Privacy Policy

The data controller for this website is:

We collect personal data only when you voluntarily provide it through our website:

• Contact form: name, email address, message content.
• Reservation form: name, email address, phone number, preferred date and time, number of guests, and any special requests.

We do not collect data automatically (no analytics cookies, no tracking pixels) unless you accept optional cookies via the cookie notice.

Data submitted through the contact and reservation forms is used solely to:

• Respond to your enquiry.
• Confirm and manage your table reservation.

We do not use your data for marketing, profiling, or automated decision-making, and we do not sell or share it with third parties.

We process your personal data on the basis of:

• Contractual necessity (Art. 6(1)(b) GDPR) — to fulfil a reservation request.
• Legitimate interests (Art. 6(1)(f) GDPR) — to respond to general enquiries.
• Consent (Art. 6(1)(a) GDPR) — for any optional cookies you accept.

Our website uses the following cookies:

You can withdraw your consent at any time by clearing your browser's local storage or cookies.

This website embeds a Google Maps iframe to display our location. When you load the map, Google may set its own cookies and collect data according to the Google Privacy Policy.

No other third-party analytics or advertising services are used.

Emails and reservation requests received via our contact forms are retained for up to 12 months and then deleted, unless a longer retention period is required by law (e.g. accounting obligations).

Under the GDPR, you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate data.
• Erase your data (“right to be forgotten”).
• Restrict or object to processing.
• Data portability — receive your data in a machine-readable format.
• Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at info@tostekitouproedrou.com. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA).

We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. Continued use of the website after changes constitutes acceptance of the updated policy.