PRIVACY POLICY

Last updated: [20 Μαυ 2026]

This Privacy Policy explains how Olistic F&B O.E., with registered address at 107 Andrea Syngrou Avenue, Athens, Greece (“Company”, “we”, “us”, “our”), collects, uses, stores, and protects personal data of visitors and users of amphibian.restaurant (the “Website”).

We respect your privacy and are committed to processing your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), as well as applicable Greek data protection laws.

  1. Data Controller

The data controller responsible for the personal data collected through this Website is:

Olistic F&B O.E.
107 Andrea Syngrou Avenue
Athens, Greece
Email: hello@amphibian.restaurant

For any privacy-related questions or requests, you may contact us using the email address above.

  1. Personal data we collect

Depending on how you use the Website, we may collect the following categories of personal data:

Contact information

When you contact us via our contact form or email:

  • full name
  • email address
  • telephone number (if provided)
  • message content

Reservation data

When you make a reservation through SevenRooms, the following information may be collected:

  • name
  • email address
  • telephone number
  • reservation details
  • reservation date and time
  • number of guests
  • special requests or comments

Reservations are managed through our third-party provider SevenRooms, whose own privacy policy and terms also apply.

Technical and usage data

When you visit the Website, certain technical information may be collected, including:

  • IP address
  • browser type
  • operating system
  • device identifiers
  • referring URLs
  • pages visited
  • time spent on the Website
  • interactions with Website content

This may occur through technologies including:

  • Google Analytics
  • Google Ads
  • Meta Pixel
  • Google Tag Manager
  • cookies and similar tracking technologies
  1. How we use your data

We use personal data for the following purposes:

  • responding to contact requests and enquiries
  • managing and processing reservations
  • sending newsletters and marketing communications
  • improving Website functionality and user experience
  • analysing Website traffic and performance
  • measuring marketing campaign effectiveness
  • maintaining Website security
  • complying with legal obligations
  1. Legal basis for processing

We process your personal data based on the following legal grounds:

Performance of a contract

Where processing is necessary to:

  • manage reservations
  • respond to service-related requests

Consent

Where you have provided consent for:

  • newsletter subscriptions
  • analytics cookies
  • advertising / marketing cookies
  • promotional communications

You may withdraw your consent at any time.

Legitimate interests

Where processing is necessary for our legitimate business interests, including:

  • improving our services
  • ensuring Website security
  • fraud prevention
  • maintaining basic operational functionality

Legal obligation

Where processing is required by law.

  1. Sharing personal data with third parties

We may share personal data with trusted third-party service providers acting on our behalf.

These may include:

SevenRooms

For reservation management services.

Google

For analytics, advertising, and tag management services.

Meta

For advertising measurement and remarketing services.

Hosting and technical service providers

For hosting, maintenance, and Website infrastructure support.

All third parties process personal data in accordance with applicable contractual and legal obligations.

  1. International data transfers

Some of our service providers may process personal data outside the European Economic Area, including in the United States.

Where this occurs, appropriate safeguards are implemented in accordance with applicable data protection laws, including:

  • Standard Contractual Clauses (SCCs)
  • adequacy mechanisms where applicable
  1. Data retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy.

Indicative retention periods:

Contact enquiries: up to 12 months
Reservation data: according to business and legal requirements
Newsletter data: until consent is withdrawn / unsubscribe
Analytics data: according to the retention settings of the relevant tools

  1. Your rights

Under GDPR, you have the right to:

  • access your personal data
  • request correction of inaccurate data
  • request deletion of your data
  • request restriction of processing
  • object to processing
  • request data portability
  • withdraw consent at any time
  • lodge a complaint with a supervisory authority
  1. Supervisory authority

You have the right to lodge a complaint with the competent supervisory authority:

Hellenic Data Protection Authority (HDPA)
https://www.dpa.gr

  1. Data security

We implement appropriate technical and organisational measures to protect personal data against:

  • unauthorised access
  • accidental loss
  • alteration
  • unlawful disclosure

However, no online transmission or storage system can be guaranteed to be completely secure.

  1. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

Any changes will be published on this page with an updated effective date.

  1. Contact us

For any privacy-related enquiries:

Olistic F&B O.E.
107 Andrea Syngrou Avenue
Athens, Greece
Email: hello@amphibian.restaurant