Privacy Policy

Last updated: 29 October 2026

This Privacy Policy explains which personal data we collect through alyssorestaurant.gr, why, how long we keep it and what your rights are, under the EU General Data Protection Regulation 2016/679 (GDPR) and Greek law.

1. Data controller

ΑΛΥΣΣΟ Ε.Ε. (Alysso L.P.), trading as "Alysso Restaurant", VAT no. 802734202, Navarchou Apostoli 11, Psyrri, 105 54 Athens, Greece. Phone: +30 211 005 1089, email: [email protected].

2. What data we collect and why

Booking form

Full name, phone, email, date and time, number of guests and anything you write in the notes. We use them only to manage your booking and to contact you to confirm it. Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).

If you tell us about allergies or dietary needs, we use this information only to prepare your meal correctly, with your explicit consent.

Contact form

First name, last name, email, subject and message, so that we can reply to you. Legal basis: your consent and our legitimate interest in answering our guests' requests.

Newsletter

If you choose it, we use your email and name to send you news and offers from Alysso. Legal basis: your consent (Article 6(1)(a) GDPR), which you can withdraw at any time using the unsubscribe link in every email or by writing to us.

GDPR consent record

For every form submission we record the date, your choices (GDPR acceptance, newsletter) and your IP address, so that we can prove your consent as the law requires.

3. Cookies

• Necessary cookies: for the operation and security of the website and to remember your choice in the cookie banner. They do not require consent.
• Statistics (Google Analytics) and advertising (Google Ads): enabled only if you click "Accept" in the cookie banner. If you click "Decline", they are not stored.

You can change your choice at any time with the "Cookie settings" link at the bottom of every page.

4. Who receives your data

We do not sell your data or give it to third parties for their own purposes. We use trusted providers that process it on our behalf:

• The website hosting provider Contabo GmbH, Germany.
• Zoho, for sending and receiving email.
• Cloudflare, for website security and spam protection of our forms (Turnstile).
• Google, for statistics and advertising, only with your consent.

Where data is transferred outside the European Union, this is done with the safeguards of the GDPR, such as the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.

5. How long we keep your data

• Bookings and messages: up to 12 months from their date.
• Newsletter: until you withdraw your consent.
• GDPR consent records: as long as needed to prove lawful processing, up to 3 years.

6. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal. To exercise your rights, write to us at [email protected]. We will reply within one month.

If you believe that the processing of your data breaches the law, you can lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

7. Security

The website works only over an encrypted connection (HTTPS) and the data is accessible only to authorized persons.

8. Changes

We may update this Policy. The current version is always available on this page.