Privacy policy


This page explains which details we keep when you book a table through this website, why we keep them and for how long.

Who is responsible

The data controller is the business «stis Annas», Chatzimichali Ntaliani 21, Chania 73100, Greece.

Controller,
Email,
Phone,

What we keep

When you send a booking request we keep your name, phone number, date and time, number of people, any note you write, and the language of the page.

We do not ask for or keep payment details. This website does not use tracking or advertising cookies.

Why we keep them

Only to manage your booking, that is to confirm it, send you a message and call you if needed. The legal basis is that you request it before a contract is formed (GDPR Article 6(1)(b)). We never use them for marketing and never sell or share them for anyone else's purposes.

How long we keep them

Four months after the date of the booking, your name, phone number and note are deleted automatically. Only the date, time and party size remain, with nothing that identifies you, so we know which days are busiest.

Who else processes them

To run the website we use trusted providers that process the data only on our behalf, with the safeguards the law requires: Supabase to store bookings, Vercel to host the website, and Resend to send the notification to the restaurant's mailbox.

Fonts are loaded from Google and the map on the home page is Google Maps, so when you open these pages Google receives your IP address under its own terms.

Your rights

At any time you can ask to see your details, have them corrected, have them deleted before the four months, or restrict their use. Write to us or call us using the details above and we will reply within one month.

If you believe we have not handled your data properly, you have the right to complain to the Hellenic Data Protection Authority, www.dpa.gr.

Last updated 22 September 2026.