Opera
HomeMenuGalleryAbout
Reserve a Table
+30 697 220 1488
Legal

Privacy Policy

Last updated: May 2, 2025

1. Data Controller

The data controller for this website is Opera Restaurant, located at Leoforos Kallitheas, Faliraki 851 05, Rhodes, Greece.

For any questions or requests regarding your personal data, you may contact us at:

2. Data We Collect

We collect personal data only to the extent necessary to provide our services. The types of data we may collect include:

2.1 Reservation Data

When you make a reservation through our website, we collect your name, email address, phone number, preferred date and time, party size, and any special requests you provide.

2.2 Contact Data

If you contact us via email or phone, we retain the information you provide for the purpose of responding to your inquiry.

2.3 Analytics Data

With your consent, we use Google Analytics 4 to collect anonymized usage data such as pages visited, time on site, browser type, device type, and approximate geographic location (city-level). IP addresses are anonymized before processing.

2.4 Cookies

We use the following types of cookies:

  • Essential cookies: Required for core site functionality (e.g., cookie consent preference stored in localStorage).
  • Analytics cookies: Used by Google Analytics to understand how visitors use our site. These are only set after you provide explicit consent.

3. Legal Basis for Processing

We process your personal data based on the following legal grounds under the General Data Protection Regulation (GDPR):

  • Consent (Art. 6(1)(a) GDPR) — for analytics cookies and marketing communications.
  • Contract performance (Art. 6(1)(b) GDPR) — for processing reservation requests.
  • Legitimate interest (Art. 6(1)(f) GDPR) — for improving our website and services.

4. Third-Party Services

We use the following third-party services that may process your data:

  • Google Analytics 4— web analytics (only with your consent). Data may be transferred to the United States under Google's Standard Contractual Clauses. Google's Privacy Policy
  • Vercel — website hosting. Vercel may process server logs that include IP addresses. Vercel's Privacy Policy
  • Resend — email delivery for reservation confirmations. Resend's Privacy Policy

5. Your Rights Under GDPR

As a data subject in the European Union, you have the following rights:

  • Right of Access (Art. 15) — You may request a copy of the personal data we hold about you.
  • Right to Rectification (Art. 16) — You may request correction of inaccurate data.
  • Right to Erasure(Art. 17) — You may request deletion of your personal data ("right to be forgotten").
  • Right to Restrict Processing (Art. 18) — You may request restriction of processing under certain conditions.
  • Right to Data Portability (Art. 20) — You may request your data in a structured, machine-readable format.
  • Right to Object (Art. 21) — You may object to processing based on legitimate interest.
  • Right to Withdraw Consent (Art. 7(3)) — You may withdraw consent at any time by adjusting your cookie settings via the link in the footer.

To exercise any of these rights, please contact us at lucaslamprianos@hotmail.com. We will respond within 30 days.

6. Data Retention

Reservation data is retained for the duration necessary to fulfill the reservation and for a reasonable period afterwards for record-keeping purposes (up to 12 months). Analytics data is retained according to Google Analytics' default retention settings (14 months). You may request deletion at any time.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted data transmission (HTTPS/TLS), access controls, and regular security reviews.

8. International Data Transfers

Some of our third-party service providers may process data outside the European Economic Area (EEA). When this occurs, we ensure adequate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.

9. Children's Privacy

Our website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

10. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA):

  • Website: www.dpa.gr
  • Address: Kifissias 1-3, 115 23 Athens, Greece
  • Phone: +30 210 647 5600

11. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

12. Contact Us

For any questions about this privacy policy or our data practices, please contact us:

← Back to Home