Privacy Policy

The controller for this website is the business operating under the trading name Panorama Restaurant, 4 Iliou St, Kavouri, Vouliagmeni 16671, Greece.

For privacy matters, contact panorama.restaurant@yahoo.com or 210 895 1298.

We collect only data necessary to operate the website and handle requests:

• Contact form: first name, last name, email, phone, subject and message.
• Reservation request: first name, last name, email, phone, party size, date, time, occasion, seating preference and optional notes.
• Technical security data: basic server/access logs such as IP address, date/time, requested URL and browser/user-agent where recorded by the hosting environment for security and technical operation.

We do not request payment-card details through this website.

We process data only to respond to enquiries, handle reservation or event requests, provide customer service, protect the website and comply with legal obligations where applicable.

Reservation and service requests are primarily processed in order to take steps at your request before providing the relevant service. Website security and availability rely on our legitimate interests, subject to your rights. Where consent is required by law — for example for optional external content — it is requested separately.

The online forms are not intended to collect medical information or other special-category data. For serious allergies or medical dietary needs, please contact the restaurant directly before your visit and inform the team on arrival.

Data is accessed only by people who need it to handle your request. Technical providers such as hosting, email and website-support services may process data only to the extent necessary to provide their services.

We do not sell personal data or disclose it for independent third-party advertising purposes.

Some technical providers may process data outside the European Economic Area. Where this occurs, transfers must rely on a lawful GDPR transfer mechanism, such as an adequacy decision or appropriate contractual safeguards.

Google Maps is loaded only if you choose to allow optional external content. Its use is also subject to Google’s terms and privacy policy.

Contact and reservation-form data is kept only for as long as needed to handle the request and, as a general rule, for no longer than 12 months after the relevant communication is completed or the reservation date, unless longer retention is necessary for a legal claim or legal obligation.

Technical logs are retained for a limited period according to hosting security settings and only for as long as needed for technical investigation and website protection.

Depending on the circumstances, GDPR rights include access, rectification, erasure, restriction, data portability and objection. Where processing is based on consent, consent may be withdrawn at any time without affecting processing that was lawful before withdrawal.

To exercise a right, contact panorama.restaurant@yahoo.com. You may also lodge a complaint with the Hellenic Data Protection Authority.

We do not use form data for solely automated decision-making or profiling that produces legal or similarly significant effects.

We use reasonable technical and organisational safeguards, including HTTPS, access controls, form validation and anti-abuse measures. No Internet transmission can be guaranteed to be completely secure.

We may update this policy when website functionality, providers or legal requirements change. The latest update date appears at the end of this page.