Privacy Policy — Basiliko (basiliko.gr)
Effective date: 26 August 2025
Who we are: Basiliko – Naxos Cooking Lessons (“Basiliko”, “we”, “us”, “our”)
Contact: info@basiliko.gr
· +30 2285032761 · Lyrado, Naxos 843 00, Greece
We respect your privacy. This Policy explains what personal data we collect on basiliko.gr, why we collect it, how we use and share it, and your rights under the EU GDPR.
1) Data Controller
Basiliko – Naxos Cooking Lessons
Lyrado, Naxos 843 00, Greece
Email: info@basiliko.gr
· Tel: +30 2285032761
2) What we collect
Contact & Booking details: name, email, phone, preferred date/time, group size, dietary preferences/allergies, free-text messages.
Transactional/admin data: booking confirmations, invoices/receipts, correspondence.
Technical data: IP address, device/browser info, pages viewed, and similar (via cookies or server logs).
Media & social (only if you choose to interact): links to our Instagram page or embedded media may process your IP and browser info.
We do not intentionally collect data from children under 16 without verifiable parental consent.
3) Why we use your data (Legal bases)
To respond to enquiries and manage bookings (Art. 6(1)(b) contract, and/or consent if applicable).
To deliver the class safely (e.g., dietary/allergy notes) (vital interests/legitimate interests).
To send essential service messages (schedule updates, confirmations) (contract/legitimate interests).
To improve our site and services (analytics, security, debugging) (consent for non-essential cookies; legitimate interests for security).
To meet legal obligations (tax/audit/record-keeping) (Art. 6(1)(c)).
Marketing emails are opt-in only; you can withdraw consent at any time.
4) Cookies & analytics
We use cookies that may be:
Strictly necessary (security, load balancing, form submission).
Preferences/functional (remember options you choose).
Analytics (optional, only with your consent) to understand traffic and improve the site (e.g., aggregated stats).
If enabled, analytics providers may process truncated IPs and set cookies; you can withdraw consent via the cookie banner or your browser settings.
You can manage cookies in your browser at any time. Blocking some cookies may affect site functionality.
5) Sharing your data
We share personal data only with:
Service providers acting on our instructions (website host, email and form providers, analytics, IT/security).
Payment processors (if you complete an online payment via a third party) — they process your payment data directly.
Authorities where required by law or to protect our legal rights.
We do not sell your personal data.
6) International transfers
Where suppliers process data outside the EEA/UK, we rely on GDPR-approved safeguards (e.g., Standard Contractual Clauses) and vendor assessments.
7) Retention
We keep data only as long as necessary:
Enquiries (no booking): up to 18 months.
Bookings/records: typically 6 years (tax/audit).
Server logs & security data: up to 12 months.
If legal claims arise, we may retain relevant data longer.
8) Your rights (GDPR)
You have the right to access, rectify, erase, restrict, object, and port your data, and to withdraw consent at any time (without affecting prior lawful processing).
To exercise your rights, email info@basiliko.gr
.
You also have the right to lodge a complaint with your local supervisory authority (in Greece: the Hellenic Data Protection Authority).
9) Security
We use reasonable technical and organizational measures (HTTPS/TLS, access controls, backups) to protect personal data. No method is 100% secure, but we work to safeguard your information.
10) Third-party links & social media
Links to third-party sites (e.g., Instagram) have their own privacy practices. Please review those policies; we are not responsible for their content or processing.
11) Contact us
Questions or requests about this Policy or your data?
Email: info@basiliko.gr
· Tel: +30 2285032761 · Address: Lyrado, Naxos 843 00, Greece
12) Updates to this Policy
We may update this Policy from time to time. We will post the latest version on this page with an updated “Effective date”.
