Privacy Policy

1. Data Controller

The controller of the data collected through peran.gr is ΚΩΝΣΤΑΝΤΙΑ ΤΖΗΡΙΤΟΓΛΟΥ ΙΚΕ (Konstantia Tziritoglou IKE), which operates “ΠΕΡΑΝ – το καφέ αμάν της πόλης”.

Registered seat: Λεωφόρος Δεκελείας 20, 143 43 Νέα Χαλκηδόνα, Αττική (20 Leoforos Dekeleias St., 143 43 Nea Chalkidona, Attica, Greece).

Email: peran@peran.gr · Phone: 210 444 4030.

2. What we collect

We do not collect special-category data (such as health data). Please avoid including such information in the booking “notes” field.

• Bookings: first and last name, phone, email (optional), number of guests, optional notes, event, date and time.
• Newsletters and artist alerts: your email address and your preferences.
• Event reminders: your email or mobile number, plus the event and reminder time.
• Usage statistics (with your consent only): the pages you visited and a session identifier; if you are signed in, the email of your account.
• Visit attribution (with your consent only): source, medium and campaign, referring domain and landing page; Google and Meta click identifiers (gclid, gbraid, wbraid, fbclid) only if you have also consented to advertising.
• Advertising operations data: aggregate campaign cost data, without visitors’ personal data.

3. Purposes and legal bases

4. Cookies, local storage and consent

We use the Cookiebot consent management service. Before you consent, only strictly necessary items operate (consent state, security, session).

Categories: Necessary, Statistics, Advertising. Google Analytics and any advertising measurement do not run before the relevant consent is given.

For visit attribution we use local storage in your browser (localStorage) rather than cookies: that information stays on your device for up to 30 days and, if you make a booking, the related fields in our database are kept for up to 90 days.

You can change or withdraw your consent at any time through the “Cookie Settings” link at the bottom of every page. Withdrawal does not affect the lawfulness of processing carried out before it.

5. Recipients and providers

Data is shared only with providers that help us run the service:

• Application and database hosting platform (Base44).
• Resend — sending email (newsletters, booking notifications) and sending, delivery, open and click reporting.
• RestoBook — booking system; receives name, phone, party size, date/time and notes.
• ClickSend — sending SMS for the reminders you request.
• Google — Google Analytics 4 and, once enabled, reading Google Ads API data through our own systems.
• Meta Platforms — Meta Ads API, used to retrieve aggregate campaign cost data from our advertising account.
• Cookiebot (Usercentrics) — consent management.

We do not sell data and do not share it with third parties for their own purposes.

6. Transfers outside the European Economic Area

Some of the providers above are established, or may process data, outside the European Economic Area, in particular in the United States and Australia. Where that is the case, a transfer mechanism provided for by the GDPR is required, such as an adequacy decision, standard contractual clauses or an equivalent framework. For information about the transfer basis for a specific provider, contact peran@peran.gr.

7. Retention periods

We do not apply a single retention period: data is kept for as long as required for the purpose for which it was collected. Where a specific period applies, it is set out below.

8. Your rights

You have the following rights:

• Access to your data and information about how it is processed.
• Rectification of inaccurate or incomplete data.
• Erasure (right to be forgotten), where we have no lawful reason to keep the data.
• Restriction of processing.
• Objection to processing based on legitimate interests.
• Portability of data you provided under consent or a contract.
• Withdrawal of consent at any time, without retroactive effect.

For newsletters you can unsubscribe directly through the unsubscribe link in every message or via the “Newsletter settings” page. For cookies, use the “Cookie Settings” link.

For any other request, contact peran@peran.gr. We respond within one month. If you believe the processing breaches data protection law, you may lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

9. Security

We apply technical and organisational measures to protect data: encryption in transit, access limited to administrators, hashing of verification codes and request rate limits. We never store card payment details.

10. Age

The service is not intended for persons under 18 and we do not knowingly collect data from minors.

11. Advertising platform connections

Meta Ads: we retrieve from our advertising account only aggregate cost, click and impression data per campaign and day, which is not linked to individual visitors. Recording the origin of visits to our website (click identifiers) happens only with the relevant consent, as described in sections 2 and 4. We have no access to Meta users’ personal data.

Google Ads: the connection to the Google Ads API is under preparation and is not active. Once enabled, it will only perform read operations through our own systems and retrieve only aggregate cost, click and impression data per campaign and day — with no access to Google users’ personal data, no campaign changes and no use of the data for ad targeting or sale.

12. Changes to this policy

We may update this policy. Material changes will be announced on this page with an updated date.

13. Contact

For questions or requests about your personal data: peran@peran.gr · phone 210 444 4030 · Registered seat: Λεωφόρος Δεκελείας 20, 143 43 Νέα Χαλκηδόνα, Αττική (20 Leoforos Dekeleias St., 143 43 Nea Chalkidona, Attica, Greece).