This Privacy Policy explains how the restaurant IL CASTELLO OE (“we”, “us”) collects, uses and protects your personal data in accordance with the General Data Protection Regulation (GDPR — EU Regulation 2016/679) and Greek Law 4624/2019.
1. Data Controller
The controller of your data is:
| Field | Detail |
|---|---|
| Company name | IL CASTELLO OE |
| Address | Filanthropinon 6, Ioannina 452 21, Greece |
| Contact email | ilcastello.ioannina@gmail.com |
| Phone | +30 694 762 2665 |
| VAT number | 802025919 |
| GEMI number | 168399429000 |
| Tax office | Ioannina |
2. What Data We Collect
We collect only the following data, which you give us voluntarily when you book a table:
- Full name
- Email address
- Phone number
- Preferred booking date and time
- Number of guests
In the event request form (“Book the Venue”) we collect the same details and, optionally, your company name, the type of event and a short message about it.
We do not collect special category data (e.g. health information, allergies, dietary preferences): the booking form has no “special requests” field, and in the events form we ask you not to mention them. If you have special needs, please contact us by phone.
3. Purpose & Legal Basis of Processing
| Purpose | Legal Basis (GDPR) |
|---|---|
| Confirming and managing your table booking | Article 6(1)(b) — performance of a contract |
| Contacting you about booking changes or cancellations | Article 6(1)(b) — performance of a contract |
| Compliance with legal obligations (e.g. tax documents) | Article 6(1)(c) — legal obligation |
We do not use your data for marketing, profiling or automated decision-making.
4. Retention Period
Booking data is deleted automatically 30 days after the date of your visit. If the booking is cancelled or does not take place, the data is deleted within 30 days of the originally booked date. Event request data is deleted 30 days after the date of the event or, if it does not take place, within 30 days of our reply.
Any data needed for tax obligations is kept for the period set by Greek tax law (usually 5 years).
5. Cookies & Tracking
This website is 100% tracker-free.
We do not use tracking cookies, pixels or any third-party analytics tool
(e.g. Google Analytics, Meta Pixel, TikTok Pixel). We do not pass
visitor data to advertising platforms.
The website only uses strictly necessary session cookies for the booking form (Netlify Forms). These do not require consent under Article 5(3) of the ePrivacy Directive.
6. Data Recipients — Third Parties
Your data is not sold and is not shared with third parties for commercial purposes. It may only be passed to:
- Netlify Inc. — website hosting and form processing platform. It acts as a Data Processor under a GDPR-compliant DPA. Data is stored in the EU/EEA.
- Competent public authorities — only where required by law.
7. Your Rights
Under the GDPR (Chapter III), you have the following rights:
Access
The right to receive a copy of your data (Article 15 GDPR).
Rectification
The right to have inaccurate data corrected (Article 16 GDPR).
Erasure
The right to erasure (“right to be forgotten”) (Article 17 GDPR).
Restriction
The right to restrict processing (Article 18 GDPR).
Portability
The right to receive your data in a structured format (Article 20 GDPR).
Objection
The right to object to processing (Article 21 GDPR).
To exercise any of these rights, send a written request to: ilcastello.ioannina@gmail.com. We will reply within 30 calendar days of receiving it.
8. Right to Complain to the HDPA
If you believe that the processing of your data breaches the GDPR or Greek Law 4624/2019, you have the right to lodge a complaint with the supervisory authority:
Hellenic Data Protection Authority (HDPA)
Website: www.dpa.gr
Postal address: Kifisias 1-3, 115 23 Athens
Phone: +30 210 647 5600
Email: contact@dpa.gr
9. Data Security
We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or destruction. Data is transferred only over an encrypted HTTPS/TLS connection.
10. Policy Updates
We may change this Privacy Policy. If we make significant changes, the date at the top of the page will be updated. We recommend checking this page from time to time.