SPICY COMMUNICATION S.A. | www.spicy.gr | Updated 16 October 2026
Last updated: 16 October 2026
At Spicy Communication SA, we recognise and respect the privacy rights of individuals under European Union data protection legislation. This page explains the rights available to individuals under Regulation (EU) 2016/679 (GDPR) and applicable Greek data protection laws. It also provides information about how you can exercise those rights.
Under Article 15 GDPR, you have the right to request confirmation of whether we process personal data concerning you. Where applicable, you may request access to that information and details regarding its processing, including purposes, categories of data, recipients and retention periods.
Under Article 16 GDPR, you may request the correction of inaccurate personal data. You may also request the completion of incomplete personal information, where appropriate.
Under Article 17 GDPR, you may request the deletion of personal data in circumstances specified by law. This right may apply where the data is no longer necessary for its original purpose, where consent has been withdrawn and no other lawful basis applies, or where the processing is unlawful. The right to erasure is not absolute and may be subject to legal exceptions.
Under Article 18 GDPR, you may request that the processing of your personal data be restricted in certain circumstances. For example, this may apply while the accuracy of disputed personal data is being verified.
Under Article 20 GDPR, you may have the right to receive personal data that you have provided to us in a structured, commonly used and machine-readable format. Where technically feasible and legally applicable, you may also request that such data be transmitted directly to another data controller. This right applies only under the conditions specified by the GDPR.
Under Article 21 GDPR, you may object to the processing of your personal data where processing is based on legitimate interests, on grounds relating to your particular situation. We will assess such requests in accordance with applicable law. Where personal data is processed for direct marketing purposes, you have the right to object to that processing at any time.
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn. You may contact us to withdraw consent or use the relevant privacy preference controls where available.
Under Article 22 GDPR, individuals have protections concerning decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects. Where applicable, these protections may include the right to obtain human intervention, express a point of view and contest a decision.
To exercise any of your data protection rights, please contact:
SPICY COMMUNICATION S.A.
Email: info@spicy.gr Please describe your request clearly and provide sufficient information to allow us to identify the relevant personal data. Where reasonably necessary, we may request additional information to verify your identity. We will respond without undue delay and, in principle, within one month of receiving your request. Where permitted by the GDPR, this period may be extended by a further two months due to the complexity or number of requests. We will inform you of any extension and the reasons for it. Requests are generally handled free of charge, subject to the exceptions provided by applicable law.
If you believe that your personal data has been processed in violation of applicable data protection legislation, you have the right to lodge a complaint with a competent supervisory authority. In Greece, the relevant authority is:
Hellenic Data Protection Authority (HDPA)
Website: www.dpa.gr You may also lodge a complaint with another competent supervisory authority in accordance with Article 77 GDPR.
For further details about how Spicy Communication collects, uses and protects personal data, please refer to our Privacy Policy and Cookie Policy.
SPICY COMMUNICATION S.A.
2, Vouliagmenis Avenue
Elliniko, Athens 16777
Greece
Email: info@spicy.gr
Telephone: +30 210 9959600
Where relevant, you may request information about the safeguards applicable to international transfers of your personal data. You also have the right not to be subject to qualifying solely automated decisions under Article 22 GDPR, subject to statutory exceptions. If such decisions are used, applicable information and safeguards must be provided.
You do not need to use a particular form or explain why you are exercising a right. We may ask for proportionate information to confirm identity when we have reasonable doubts. We normally respond within one month; where legally permitted, we may extend by up to two further months and explain the extension within the first month. You can contact the Hellenic Data Protection Authority at www.dpa.gr.
Company contact: SPICY COMMUNICATION S.A. | 2 Vouliagmenis Avenue, 167 77 Elliniko, Athens, Greece | info@spicy.gr | +30 210 9959600