GDPR
Privacy Policy
What we collect, why, how long we keep it, and how to make us delete it.
We are a fish tavern. We collect as little as we can get away with, and we have never sold a single piece of it.
Who is responsible
The data controller is AlexandroupoliHarbor, Limeniou Embarmonti 14, 68132 Alexandroupoli, Evros, Greece. Company registration and VAT number: [to be completed by the operator]. You can reach us at [email protected] or +30 25510 36492.
What we collect and why
- Reservations. Your name, telephone number, the number of people and anything you tell us about allergies or occasions. We need it to hold the table. Legal basis: performance of a contract.
- The catch board email. Your email address, and nothing else. Legal basis: your consent, which you gave by asking for it and can withdraw with one click.
- Shop orders. Name, delivery address, telephone and email, so a courier can find you. Payment is handled by our payment provider; we never see or store your card details.
- Emails you send us. Whatever is in them, for as long as the conversation is useful.
What we do not do
- We do not sell, rent or share your data with anyone for marketing.
- We do not build a profile of what you eat.
- We do not send you anything you did not ask for.
How long we keep it
- Reservation details: twelve months, so we recognise you next summer.
- Newsletter address: until you unsubscribe, and deleted within seven days after.
- Shop orders: as long as Greek tax law requires us to, which is currently five years.
Who else sees it
Our courier, for shop deliveries. Our email provider, for the catch board. Our payment provider, for payments. Our accountant, for the tax records. Nobody else. Processors outside the EEA, if any, operate under Standard Contractual Clauses.
Your rights
Under the GDPR you may ask us for a copy of your data, ask us to correct it, ask us to delete it, object to how we use it, or ask for it in a portable form. Write to [email protected] and we will answer within thirty days, usually within two.
If we get it wrong, you may complain to the Hellenic Data Protection Authority (Λεωφ. Κηφισίας 1-3, 115 23 Αθήνα, dpa.gr). We would rather you told us first.
Questions about any of this?
Write to [email protected] and Sofia will answer it herself.