Website Privacy Policy

Effective as of 24/03/2026

Thank you for visiting the website of DOMAINE COSTA LAZARIDI S.A., located at Adrianí, Drama, Postal Code 66150 (hereinafter “estates-costalazaridi.gr”). Before using our website, please read this Privacy Policy carefully.

Introduction

DOMAINE COSTA LAZARIDI S.A., acting as the data controller, informs you about the way we collect and process information concerning you.

Personal data (PD) is any information relating to an identified or identifiable natural person.

The protection of your personal data is very important to DOMAINE COSTA LAZARIDI S.A., which takes appropriate measures when you visit our website.

This Privacy Policy describes the types of information we may collect during your visit to our website and explains how we use this information. When you voluntarily provide personal information such as your name, address, or email address, we treat this information with strict confidentiality. Unless otherwise specified in this Privacy Policy, no personal information is rented, sold, publicly posted, or disclosed to other companies, organizations, or websites.

As stated in the Terms of Use and the Cookies Policy of domaine-lazaridi.gr, the services provided through the website are intended for a general audience, are not directed at children, and do not knowingly collect personal information from individuals under 18 years of age.

This Privacy Policy applies to all users of the website. For any questions or clarifications regarding this Policy, you may contact us at +30 2521 082231 or via email at info@estates-costalazaridi.gr.

What information we collect from you

When you visit domaine-lazaridi.gr, we may collect certain data from you. Some of this data may be personal. This may include browsing history, IP address, screen resolution, browser type, operating system and settings, access times, and referring URLs. If you use a mobile device, we may also collect device identifiers, settings, and location data.

DOMAINE COSTA LAZARIDI S.A. reserves the right to collect non-personal identification information (browser type, computer type, operating system, internet service providers, etc.) and/or monitor IP addresses using cookies. Cookies are small text files stored on your hard drive without accessing documents or files on your device. They are used to facilitate user access to specific services/pages and for statistical purposes. For more information, please refer to our Cookies Policy.

If you wish to contact us through the contact form, we will collect your name and email address.

Data collected during online booking via AnyRoad

When you make an online booking through the AnyRoad platform, we additionally collect the following data: full name, email, phone number, guest details, booking date and time, number of participants, billing information, and optional preference/behavioral information.

Questions & Marketing Consent

Information that may be requested regarding your purchasing habits or how you heard about the tour/tasting experience is collected solely on the basis of your consent (Article 6(1)(a) GDPR). These fields are entirely optional, and failure to provide them does not affect the completion of your booking. You may also be asked to provide optional consent to receive newsletters. This consent is given only if you explicitly choose to do so and may be withdrawn at any time.

How we collect your personal data

We collect your personal data directly from you. You provide your data when you complete the contact form or register for the wine club available on our website.

We also collect personal data when you make an online booking for a tour or tasting through the AnyRoad platform by entering your information into the booking form.

Use and disclosure of personal data

We use your personal data to respond to your requests and communicate with you regarding matters related to your visit or inquiry.

Personal data collected through the website may be disclosed to third-party service providers, such as marketing agencies, advertising partners, and website administrators who support the operation of our business.

For the management of online bookings, we use the AnyRoad platform, which acts as a data processor on our behalf.

AnyRoad may disclose data to payment providers (e.g., Stripe) for the completion of transactions, in accordance with its certifications and the EU–US Data Privacy Framework.

The table below presents the types of personal data we process by processing purpose and legal basis.

Category of Personal DataPurpose of ProcessingLegal Basis
Personal details and contact informationSending newsletters, Wine Club registrationConsent (Art. 6(1)(a))
Device information (browser type, language)Necessary for website functionality
Legitimate interest (Art. 6(1)(f))
Technical information (IP address, logs, location, browser, visit duration, page views)Statistical purposes and website improvementLegitimate interest (Art. 6(1)(f)), Consent (Art. 6(1)(a))

Data storage and international transfers

The data center hosting your personal data is located in Greece. DOMAINE COSTA LAZARIDI S.A. does not transfer personal data outside the EEA.

However, during online bookings via AnyRoad, data may be transferred to servers located in the United States.

AnyRoad participates in the EU–US Data Privacy Framework, recognized by the European Commission as providing an adequate level of protection (Art. 45 GDPR).

Transfers are carried out in accordance with this framework and AnyRoad’s certifications. The Company periodically verifies the provider’s certification status in the DPF registry.

If additional international transfers become necessary, DOMAINE COSTA LAZARIDI S.A. will ensure compliance with applicable data protection laws and implement appropriate safeguards.

Data retention

Retention periods are as follows:

  1. Contact form data: retained for as long as you provide consent and until communication is completed.
  2. Wine Club registration: retained for as long as you remain a member and provide consent.

Για τα δεδομένα που συλλέγονται μέσω της πλατφόρμας AnyRoad στο πλαίσιο ηλεκτρονικών κρατήσεων, ο χρόνος διατήρησης καθορίζεται ως εξής:

  1. Booking details: up to 12 months after the visit, unless included in a tax document, in which case retained for 10 years.
  2. Payment and billing data: retained according to tax and accounting obligations (up to 10 years).
  3. Optional preference/behavioral data: up to 12 months or until consent is withdrawn.

After the applicable retention period, your data is deleted.

Your Rights Regarding the Processing of Your Personal Data

You have the right to obtain information about your personal data that we have stored at any time, in accordance with applicable law and without any charge. We may request proof of your identity before providing you with such data. In certain cases, we may not be able to allow access to specific personal data. For example, if your personal data is related to the personal data of other individuals or if it is retained for legal reasons. In such cases, we will explain the reason why you cannot access this data.

You have the right to request the correction or updating of your personal data, and we will proceed with the immediate correction of such data.

You have the right to request the deletion of your personal data, and we will proceed with its immediate deletion. However, in certain cases where applicable legal and tax obligations require mandatory data retention, deletion may be prohibited. In such cases, we will explain the reason why we cannot delete your personal data and for how long it will be retained.

You have the right to request the cessation of processing of your personal data, and we will proceed with the immediate cessation of such processing. If this is not possible, we will explain the reason why we cannot cease the processing of your personal data.

You have the right to request the restriction of the processing of your personal data, and we will proceed with the immediate restriction of such processing. If this is not possible, we will explain the reason why we cannot restrict the processing of your personal data.

You have the right to request the transfer of your personal data to another entity/organization, and we will proceed with the immediate transfer of such data. However, in certain cases, due to our documented obligations, your request may not be accepted.


If it is proven that a breach of your personal data has occurred on our part, resulting in material or non-material damage to you, you have the right to lodge a complaint with the competent supervisory authority (Hellenic Data Protection Authority).

To exercise the above rights, or if you have questions regarding this Privacy Policy or need assistance in understanding or exercising your privacy choices, please contact our privacy team at info@estates-costalazaridi.gr or write to us at: ADRIANI, DRAMA, P.C. 66150.

Changes to this Privacy Policy

DOMAINE COSTA LAZARIDI S.A. may amend this Privacy Policy. Please check the Effective Date at the top of this Policy to see when it was last updated. Any revision becomes effective upon publication.

If significant changes expand our ability to use personal data already collected, we will notify you and provide you with the option to consent to such future use.