Privacy policy

PRIVACY POLICY — MENU ME...NOU Last updated: 2 October 2026 English translation for information. The Greek text is the reference version, without limiting your statutory rights. 1. Data controller For restaurant services, the controller is ΕΛΕΝΗ ΕΛΕΥΘΕΡΙΑΔΟΥ ΚΑΙ ΣΙΑ Ε Ε, Greek VAT number 802604917, ΠΑΠΑΝΑΣΤΑΣΙΟΥ 87Δ, 54453 ΘΕΣΣΑΛΟΝΙΚΗ, Greece. Questions and rights requests: menumenou@gmail.com or 2310941265. This notice covers menumenou.gr, menumenou.2bite.gr and restaurant services offered through them. 2. Data used • Reservations: name, telephone, email if supplied, date and time, party size, service preferences, booking status and change/cancellation history, and messages you send us. • Table orders, when used: order and table details, amounts, fulfilment status and information required for lawful receipts/invoices. Account information is used if you choose registration/login; the current guest booking process does not require an account. • Communications: requests, complaints and information needed to respond. • Technical information: IP address, device/browser type, request time and details, security/error events. Saving a cookie choice records the choice, time, relevant page, IP address and browser information to document the choice. Do not submit card details, passwords, identity documents or detailed health information in free-text fields. Discuss allergies or special requirements with staff and share only necessary information. Any required recording of health data needs a separate appropriate legal basis and notice; these terms are not blanket consent to such recording. 3. Purposes and legal bases Reservations, orders, changes and necessary service communications are processed to enter into or perform the service you request (GDPR Article 6(1)(b)). Booking confirmations and reminders are service messages, distinct from advertising campaigns. Mandatory tax records are processed to comply with legal obligations (Article 6(1)(c)). Abuse prevention, security, complaint investigation and legal claims rely, where applicable, on legitimate interests in safe operation and protection of the business, balanced against your rights (Article 6(1)(f)). Optional analytics/advertising cookies and marketing communications require the relevant separate consent where prescribed (Article 6(1)(a) and electronic communications law). Restaurant email marketing is currently disabled. Making a booking does not automatically subscribe you to an advertising list. Required fields are marked in the form. Without necessary booking/contact details we may be unable to provide the service. Declining optional marketing does not prevent a reservation. 4. Recipients Authorised staff and necessary service providers receive data for their respective functions: the 2bite platform, hosting/security/storage infrastructure and confirmation/reminder delivery services. Providers processing data on the restaurant's behalf must be bound by the required contractual data protection obligations. Separate platform account services are also covered by the platform's own privacy information. Tax records are shared where required with competent authorities and authorised accounting/tax service providers. Your booking details are not published to other visitors. Access is limited to the necessary purpose. Online booking currently requests no card preauthorisation. If you use a separate payment service, review information about its specific provider before entering card details. 5. Google Analytics and external services The website integrates Google Analytics through Google Consent Mode. Analytics and marketing choices are transmitted to Google. In the current implementation, Google code loads before a cookie choice, with initial analytics/advertising storage signals set to 'denied'. This connection discloses technical network information to Google and the technology may send cookieless signals. Rejecting cookies therefore does not completely block communication with Google. See the Cookie Policy and https://policies.google.com/privacy. Links to maps, social networks and other websites lead to services with their own privacy notices. Providers processing data outside the EEA require the applicable lawful transfer conditions, such as an applicable adequacy decision or suitable contractual safeguards. Contact us for information on recipients and specific safeguards. International technical providers may also process data outside Greece or the EU. 6. Retention Retention depends on the category and purpose and differs from cookie lifetime. Reservation/service-request retention considers completion of the visit, any outstanding change or complaint and the necessary period for related lawful claims. Tax records are retained for statutory periods and longer only when required by a lawful outstanding matter. Account retention considers active use, deletion requests and mandatory exceptions. Cookie-choice evidence retention considers the duration of the choice and the need to demonstrate compliance. Security-log retention considers specific incident investigation and proportionality. You may request the applicable period for a particular category. 7. Rights and requests Subject to legal conditions, you may request access, correction, erasure, restriction and portability, and object to legitimate-interest processing. You may withdraw consent at any time without affecting previous lawful processing. Use 'Cookie settings' to change cookie choices and menumenou@gmail.com for other requests. Proportionate identity verification may be needed without unnecessary documents. The normal response period is one month; any lawful extension will be explained. Erasure does not remove mandatory retention of tax records or information necessary for an outstanding lawful claim. You may complain to the Hellenic Data Protection Authority: https://www.dpa.gr/. 8. Security and updates Booking management links are personal; do not publish them. No transmission or storage method guarantees absolute security. Availability confirmation is not used as a decision with legal or similarly significant effects based solely on automated processing. This notice is reviewed when features or providers change; the update date appears above.