1. Data Collection
Ktima Filokalis receives personal data only voluntarily through the contact form (full name, email, phone, event date, event type). We do not maintain our own database: the data is sent by email to the venue via Resend (resend.com) and remains in the venue's email account until manually deleted. If you request an appointment with a specific date and time, that appointment is additionally added as an event to the venue's Google Calendar for internal use. For analytics cookies, see Section 5.
2. Purpose of Processing
The personal data collected is used exclusively to respond to contact requests and provide information about our services. It is not transferred to third parties, sold or used for marketing purposes without your consent.
3. Data Security
We take appropriate technical and organisational measures to protect your personal data from unauthorised access, alteration, leakage or destruction. Your data is stored on secure servers and access is restricted exclusively to authorised personnel.
4. User Rights
In accordance with the General Data Protection Regulation (GDPR), you have the following rights:
- Right of access to your data
- Right to rectification of inaccurate data
- Right to erasure ('right to be forgotten')
- Right to restriction of processing
- Right to data portability
- Right to object to processing
To exercise any of the above rights, contact us at info@ktimafilokalis.gr.
5. Cookies & Analytics
With your explicit consent through the cookie banner, we use Google Analytics 4 and Google Tag Manager to understand site traffic: which pages users visit, time on site, country/city-level location, device type, and traffic source. No personally identifiable information (name, email, etc.) is collected. Analytics cookies are only loaded if you accept them and you can decline, or change your mind any time by clearing your browser cookies. Provider: Google Ireland Limited (policies.google.com/privacy). Data retention: 14 months (GA4 default).