Privacy

Data controller

Kyma Estiasi P.C.
VAT no. 000000000, Volos Tax Office
Paralia, Afissos 37010, Pelion, Greece
+30 24230 00000 (sample)
kratiseis@kyma.example

Sample details: Kyma is a fictional taverna. The company name, VAT number, phone and email belong to no one.

The form on this sample site

The booking form here is not connected: when you send it, what you typed stays in your browser and nobody receives it. Only if your browser does not run JavaScript does the form go to Web3Forms, which rejects it because there is no key. What follows describes how the form works once connected.

What we keep from the form

From the booking form: your name, phone number, optionally an email address, and the date, time and number of people. If you write something in the notes field, we keep that too. Nothing else.

If you email or call us directly, we keep only what we need to answer you.

What the server records

The site is hosted on Cloudflare Pages. Like any web server, to send you the page and protect it from attacks, Cloudflare processes your IP address, your browser, the page you asked for and the time. If a page fails to load, your browser may also send Cloudflare a short error report (Network Error Logging), with the page address, the kind of error and your IP address. We keep no logs of our own and run no visitor analytics.

Why, and on what legal basis

Bookings: to hold your table and to tell you if something changes. Legal basis: steps you ask us to take before a contract (Article 6(1)(b) GDPR). We send no marketing messages, and we neither sell nor pass on your details.

Running and securing the site (server records): our legitimate interest in a site that works and is not abused (Article 6(1)(f)).

The map: it loads only when you ask for it with the button (Article 6(1)(a)).

Who else handles it

Cloudflare, Inc.: hosting for the site and for the small function that writes the day's catch board.

Web3Forms: delivers the booking form to our inbox. Nothing is stored in a website database — the site is static and has none.

Our email provider, where the booking message arrives.

OpenStreetMap Foundation: only if you press the button to load the map.

We write the catch board in a Google Sheet; the server reads it, not your browser, so none of your data goes to Google. Fonts and photographs are served by the site itself. Links to Google Maps, Wikimedia Commons and Pexels open their own pages, under their own policies, only if you follow them.

Outside the European Union

Cloudflare and Web3Forms are companies outside the EU, so data may pass through servers outside the EU. These transfers rely on the European Commission's standard contractual clauses (Article 46 GDPR) and, for Cloudflare, also on the EU–US Data Privacy Framework. The OpenStreetMap Foundation is in the United Kingdom, which the EU recognises as protecting data adequately.

How long

We delete the booking message three months after the date you came. Server records are kept briefly by Cloudflare under its own policy, and we do not see them visitor by visitor.

Cookies

The site sets no cookies and writes nothing to your browser's storage (localStorage), which is why there is no consent banner. If you load the map, OpenStreetMap's own policy applies.

The map

The map on the Find us page loads from OpenStreetMap only after you press the button. Until then no request leaves your device for anyone else.

Your rights

You have the right to ask for access to your data, correction, deletion, restriction of processing and portability, and to object (Articles 15 to 22 GDPR). Where the basis is your consent, you can withdraw it at any time.

Ask by phone or email. The law gives us a month; we usually do it the same day — it is one message in an inbox, not a system.

Complaints

If you believe we have not respected your data, you can complain to the Hellenic Data Protection Authority (www.dpa.gr). We would appreciate hearing it from you first.

Children

The booking form is meant for adults. If you are under 15, ask a parent to book the table.

Changes

If anything on this page changes, we will update it and the date at the bottom will change.