Privacy Policy

Last updated: September 2026

This Privacy Policy explains how Majoli ("we," "us," or "our") collects, uses, and protects personal data when you visit our website https://www.majoli.bar/ (the "Site") or make a reservation with us. We are committed to protecting your privacy in accordance with the EU General Data Protection Regulation (GDPR) and applicable Greek data protection law (Law 4624/2019).

1. Who We Are (Data Controller)

The data controller responsible for your personal data is:

Majoli 85200 Kalymnos, Dodecanese, Greece Email: majoli.kalymnos@gmail.com Phone: +30 697 6516067

If you have any questions about this policy or how we handle your data, please contact us using the details above.

2. What Personal Data We Collect

a) Data you give us directly — via our Reservations form:

  • First name, last name

  • Email address

  • Phone number (including country)

  • Your message (e.g., party size, date/time requested, special requests)

b) Data collected automatically:

  • IP address and browser information, collected by Google reCAPTCHA when you use our reservation form, to help prevent spam and abuse

We do not use embedded maps, externally-hosted fonts, advertising trackers, or analytics/session-recording tools, and we do not process online payments through the Site.

3. How We Use Your Information and Legal Basis

  • Processing your reservation request — Performance of a contract / pre-contractual steps taken at your request

  • Responding to your message — Legitimate interest in customer communication

  • Protecting our form against spam/bots (Google reCAPTCHA) — Legitimate interest in Site security

  • Complying with legal/tax obligations — Legal obligation

4. Cookies and Tracking Technologies

Based on a scan of our Site, the only third-party tool in use is Google reCAPTCHA (provided by Google LLC), which helps protect our reservation form against spam and automated abuse. reCAPTCHA is treated as necessary for basic Site security and functioning, consistent with regulatory guidance, and does not require a separate cookie consent banner.

We do not use Google Maps, Google Fonts, analytics tools, or advertising trackers on this Site. If this changes in the future, we will update this policy and put a cookie consent mechanism in place as needed.

5. Sharing Your Data with Third Parties

We share data with the following recipients:

  • Google LLC — Google reCAPTCHA (spam/abuse prevention)

  • Squarespace, Inc. — our website hosting provider, based in the United States

We do not sell your personal data to third parties, and we do not share it with advertising or analytics companies.

6. International Data Transfers

Google and Squarespace, Inc. (our hosting provider) may process data outside the European Economic Area (EEA), including in the United States. Where this occurs, we rely on appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission, as implemented by these providers.

7. Data Retention

  • Reservation form data (name, email, phone, message): retained for as long as necessary to process your reservation and for up to 12 months afterward for record-keeping purposes, unless you ask us to delete it sooner or a longer period is required by law.

8. Your Rights Under GDPR

As a data subject, you have the right to:

  • Access the personal data we hold about you

  • Rectify inaccurate or incomplete data

  • Erase your data ("right to be forgotten"), subject to legal exceptions

  • Restrict processing in certain circumstances

  • Data portability for data you provided to us

  • Object to processing based on legitimate interest

  • Withdraw consent at any time, where any of our processing is based on consent, without affecting prior lawful processing

To exercise any of these rights, contact us at majoli.kalymnos@gmail.com. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA) (www.dpa.gr) if you believe your data has been mishandled.

9. Children's Privacy

Our Site is not directed at children, and we do not knowingly collect personal data from individuals under 16 without parental consent.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. However, no method of transmission over the internet is 100% secure.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect the most recent changes. We encourage you to review this policy periodically.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

Majoli Email: majoli.kalymnos@gmail.com Phone: +30 697 6516067 Address: 85200 Kalymnos, Dodecanese, Greece