SPICY COMMUNICATION S.A. | www.spicy.gr | Updated 16 October 2026
At Spicy Communication, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how SPICY COMMUNICATION SA collects, processes, stores and protects personal information when you visit www.spicy.gr, contact us or interact with our Website. We process personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR), Greek Law 4624/2019 and other applicable data protection legislation.
The data controller responsible for processing personal data through the Website is:
SPICY COMMUNICATION S.A.
2, Vouliagmenis Avenue
Elliniko, Athens 16777, Greece
Email: info@spicy.gr
Telephone: +30 210 9959600 For privacy-related enquiries or requests concerning your personal data, please contact us using the email address above.
Depending on how you interact with the Website, we may process the following categories of personal data.
When you contact us by email or through any contact functionality made available on the Website, we may collect:
When you access the Website, certain technical information may be processed, such as:
Additional usage information may be collected through analytics or similar technologies where implemented and permitted by applicable law.
The Website may use cookies or similar technologies to support its operation, remember preferences or, where implemented, measure Website performance. Further information is provided in our Cookie Policy.
We process personal data only where an appropriate legal basis applies.
We process contact information to respond to requests, provide information about our services and communicate with prospective or existing clients.
Legal basis: Legitimate interests under Article 6(1)(f) GDPR or, where applicable, steps taken at your request before entering into a contract under Article 6(1)(b).
We may process relevant contact details to maintain professional correspondence and manage business relationships.
Legal basis: Legitimate interests under Article 6(1)(f) GDPR or contractual necessity under Article 6(1)(b), as applicable.
Technical information may be processed to maintain Website functionality, identify security incidents, prevent misuse and protect our systems.
Legal basis: Legitimate interests under Article 6(1)(f) GDPR, subject to applicable legal requirements.
Where optional analytics or tracking technologies are implemented, related personal data may be processed on the basis of consent where required.
Legal basis: Article 6(1)(a) GDPR, where applicable.
We may process information when necessary to comply with applicable legal obligations.
Legal basis: Article 6(1)(c) GDPR.
Personal data may be shared with trusted service providers where necessary for legitimate business or technical purposes. Such providers may include:
Where third parties act as data processors, we take appropriate steps to ensure that relevant contractual and data protection requirements are met. We do not sell personal data.
Where personal data is transferred outside the European Economic Area, we will ensure that an appropriate transfer mechanism or other lawful basis applies. Depending on the circumstances, this may include an adequacy decision issued by the European Commission or appropriate safeguards, such as Standard Contractual Clauses. Further information about relevant safeguards may be requested using our contact details.
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including compliance with applicable legal, accounting or regulatory obligations. Retention periods depend on the nature of the information and the purpose of processing. For example, business correspondence may be retained while an enquiry or professional relationship remains active and for a further period where justified by legitimate business needs or legal obligations. Technical logs are retained according to operational and security requirements. Where consent is the legal basis for processing, withdrawal of consent will be respected, subject to any other applicable lawful grounds for retention.
We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction. These measures are reviewed as appropriate to the nature and risks of the processing. However, no method of electronic transmission or storage can be guaranteed to be completely secure.
Under the GDPR, you may have the right to:
These rights are subject to the conditions and limitations established by applicable law. For more information, please consult our EU Privacy Rights page.
Our Website may include links to third-party websites and social media platforms. We are not responsible for the privacy practices of external services. Visitors should review the privacy policies of third-party platforms before providing personal information.
The Website is intended primarily for a general and professional audience. We do not intentionally collect personal data from children through services specifically directed at them. If we become aware that personal data has been collected unlawfully from a child, we will take appropriate action in accordance with applicable legislation.
We may update this Privacy Policy to reflect changes in legislation, Website functionality or our processing practices. The most recent version will be published on this page with an updated revision date.
For questions about this Privacy Policy or the processing of your personal data, please contact:
SPICY COMMUNICATION S.A.
Email: info@spicy.gr
Telephone: +30 210 9959600
2, Vouliagmenis Avenue
Elliniko, Athens 16777, Greece
If you apply for a role advertised in our News or Careers content, we may process your name, contact details, CV, portfolio, professional history, qualifications, interview communications and other information you choose to submit. We use this information to evaluate your application, communicate with you and manage recruitment. The applicable legal basis is generally steps taken at your request before entering into an employment contract (Article 6(1)(b) GDPR) and, where relevant, our legitimate interests in managing recruitment (Article 6(1)(f)). Specific legal obligations may also apply. Please do not submit special-category personal data unless specifically necessary and requested through an appropriate process. Applicant information should be retained for a documented, proportionate period consistent with actual recruitment practice and legal requirements.
The Website may include YouTube videos, Google Maps content, and Instagram or LinkedIn features. Loading these services may disclose technical identifiers, including IP addresses, to their operators. Non-essential cookies and comparable technologies should not load before any consent required under applicable law. Once you interact with external services, the provider may process information under its own policies. The actual providers, purposes and any international transfers should be verified against the deployed integrations.
Most enquiry and recruitment information comes directly from you. Technical data is generated when you access the Website. Providing contact details is voluntary, but without the information needed to respond we may be unable to process your enquiry; without relevant application information we may be unable to assess an application. No general legal obligation requires you to submit a contact enquiry.
We do not describe the Website as carrying out solely automated decisions producing legal or similarly significant effects. If such processing is introduced, this notice must be updated before deployment and the required information and safeguards provided.
Enquiries and business correspondence are kept while necessary to address the matter and, where justified, for follow-up, dispute management or compliance. Recruitment records are kept for the recruitment process and any further documented, legally justified period. Technical security logs are kept only as long as reasonably needed for security and operations. Exact periods must be aligned with the Company’s approved retention schedule.
A contact enquiry does not automatically subscribe you to marketing. If we introduce newsletters or direct marketing, we will provide a suitable separate notice and use the consent or other lawful basis required by applicable data-protection and electronic-communications law, together with a clear opt-out.
Company contact: SPICY COMMUNICATION S.A. | 2 Vouliagmenis Avenue, 167 77 Elliniko, Athens, Greece | info@spicy.gr | +30 210 9959600