Depending on how you interact with the website, we may collect your name, email address, telephone number and any information you choose to include in a message or request sent to us.

Providing your data is voluntary. However, without the necessary details we may be unable to respond to your request.

We may also collect information relating to enquiries concerning products, corporate gifting, events, partnerships or other services where such information is provided through an applicable form or communication channel.

When you visit the website, technical information may also be collected, such as your IP address, device type, operating system, browser, date and time of access, pages of our website you visit, referral source and related usage information. Some of this information may be collected through cookies or similar technologies as described in our Cookie Policy.

We process your personal data for the following purposes, each with its corresponding legal basis:

Handling enquiries and requests (e.g. information on stores and products, corporate gifting, events, partnerships): taking steps at your request prior to entering into a contract or performing a contract (Article 6(1)(b) GDPR). For general enquiries, our legitimate interest in responding to those who contact us and improving our customer service (Article 6(1)(f) GDPR).

Newsletter and marketing communications: your consent (Article 6(1)(a) GDPR and Article 11 of Greek Law 3471/2006). By way of exception, we may send our customers electronic communications about similar products or services without prior consent, with a free and easy option to object in every message (Article 11(3) of Law 3471/2006).

Website operation and security (technical support, prevention of abusive or unlawful use, strictly necessary cookies): our legitimate interest in the secure and uninterrupted operation of the website (Article 6(1)(f) GDPR and Article 4(5) of Law 3471/2006).

Traffic measurement, usage analysis and digital marketing (analytics, advertising measurement and optimization): your consent (Article 6(1)(a) GDPR and Article 4(5) of Law 3471/2006).

Legal compliance and protection of our rights (e.g. requests from authorities, data-subject requests, legal claims): compliance with legal obligations (Article 6(1)(c) GDPR) and our legitimate interest in establishing, exercising or defending legal claims (Article 6(1)(f) GDPR).

Where we rely on legitimate interests, we ensure that they are not overridden by your rights and freedoms. You may object to such processing as described in Section 8.

Where you subscribe to our newsletter, we use your email address and any additional information you provide to send communications concerning Ladurée Greece.

You may withdraw your consent at any time by using the unsubscribe link included in each marketing email or by contacting [email protected]

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

We may use CRM and form-management systems, including HubSpot, to manage enquiries, contacts and, where applicable, consent and marketing communications.

Information submitted through such forms may therefore be stored and processed through the relevant platform solely for the purposes for which it was collected and in accordance with your choices.

We use strictly necessary cookies for the essential operation of the website.

Other technologies, including analytics and advertising or measurement technologies, are activated only with your prior consent, given through our cookie-management mechanism.

This may include services such as Google Analytics, Google Ads and Meta, where these services are enabled and you have selected the relevant cookie category.

Further information is available in our Cookie Policy and through Cookie Settings, where you may also withdraw your consent at any time.

Where necessary, personal data may be disclosed to website hosting, cloud, maintenance and technical-support providers, CRM and email-marketing providers, analytics and advertising providers where the appropriate consent has been obtained, professional advisers and public authorities where disclosure is required by law.

Service providers processing personal data on our behalf are required to comply with the applicable contractual and statutory data-protection requirements.

Certain providers (e.g. Google, Meta, HubSpot) may process data outside the EEA, including the United States. Such transfers rely on a European Commission adequacy decision (such as the EU-U.S. Data Privacy Framework) or on Standard Contractual Clauses (Articles 45–46 GDPR).

We do not sell your personal data.

Subject to the conditions of the GDPR, you have the right to access your personal data, request correction of inaccurate information, request deletion, request restriction of processing and, where applicable, request data portability.

You may also object to processing based on legitimate interests and may object at any time to processing for direct marketing purposes.

Where processing relies on consent, you may withdraw that consent at any time.

Requests may be submitted to [email protected] We may request additional information where necessary solely to verify your identity securely. We will respond within one month, extendable by two further months where necessary.

If you believe that your personal data is being processed in breach of applicable data-protection legislation, you have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

Before lodging a complaint, you may also contact us so that we can examine your request.

We implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, alteration, disclosure or destruction.

However, no transmission or storage system can guarantee absolute security.

We retain personal data only for as long as necessary for the purpose for which it was collected: enquiry data for 6 months after the enquiry is closed, newsletter data until consent is withdrawn, and cookie data as set out in our Cookie Policy, unless longer retention is required by law or for the establishment, exercise or defense of legal claims.

The website may contain links to third-party websites or services. This Privacy Policy does not govern processing carried out by those third parties. We recommend reviewing their respective privacy notices.

We may update this Privacy Policy to reflect changes in the operation of the website, our services or applicable legislation.

The current version will always be made available on this page together with the date of its latest update.

For questions concerning this Privacy Policy or the processing of your personal data, please contact: [email protected]