This policy describes what happens to your personal data when you visit ilianamalihinwinery.gr.
The short version: this website keeps no record of you. It has no database, uses no analytics, and sets no cookies of its own. What you type into the booking form reaches us as an email and stays in our inbox — nowhere else.
We process personal data in line with the General Data Protection Regulation (GDPR, EU Regulation 2016/679) and applicable Greek law.
What data we collect
Only what you give us when you get in touch:
- Your name
- Your email address and, optionally, a phone number
- The content of your message: visit date, group size and anything else you choose to write
We do not ask for and do not need payment details. We do not sell wine through this website.
How it reaches us
This is the important part and it deserves to be said plainly.
When you press send, the details you entered are sent to this website’s server, which composes two emails: your request to us, and a confirmation to you. Delivery goes over an encrypted connection (SMTP with TLS) through our email host.
The server does not store your details: there is no database and no copy is kept once the messages are away. The data exists in transit and then only inside the two mailboxes — ours and yours.
The providers involved are our website host (Vercel), which handles the request at the moment you send it, and our email host (Papaki), which delivers the messages. Both act as processors on our behalf.
You are equally welcome to call or write to us directly and skip the form altogether.
Why we process it
- To answer your question and arrange your visit
- To confirm the date, time and number of guests
- To meet any obligation the law places on us
We do not use your details for marketing messages and we do not build visitor profiles.
Legal basis
Processing rests on taking steps at your request before entering into a contract (Article 6(1)(b) GDPR) when you ask for a booking, and on our legitimate interest in replying to people who write to us (Article 6(1)(f) GDPR).
Cookies and local storage
This website sets no cookies of its own and does not track you.
It stores nothing in your browser either. Which language you are reading is determined by the page address — the Greek pages live under /el — rather than by anything kept on your device.
Third-party services
Some parts of the page load content from third parties. When that happens, the third party sees your IP address, as on any website visit:
- Google Maps — the embedded map in the contact section. Google may set its own cookies. Google’s privacy policy applies.
- Unsplash — some of the photography is still served from their servers.
We share your contact details with no third party for commercial purposes. We do not sell them.
How long we keep it
Messages you send stay in our mailbox for as long as we need them to serve your request and keep a record of the correspondence. You can ask us to delete them at any time.
Your rights
As a data subject you have the right to:
- Access the data we hold about you
- Correct inaccurate details
- Erasure (the “right to be forgotten”)
- Restrict processing
- Data portability
- Object to processing
To exercise any of these, write to us at info@ilianamalihinwinery.gr. We reply as soon as we can and in any case within one month.
Security
The site is served over an encrypted connection, and the booking form is transmitted the same way. Because we keep no visitor database, there is no store of personal data on this website that could leak: once a booking request has been emailed, the only copies are the two mailboxes it landed in.
Children
This website concerns alcoholic drinks and is intended for adults. We do not knowingly collect data from minors.
Changes to this policy
If the way this site works changes, for example if analytics or an online shop are added, this policy will be updated before those go live. The date at the top shows the last revision.
Contact
For anything concerning your data:
Right to complain
If you believe the processing of your data breaches the law, you have the right to lodge a complaint with the Hellenic Data Protection Authority.