Privacy
Privacy policy
Updated · 21 October 2026
In short
- The controller is CLOCHARD I.K.E., Mitropoleos 11, Thessaloniki.
- We ask only for what your booking needs.
- We keep allergies only if you allow it, and delete them 7 days after your visit.
- Booking details are deleted 12 months from the date requested.
- No cookies, advertising, newsletters or profiling. We never sell data.
- You can see, correct or delete your details whenever you wish.
Who we are
CLOCHARD I.K.E. (“Clochard by Alpha”), Mitropoleos 11, 546 22 Thessaloniki, Greece. About your data, write to [email protected] or call +30 2310 239805.
What we keep, why, and for how long
| What | Why | Legal basis (GDPR) | How long |
|---|---|---|---|
| Name, mobile, e-mail, date, time, party size, notes | To answer your request, confirm your booking and remind you of it | Your request and the booking (6(1)(b)) | 12 months from the date requested; notes 30 days |
| Allergies and dietary needs | So the kitchen can prepare | Your explicit consent (6(1)(a), 9(2)(a)) | 7 days after the booking |
| The e-mails and SMS we sent you | To know what we told you | The booking (6(1)(b)) | 30 days; in the reservations mailbox 12 months |
| Your IP address, encoded | To protect the form from abuse | Legitimate interest (6(1)(f)) | 24 hours |
| Your visit to the website (IP address) | The website’s security and speed, through Cloudflare | Legitimate interest (6(1)(f)) | Per Cloudflare’s terms |
| Backups of all the above | So that no booking is lost | Legitimate interest (6(1)(f)) | Daily 30 days, monthly 12 months |
Your name, mobile and e-mail are needed to answer you. If you would rather not give them online, book by phone.
Who processes it for us
- Hetzner Online GmbH, Germany: the server.
- Microsoft Ireland Operations Ltd, Ireland: e-mail.
- Apifon, Greece: SMS.
- Cloudflare, Inc., USA: the website’s network and the backups, stored within the EU.
Microsoft and Cloudflare have US parent companies. Transfers there are covered by the EU–US Data Privacy Framework and by standard contractual clauses; we will give you a copy on request.
Your rights
You can ask to access, correct, erase, restrict or port your data by writing to [email protected] or calling +30 2310 239805. You can withdraw your consent for allergy details at any time.
Right to object: you can object to processing based on our legitimate interest (protecting the form, backups).
You can complain to the Hellenic Data Protection Authority (dpa.gr) or to the authority in your own country.
Cookies
We use no cookies, analytics or advertising tools. If you choose the version without motion, your browser remembers it until you close the tab.