Privacy Policy
How we collect, use and protect your personal data when you visit this site or book a table.
1. Data controller
- Legal name: ⟨REGISTERED BUSINESS NAME⟩
- Trading as: Insta.mam Meze Bar
- Address: Lagadikia, Thessaloniki 570 20, Greece
- VAT (ΑΦΜ): ⟨VAT NUMBER⟩
- Company register (ΓΕΜΗ): ⟨GEMI NUMBER⟩
- Phone: +30 23930 23176
- Email: teftsispero@gmail.com
No Data Protection Officer has been appointed; the thresholds in Article 37 GDPR are not met.
2. What we collect
2.1 Bookings
This website has no booking form and collects no personal data from you. You book by phone or by message on Instagram, and the details you give us (name, phone number, date, time, number of people) are used only to hold your table.
Messages on Instagram are handled by Meta Platforms under Instagram's own privacy policy. Please do not send health information there; if you have an allergy, tell us by phone.
2.2 Server logs
Our host automatically records technical data for each request: IP address, timestamp, page requested and browser type. These are used only for security and reliability and are not linked to your identity.
2.3 Cookies and trackers
This website uses no cookies. Nothing is stored on your device — no cookies, no localStorage, no sessionStorage. There is no Google Analytics, no Facebook Pixel and no advertising tracker of any kind. That is why you will not see a consent banner: there is nothing to consent to.
Fonts are served from our own server rather than a third-party CDN, so your IP address is not disclosed to anyone else simply by browsing.
3. Legal basis
| Purpose | Legal basis |
|---|---|
| Handling your booking | Art. 6(1)(b) GDPR — steps taken at your request before entering a contract |
| Site security and operation | Art. 6(1)(f) GDPR — legitimate interest in protecting the service |
4. Retention
- Booking details (taken by phone or message): deleted within 30 days of the booking date.
- Server logs: held by the host for a limited period, then automatically deleted.
- Tax records (where issued): retained for the period required by Greek tax law.
5. Processors
We do not sell or rent data. We use:
| Provider | Role | Where data lives | Transfer outside EU |
|---|---|---|---|
| Supabase | Menu and opening-hours database — holds no visitor data | Frankfurt, Germany (EU) | No |
| Vercel Inc. | Website hosting | EU servers (Frankfurt) | Standard Contractual Clauses |
6. International transfers
The website holds no personal data to transfer. It has no forms, and its database in Frankfurt, Germany holds only the menu and opening hours.
The site is hosted by Vercel, a US-incorporated company operating EU servers. That relationship is governed by Standard Contractual Clauses. Messages you send us on Instagram fall under Meta's own terms, which may involve transfers outside the EU.
7. Your rights
Under Articles 15–22 GDPR you have the right to:
- Access — find out what data we hold about you.
- Rectification — correct anything inaccurate.
- Erasure — ask us to delete it.
- Restriction of processing.
- Portability — receive your data in a structured format.
- Object to processing based on legitimate interest.
Email teftsispero@gmail.com or call +30 23930 23176. We respond within one month, free of charge.
8. Complaints
If you believe we have mishandled your data you may complain to the Hellenic Data Protection Authority, 1–3 Kifissias Ave., 115 23 Athens, +30 210 6475600, dpa.gr.
9. Security
The site is served over HTTPS only. It has no forms, no visitor accounts and no passwords, and it stores nothing about the people who visit it.
10. Changes
If how we handle data changes, we will update this page and the date at the top.
This document was prepared as a compliance baseline and is not legal advice. Fill in the ⟨bracketed⟩ values before publishing and, ideally, have a lawyer review it.