demonstrate compliance with, the core processing principles (accountability).
3. Who We Are
The company operates in the mass catering market and is the largest catering chain in Greece, with stores and a presence abroad as well. Our goal is to offer our services to consumers either through our store network, which operates under a franchise agreement, and/or online via the website goodys.com, or through the Goody’s app or in-store applications.
4. What Personal Data We Collect About You
The provision of the following personal data to the company is in no way mandatory; however, the failure to provide certain of them, detailed below, will make it impossible to provide our catering services to you, as well as your participation in the ALL STAR CLUB loyalty and reward program. This means that you voluntarily provide us each time with those personal data that are minimally necessary for the proper and effective provision by the company of the specific service you wish to receive, mainly regarding the execution of your product orders and your participation in the ALL STAR CLUB loyalty and reward program. Conversely, the failure to provide other, non-mandatory personal data, also listed below, cannot in any way affect the seamless provision of our services by us.
4.1. Delivery / Take Away Catering Service
For delivery/take away services through our stores and/or online via goodys.com, the Goody's app, or in-store applications, we process the following personal data:
Full Name: Collected for the needs of executing Goody's menu product orders from our store network.
Postal Address: Collected for delivery and order completion purposes.
Email Address: Collected for order confirmation. Website Guests' email addresses are collected solely for sending the order receipt requested through the website.
Contact Phone Numbers: Collected to provide better and faster services until order completion, including order confirmation.
Invoicing Data: Collected when invoicing is requested (for sole proprietorships), including Tax Identification Number (AFM), Tax Office (DOY), profession, address, etc.
Facebook ID / Gmail: If a customer chooses to log in to the online ordering service (goodys.com, goodys app) using their Facebook or Gmail account, the user's email address is obtained.
Preferences & History Information: Following prior explicit consent, we collect information regarding purchases made at our stores via goodys.com and received offers, to facilitate future order selections.
Credit or Debit Card Information: Collected mandatorily if users/guests choose to prepay or pay upon delivery using a credit or debit card. Card details are requested at checkout and used exclusively for electronic transmission via EveryPay's secure environment to complete the payment. Goody’s does not store any credit/debit card details in its electronic systems or physical archives. Cardholder verification may require transferring card data to a third-party partner of EveryPay.
4.2. ALL STAR CLUB Loyalty & Reward Program
For registration and participation in the ALL STAR CLUB program, we collect:
Registration & Basic Data: Full name, mobile phone number, email address, gender, and date of birth, alongside purchase history.
Transaction Data: Information on purchases made at stores or online channels (goodys.com, app, in-store apps) using the membership number, to enable point collection and reward/voucher allocation.
Profiling: Upon registration, users consent to profile analysis for custom audience categorization. Users are asked during their first login on the Website/Application to complete a personal details questionnaire (date of birth, gender) and state preferences to earn stars/points and receive personalized news and offers.
4.3. Website Contact Form & Inquiries
For the www.goodys.com service, we collect customers' names, contact phones, and email addresses to manage inquiries submitted via the website's contact form. Any further data voluntarily submitted will be kept for better and faster request handling. The Company does not use email contents, chats, or other personal files for advertising targeting.
Sensitive Data: We do not process sensitive personal data within the context of our website services and content.
Minors: The company does not knowingly process personal data of minors under 18 years of age. If notified of data collection from a minor under 18 without parental consent, the company will take appropriate measures to delete such data.
5. How We Collect Your Personal Data
We collect your personal data when you express interest in our services, make purchases from our e-shop or stores, when we directly provide services to you, or when you input data online via our website, the Goody's app, or register for our newsletter. For the ALL STAR CLUB program, data is collected when you register and input your details for that purpose.
6. How We Process Data (Article 4(2) GDPR)
Processing includes collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission to authorized persons/partners, restriction, erasure, or destruction, in accordance with Article 4(2) GDPR. Processing is conducted primarily via automated (electronic) means and secondarily via non-automated (paper) means under strict security procedures.
7. Who Else is a Recipient of Your Personal Data?
The company does not transfer, disclose, or assign your personal data to third-party companies or external providers, except for specialized partners supporting our website and services who act as Processors on our behalf and are bound by Data Processing Agreements (DPAs).
Third-party providers utilized include: RAIT ON S.A., TELECROFT S.A., ATCOM SINGLE-MEMBER S.A., WOLT TECHNOLOGIES GREECE FOOD SERVICES S.A., etc. Access may also be granted to:
External accounting, legal, general consulting, IT, computerized systems, website, and occupational safety/health partners.
Research and/or advertising partners (if consent has been provided).
Lawyers, judicial bailiffs, or other persons necessary for handling legal claims.
Public services, administrative, judicial, supervisory, and regulatory authorities where required by law.
Unauthorized access, including by employees, is strictly prohibited. Data is never transferred outside the EU/EEA, as all servers are located within the EU/EEA.
8. Why We Use Your Data & Legal Bases for Processing (Article 6(1) GDPR)
The Company collects, maintains, and processes only the minimum necessary personal data for the following purposes and legal bases:
5.1. General Services & Operational Purposes
Full Access to Website Services & Order Execution
Purpose: Full access to website services (Contact Form/newsletters) and execution of menu orders (via website, app, social media) to provide products and services to you.
Legal Basis:
Article 6(1)(b) GDPR: Conclusion and execution of the sales and delivery contract, or—upon explicit request—taking pre-contractual steps.
Auxiliarily Article 6(1)(f) GDPR: Company’s legitimate interest to facilitate the user in future orders and ensure smooth platform operation.
Execution of Goody’s Product Orders
Purpose: Execution of Goody’s menu product orders to deliver products and services to you.
Legal Basis:
Article 6(1)(b) GDPR: Contract conclusion/execution or pre-contractual measures.
Payment & Financial Transaction Management
Purpose: Processing payments and managing financial transactions.
Legal Basis:
Article 6(1)(b) GDPR: Contract execution and order payment processing.
Article 6(1)(c) GDPR: Compliance with legal obligations under tax and e-commerce legislation regarding issuance and keeping of records.
Direct Marketing, Promotional Actions & Newsletter
Purpose: Sending informational/advertising material, contests, and periodic emails to newsletter subscribers. Unsubscribe options are provided via an unsubscribe link, email to info@goodys.gr, or account settings.
Legal Basis:
Article 6(1)(a) GDPR: User's explicit consent.
Profiling & Personalization
Purpose: Profiling upon consent to personalize services and products.
Legal Basis:
Article 6(1)(a) GDPR: Explicit consent / Article 6(1)(f) GDPR: Legitimate interest for commercial development and optimization.
Statistical Analysis & Personalized Offers
Purpose: Statistical analysis to create and provide personalized offers.
Legal Basis:
Article 6(1)(a) GDPR (where required) / Article 6(1)(f) GDPR: Legitimate interest.
Management & Response to Communication Requests
Purpose: Managing and responding to communication requests (e.g., via website contact form).
Legal Basis:
Article 6(1)(b) GDPR: Pre-contractual steps or customer service.
Auxiliarily Article 6(1)(f) GDPR: Legitimate interest for effective communication and customer care.
Compliance with Legal Obligations
Purpose: Compliance with national/European legislation (including data protection laws).
Legal Basis:
Article 6(1)(c) GDPR: Legal compliance.
Establishment, Exercise, or Defense of Legal Claims
Purpose: Protection of company rights and defense against judicial/extrajudicial claims.
Legal Basis:
Article 6(1)(f) GDPR: Legitimate interest.
5.2. ALL STAR CLUB Loyalty Program Purposes
Granting and Redeeming Points
Purpose: Recording purchases, collecting points, and awarding program privileges and vouchers.
Legal Basis: Article 6(1)(b) GDPR (Execution of program participation contract).
Direct Marketing & Program Promotions
Purpose: Contests and informative messages regarding new products and general offers.
Legal Basis: Article 6(1)(a) GDPR (Explicit consent).
Profiling & Statistical Analysis for Members
Purpose: Profiling and statistics for service personalization and targeted offers exclusively for members via optional questionnaire completion (missions) and preferences. Automated actions based on user behavior (e.g., second order, inactivity).
Legal Basis: Article 6(1)(a) GDPR (Consent) / Article 6(1)(f) GDPR (Legitimate interest for program development).
9. How Long Do We Keep Your Personal Data?
Statutory Obligations: Retained for as long as required by relevant laws (e.g., tax, market regulations).
Order Execution: Retained for the period strictly necessary for order fulfillment, invoicing, complaint resolution, and legal claims.
Marketing Activities: Retained until consent is withdrawn and up to 2 years, after which re-consent is requested. Withdrawal does not affect lawfulness prior to withdrawal.
ALL STAR CLUB Program: Retained for the duration of membership. If a user deletes their account via www.goodys.com ("My Account" -> "Personal Details" -> deletion button) or remains inactive for 5 years, data is deleted unless required for legal claims.
10. Guarantees for Data Protection
We implement adequate physical, technical, and organizational measures (such as access limitations to authorized personnel only, IT security monitoring, minimal data processing systems, and secure deletion procedures) to protect data from loss, alteration, or unlawful processing.
11. Your Rights
Under the GDPR, you possess the following rights:
Right of Access (Article 15 GDPR): Know if we process your data and access them, including a free copy.
Right to Rectification (Article 16 GDPR): Correct inaccurate or complete incomplete data.
Right to Erasure / "Right to be Forgotten" (Article 17 GDPR): Request data deletion under legal conditions.
Right to Restriction of Processing (Article 18 GDPR): Request suspension or limitation of processing.
Right to Data Portability (Article 20 GDPR): Receive data provided via consent in a portable format.
Right to Object (Article 21 GDPR): Object to processing based on legitimate interest.
Right to Withdraw Consent (Article 7(3) GDPR): Withdraw consent at any time without affecting past processing lawfulness.
Right to Lodge a Complaint (Article 77 GDPR): File a complaint with the Hellenic Data Protection Authority (HDPA / www.dpa.gr).
Responses are provided within one month, extendable for complex requests.
12. Transfer of Personal Data Outside the EU
Data collected via the website, application, and program are stored on servers within the EU/EEA and are not transferred to third countries outside the EU.
13. Links to Other Websites
Our website may contain links to third-party sites. The company bears no responsibility for their privacy practices.
14. Use of Cookies
We use cookies for technical operation, navigation, and statistics. Refer to the Cookies Policy at https://www.goodys.com/cookies/ for details.
15. How to Contact Us
Website Contact Form: Available online.
Email: info@goodys.com
Phone: 2169392900
Data Protection Officer (DPO): dpo@evergood.group
Hellenic Data Protection Authority (HDPA): www.dpa.gr, Tel: 2106475600, Email: contact@dpa.gr
16. Version Information – Changes and Updates
Last updated on October 7, 2026. Modifications take effect immediately upon posting on the Website.
1. Preamble
The company under the trade name "EVERGOOD Μονοπρόσωπη Ανώνυμη Εταιρεία Α.Ε.", with the distinctive title "GOODY’S" and registered seat at Spata, Attica, Athens International Airport "EL. VENIZELOS", Building 14B, Postal Code 19019 (hereinafter the "Company"), acting as the Data Controller, is subject to all obligations and commitments arising from data protection legislation, including the General Data Protection Regulation (EU) 2016/679 (hereinafter the "GDPR") and Law 4624/2019 (hereinafter the "PD Legislation").
For the Company, respect for and protection of your personal data is an absolute commitment. We understand and take seriously the fact that you are aware of and interested in your personal data.
This Privacy Policy describes the personal data that the Company collects and processes in the context of operating the website www.goodys.com (hereinafter the "Website"), the mobile application "Goody’s app" (hereinafter the "Application"), and the loyalty program "All Star Club" (hereinafter the "Program"), the way we use and protect them, the legal bases for processing, as well as your rights and choices. Its purpose is to inform you about the company's policy regarding the personal data you provide to us, so that you know the purpose of our processing, the category of recipients, and the procedures you can follow to exercise your legal rights.
Recognizing its ongoing responsibility to protect your personal data as a Data Controller processing them lawfully, the Company has implemented all technical and organizational measures based in particular on the principles of proportionality, purpose limitation, storage limitation, and data minimization, exclusively for the purpose for which they were collected and solely for the duration of the respective processing purpose, ensuring that your personal data remain completely secure.
We recognize that data protection is an ongoing responsibility and consequently will update and amend this Policy from time to time to remain fully compliant with the law. Please visit our website www.goodys.com periodically to ensure you are informed of and satisfied with any changes. In case of doubt regarding any term of this privacy statement, you can contact us via e-mail at info@goodys.com.
We would also like to assure you that the company does not process personal data concerning minors under the age of 18.
The Company has appointed Mr. Emmanouil Laskaridis as Data Protection Officer, with contact email dpo@evergood.group.
2. Basic Processing Principles
The processing of personal data is carried out in accordance with the data protection principles set out in Article 5 of the GDPR. All policies and procedures are designed to ensure compliance with these principles.
Personal data shall be processed lawfully, fairly, and in a transparent manner in relation to the data subject (lawfulness, fairness, and transparency).
Personal data shall be collected for specified, explicit, and legitimate purposes and not further processed in a manner that is incompatible with those purposes.
Personal data shall be adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed (data minimization).
Every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay (accuracy).
Personal data shall be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed (storage limitation).
Personal data shall be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organizational measures (integrity and confidentiality).
The controller shall be responsible for, and be able to demonstrate compliance with, the core processing principles (accountability).
3. Who We Are
The company operates in the mass catering market and is the largest catering chain in Greece, with stores and a presence abroad as well. Our goal is to offer our services to consumers either through our store network, which operates under a franchise agreement, and/or online via the website goodys.com, or through the Goody’s app or in-store applications.
4. What Personal Data We Collect About You
The provision of the following personal data to the company is in no way mandatory; however, the failure to provide certain of them, detailed below, will make it impossible to provide our catering services to you, as well as your participation in the ALL STAR CLUB loyalty and reward program. This means that you voluntarily provide us each time with those personal data that are minimally necessary for the proper and effective provision by the company of the specific service you wish to receive, mainly regarding the execution of your product orders and your participation in the ALL STAR CLUB loyalty and reward program. Conversely, the failure to provide other, non-mandatory personal data, also listed below, cannot in any way affect the seamless provision of our services by us.
4.1. Delivery / Take Away Catering Service
For delivery/take away services through our stores and/or online via goodys.com, the Goody's app, or in-store applications, we process the following personal data:
Full Name: Collected for the needs of executing Goody's menu product orders from our store network.
Postal Address: Collected for delivery and order completion purposes.
Email Address: Collected for order confirmation. Website Guests' email addresses are collected solely for sending the order receipt requested through the website.
Contact Phone Numbers: Collected to provide better and faster services until order completion, including order confirmation.
Invoicing Data: Collected when invoicing is requested (for sole proprietorships), including Tax Identification Number (AFM), Tax Office (DOY), profession, address, etc.
Facebook ID / Gmail: If a customer chooses to log in to the online ordering service (goodys.com, goodys app) using their Facebook or Gmail account, the user's email address is obtained.
Preferences & History Information: Following prior explicit consent, we collect information regarding purchases made at our stores via goodys.com and received offers, to facilitate future order selections.
Credit or Debit Card Information: Collected mandatorily if users/guests choose to prepay or pay upon delivery using a credit or debit card. Card details are requested at checkout and used exclusively for electronic transmission via EveryPay's secure environment to complete the payment. Goody’s does not store any credit/debit card details in its electronic systems or physical archives. Cardholder verification may require transferring card data to a third-party partner of EveryPay.
4.2. ALL STAR CLUB Loyalty & Reward Program
For registration and participation in the ALL STAR CLUB program, we collect:
Registration & Basic Data: Full name, mobile phone number, email address, gender, and date of birth, alongside purchase history.
Transaction Data: Information on purchases made at stores or online channels (goodys.com, app, in-store apps) using the membership number, to enable point collection and reward/voucher allocation.
Profiling: Upon registration, users consent to profile analysis for custom audience categorization. Users are asked during their first login on the Website/Application to complete a personal details questionnaire (date of birth, gender) and state preferences to earn stars/points and receive personalized news and offers.
4.3. Website Contact Form & Inquiries
For the www.goodys.com service, we collect customers' names, contact phones, and email addresses to manage inquiries submitted via the website's contact form. Any further data voluntarily submitted will be kept for better and faster request handling. The Company does not use email contents, chats, or other personal files for advertising targeting.
Sensitive Data: We do not process sensitive personal data within the context of our website services and content.
Minors: The company does not knowingly process personal data of minors under 18 years of age. If notified of data collection from a minor under 18 without parental consent, the company will take appropriate measures to delete such data.
5. How We Collect Your Personal Data
We collect your personal data when you express interest in our services, make purchases from our e-shop or stores, when we directly provide services to you, or when you input data online via our website, the Goody's app, or register for our newsletter. For the ALL STAR CLUB program, data is collected when you register and input your details for that purpose.
6. How We Process Data (Article 4(2) GDPR)
Processing includes collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission to authorized persons/partners, restriction, erasure, or destruction, in accordance with Article 4(2) GDPR. Processing is conducted primarily via automated (electronic) means and secondarily via non-automated (paper) means under strict security procedures.
7. Who Else is a Recipient of Your Personal Data?
The company does not transfer, disclose, or assign your personal data to third-party companies or external providers, except for specialized partners supporting our website and services who act as Processors on our behalf and are bound by Data Processing Agreements (DPAs).
Third-party providers utilized include: RAIT ON S.A., TELECROFT S.A., ATCOM SINGLE-MEMBER S.A., WOLT TECHNOLOGIES GREECE FOOD SERVICES S.A., etc. Access may also be granted to:
External accounting, legal, general consulting, IT, computerized systems, website, and occupational safety/health partners.
Research and/or advertising partners (if consent has been provided).
Lawyers, judicial bailiffs, or other persons necessary for handling legal claims.
Public services, administrative, judicial, supervisory, and regulatory authorities where required by law.
Unauthorized access, including by employees, is strictly prohibited. Data is never transferred outside the EU/EEA, as all servers are located within the EU/EEA.
8. Why We Use Your Data & Legal Bases for Processing (Article 6(1) GDPR)
The Company collects, maintains, and processes only the minimum necessary personal data for the following purposes and legal bases:
5.1. General Services & Operational Purposes
Full Access to Website Services & Order Execution
Purpose: Full access to website services (Contact Form/newsletters) and execution of menu orders (via website, app, social media) to provide products and services to you.
Legal Basis:
Article 6(1)(b) GDPR: Conclusion and execution of the sales and delivery contract, or—upon explicit request—taking pre-contractual steps.
Auxiliarily Article 6(1)(f) GDPR: Company’s legitimate interest to facilitate the user in future orders and ensure smooth platform operation.
Execution of Goody’s Product Orders
Purpose: Execution of Goody’s menu product orders to deliver products and services to you.
Legal Basis:
Article 6(1)(b) GDPR: Contract conclusion/execution or pre-contractual measures.
Payment & Financial Transaction Management
Purpose: Processing payments and managing financial transactions.
Legal Basis:
Article 6(1)(b) GDPR: Contract execution and order payment processing.
Article 6(1)(c) GDPR: Compliance with legal obligations under tax and e-commerce legislation regarding issuance and keeping of records.
Direct Marketing, Promotional Actions & Newsletter
Purpose: Sending informational/advertising material, contests, and periodic emails to newsletter subscribers. Unsubscribe options are provided via an unsubscribe link, email to info@goodys.gr, or account settings.
Legal Basis:
Article 6(1)(a) GDPR: User's explicit consent.
Profiling & Personalization
Purpose: Profiling upon consent to personalize services and products.
Legal Basis:
Article 6(1)(a) GDPR: Explicit consent / Article 6(1)(f) GDPR: Legitimate interest for commercial development and optimization.
Statistical Analysis & Personalized Offers
Purpose: Statistical analysis to create and provide personalized offers.
Legal Basis:
Article 6(1)(a) GDPR (where required) / Article 6(1)(f) GDPR: Legitimate interest.
Management & Response to Communication Requests
Purpose: Managing and responding to communication requests (e.g., via website contact form).
Legal Basis:
Article 6(1)(b) GDPR: Pre-contractual steps or customer service.
Auxiliarily Article 6(1)(f) GDPR: Legitimate interest for effective communication and customer care.
Compliance with Legal Obligations
Purpose: Compliance with national/European legislation (including data protection laws).
Legal Basis:
Article 6(1)(c) GDPR: Legal compliance.
Establishment, Exercise, or Defense of Legal Claims
Purpose: Protection of company rights and defense against judicial/extrajudicial claims.
Legal Basis:
Article 6(1)(f) GDPR: Legitimate interest.
5.2. ALL STAR CLUB Loyalty Program Purposes
Granting and Redeeming Points
Purpose: Recording purchases, collecting points, and awarding program privileges and vouchers.
Legal Basis: Article 6(1)(b) GDPR (Execution of program participation contract).
Direct Marketing & Program Promotions
Purpose: Contests and informative messages regarding new products and general offers.
Legal Basis: Article 6(1)(a) GDPR (Explicit consent).
Profiling & Statistical Analysis for Members
Purpose: Profiling and statistics for service personalization and targeted offers exclusively for members via optional questionnaire completion (missions) and preferences. Automated actions based on user behavior (e.g., second order, inactivity).
Legal Basis: Article 6(1)(a) GDPR (Consent) / Article 6(1)(f) GDPR (Legitimate interest for program development).
9. How Long Do We Keep Your Personal Data?
Statutory Obligations: Retained for as long as required by relevant laws (e.g., tax, market regulations).
Order Execution: Retained for the period strictly necessary for order fulfillment, invoicing, complaint resolution, and legal claims.
Marketing Activities: Retained until consent is withdrawn and up to 2 years, after which re-consent is requested. Withdrawal does not affect lawfulness prior to withdrawal.
ALL STAR CLUB Program: Retained for the duration of membership. If a user deletes their account via www.goodys.com ("My Account" -> "Personal Details" -> deletion button) or remains inactive for 5 years, data is deleted unless required for legal claims.
10. Guarantees for Data Protection
We implement adequate physical, technical, and organizational measures (such as access limitations to authorized personnel only, IT security monitoring, minimal data processing systems, and secure deletion procedures) to protect data from loss, alteration, or unlawful processing.
11. Your Rights
Under the GDPR, you possess the following rights:
Right of Access (Article 15 GDPR): Know if we process your data and access them, including a free copy.
Right to Rectification (Article 16 GDPR): Correct inaccurate or complete incomplete data.
Right to Erasure / "Right to be Forgotten" (Article 17 GDPR): Request data deletion under legal conditions.
Right to Restriction of Processing (Article 18 GDPR): Request suspension or limitation of processing.
Right to Data Portability (Article 20 GDPR): Receive data provided via consent in a portable format.
Right to Object (Article 21 GDPR): Object to processing based on legitimate interest.
Right to Withdraw Consent (Article 7(3) GDPR): Withdraw consent at any time without affecting past processing lawfulness.
Right to Lodge a Complaint (Article 77 GDPR): File a complaint with the Hellenic Data Protection Authority (HDPA / www.dpa.gr).
Responses are provided within one month, extendable for complex requests.
12. Transfer of Personal Data Outside the EU
Data collected via the website, application, and program are stored on servers within the EU/EEA and are not transferred to third countries outside the EU.
13. Links to Other Websites
Our website may contain links to third-party sites. The company bears no responsibility for their privacy practices.
14. Use of Cookies
We use cookies for technical operation, navigation, and statistics. Refer to the Cookies Policy at https://www.goodys.com/cookies/ for details.
15. How to Contact Us
Website Contact Form: Available online.
Email: info@goodys.com
Phone: 2169392900
Data Protection Officer (DPO): dpo@evergood.group
Hellenic Data Protection Authority (HDPA): www.dpa.gr, Tel: 2106475600, Email: contact@dpa.gr
16. Version Information – Changes and Updates
Last updated on October 7, 2026. Modifications take effect immediately upon posting on the Website.