Privacy Policy

Operator: Agni Perikleous

1. Data controller

The controller of your personal data is Agni Perikleous, registered office: Koning Zwentiboldstraat, 2B (the “controller”). The controller determines the purposes and means of processing personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and applicable national law.

2. Purposes of processing

We process your personal data for the following purposes:

  • Creating and managing bookings
  • Communication about your bookings (confirmations, reminders, changes)
  • Processing payments for services
  • Compliance with legal obligations (accounting, tax regulations)
  • Improving our services and customer experience

3. Legal basis for processing

We process personal data on the following legal bases:

  • Performance of a contract (Art. 6(1)(b) GDPR) — processing is necessary to fulfil your booking
  • Legal obligation (Art. 6(1)(c) GDPR) — e.g. accounting and tax regulations
  • Legitimate interest (Art. 6(1)(f) GDPR) — improving services, fraud prevention
  • Consent (Art. 6(1)(a) GDPR) — where required, e.g. for sending marketing communications

4. Categories of data processed

Within the booking system we may process the following categories of personal data:

  • Identification data (first name, last name)
  • Contact details (email, phone number)
  • Booking data (date, time, type of service, number of people)
  • Payment data (payment method, payment status)
  • Other data provided voluntarily in the booking form

5. Data retention

We keep your personal data for as long as necessary to fulfil the purpose of processing, but no longer than:

  • Booking data: 3 years from the last booking, after which it is automatically anonymised
  • Accounting and tax records: for the period required by applicable accounting and tax legislation. This obligation takes precedence over the right to erasure (Art. 17(3)(b) GDPR). Once the statutory period has expired, the data will be deleted.
  • Customer contact details: up to 1 year from the last activity, then automatically anonymised
  • Marketing consent: until consent is withdrawn

After the retention period, the data will be securely deleted or anonymised. Anonymisation runs automatically once a week.

5b. Processors and data transfers

We use the following processors of personal data to provide our services:

  • Resovu s.r.o. — operator of the booking system (hosting, booking processing)
  • Stripe, Inc. — online payment processing (USA, EU; Standard Contractual Clauses)
  • Resend, Inc. — sending transactional emails (booking confirmations, reminders)
  • Supabase, Inc. — database services (EU region; Standard Contractual Clauses)
  • Vercel, Inc. — web application hosting (USA; Standard Contractual Clauses)

Some data may be transferred to third countries (USA) on the basis of Standard Contractual Clauses under Art. 46(2)(c) GDPR, which ensure an adequate level of protection for your personal data.

5c. Cookies and similar technologies

Our booking pages (profile, booking, gift vouchers) use:

  • Necessary cookies — signing in to the customer account, security, page language and storing your cookie choice. The pages do not work without them, so they need no consent.
  • Map — the location map loads from OpenStreetMap (© OpenStreetMap contributors, OpenStreetMap Foundation, United Kingdom); the map tile provider sees your IP address. The legal basis is our legitimate interest in showing you where to find us.
  • Resovu — the operator of the booking system runs no analytics, session-recording or advertising tools of its own on these pages.

6. Your rights

In connection with the processing of your personal data, you have the following rights:

  • Right of access — you can request information about what data we process about you
  • Right to rectification — you can ask us to correct inaccurate data
  • Right to erasure — you can ask us to delete your data (the “right to be forgotten”)
  • Right to restriction of processing — you can ask us to temporarily restrict processing
  • Right to data portability — you can ask for your data to be transferred to another controller
  • Right to lodge a complaint — you can contact the competent data protection supervisory authority

7. Contact

If you have any questions about the processing of your personal data, please contact us: