Privacy Policy

Protecting your personal data matters to us. This policy explains what data we collect when you use ammoudara.com, why, who we share it with, and your rights.

1. Data controller

Konstantina Eleni Samaritaki ("Ammoudara.com"), Lasaias 20A, 713 05 Heraklion, Greece, VAT no. EL171804727. Data protection contact: contact@ammoudara.com

1. What we collect and why

• Visiting the site: IP address, device, browser, pages viewed. Purpose: operation and security. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Retention: up to 30 days. • Visitors by country: when a business page is viewed, our own server uses the IP address for a moment to work out the country, and keeps only an anonymous daily count per country (for example "40% Germany"), shown to the business as statistics. The IP address is not stored for this. Legal basis: legitimate interest (Art. 6(1)(f)). • Statistics cookies (only if you accept them): pseudonymised usage data. Purpose: statistics, improvement. Legal basis: consent (Art. 6(1)(a)). Retention: see Cookie Policy. • Account: name, email, password (encrypted), saved places. Purpose: running your account. Legal basis: contract (Art. 6(1)(b)). Retention: until you delete your account, plus 30 days. • Bookings: name, email, phone, booking details. Purpose: completing the booking and sending it to the business. Legal basis: contract (Art. 6(1)(b)). Retention: as required by tax law. • Payments: card details are processed only by Stripe. We see the amount, date and last 4 digits. Legal basis: contract and legal obligation (Art. 6(1)(b), (c)). Retention: as required by tax law. • Newsletter: email, language. Legal basis: consent (Art. 6(1)(a)). Retention: until you unsubscribe. • Messages to us: name, email, message. Purpose: replying. Legal basis: legitimate interest. Retention: 12 months. • Spam protection: the contact form uses Cloudflare Turnstile to check that a person, not a bot, is sending it. For this check only, Cloudflare processes technical data such as your IP address and browser. Legal basis: legitimate interest (security). • "Rota Mre Koumbare" assistant: what you type in the chat. Purpose: suggestions for places and activities. Legal basis: legitimate interest. Retention: up to 30 days. • Voice input (the microphone in the chat, only if you use it): your browser turns your speech into text with its own service: Google in Chrome, Microsoft in Edge, Apple in Safari, under their terms. Only the text reaches us; we never receive the audio. • Saved preferences (signed-in members, only if you say yes in the chat): what you love and who you travel with. Purpose: more relevant suggestions. Legal basis: consent (Art. 6(1)(a)). Retention: until you edit or delete them in your profile ("What Koumbaros remembers about me"), or delete your account. • Reported answers: if you tap "Report this answer", we keep that one answer, the question before it, your reason and any note you add, so our team can check and correct it. Purpose: accuracy of the assistant. Legal basis: legitimate interest. Retention: up to 12 months. • "Near me": your device location, only if you allow it. Legal basis: consent. Not stored. • Job applications: contact details, CV, message. Purpose: forwarding to the employer. Legal basis: steps prior to a contract (Art. 6(1)(b)). Retention: 6 months. • "Secret Gems": name or nickname, email, text, photos. Legal basis: consent. Retention: while published. • Business sign-up: business and contact person details, VAT number, address. Purpose: listing, subscriptions, invoicing, tax obligations. Legal basis: contract and legal obligation. Retention: for the duration of the partnership and as required by law.

Business directory: the guide includes publicly available business information (name, address, phone, opening hours). We process it on the basis of our and our users' legitimate interest in information about local businesses (Art. 6(1)(f)). Any business can claim, correct or request removal of its listing at contact@ammoudara.com.

We do not sell your data. We do not make automated decisions with legal effects on you.

1. The AI assistant

"Rota Mre Koumbare" is an artificial intelligence system, not a human, powered by OpenAI technology. Answers may contain errors, so please confirm important details with the business. Do not enter sensitive personal data in the chat.

1. Recipients

• Businesses on the platform receive the details needed for your booking, enquiry or job application, and from then on act as independent controllers. • Processors acting on our behalf: Hostinger (hosting), Stripe (payments), OpenAI (AI assistant), Mapbox (maps), Cloudflare (spam protection), Google Analytics and Metricool (statistics, only with consent), WeatherAPI (weather), our email delivery provider, our website support company, and our accountant. • Third-party services with their own terms: WhatsApp (your phone number is visible to group members), external booking providers, Instagram, Facebook, TikTok, YouTube, LinkedIn. • Public authorities, where required by law. Transfers outside the EU: where data is transferred outside the EU (e.g. USA, UK, India), this is done with GDPR safeguards: an adequacy decision (e.g. the EU-US Data Privacy Framework) or the European Commission's Standard Contractual Clauses.

1. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection, and you can withdraw your consent at any time (in Cookie Settings or via the unsubscribe link in the newsletter). Write to contact@ammoudara.com. We reply within one month. You can also lodge a complaint with the Hellenic Data Protection Authority, 1-3 Kifisias Ave, 115 23 Athens, www.dpa.gr.

1. Minors

Accounts, bookings and payments are for people aged 18 and over. For consent-based services, children under 15 need the consent of a parent or guardian.

1. Security

We use encryption (HTTPS), encrypted passwords, restricted access and backups. Card details never pass through our servers.

1. Cookies

For cookies, see our Cookie Policy and the Cookie Settings link at the bottom of every page.

1. Changes

We will update the date at the top of this page. For significant changes we will also notify you on the site.