Sunset Michalis Taverna Website: https://www.sunsetmichalistaverna.gr
Last updated: [01/06/2026]
This website (https://www.sunsetmichalistaverna.gr) is owned and operated by Sunset Michalis Taverna (“we”, “us”, “our”), the data controller responsible for your personal data under the EU General Data Protection Regulation (GDPR, Regulation 2016/679) and Greek Law 4624/2019.
Controller details:
If you have any question about this policy or how we handle your data, contact us using the details above.
When you send us a message, fill in a contact or reservation form, or otherwise get in touch through the site, we collect the information you provide — typically your name, email address, phone number, party size, preferred date/time, and the content of your message.
Why and on what legal basis:
Note on marketing: We will only add you to our email marketing list and send you promotional messages (offers, news, events) if you have given separate, explicit consent — for example by ticking an opt-in box or subscribing to our newsletter. Submitting a contact or reservation form does not by itself sign you up for marketing. Legal basis for marketing: your consent (Art. 6(1)(a) GDPR; Art. 11 of Greek Law 3471/2006 on electronic communications). You can withdraw this consent at any time by clicking “unsubscribe” in any marketing email or by contacting us.
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user-agent string to help with spam detection. Legal basis: legitimate interest in moderating and securing the site (Art. 6(1)(f)).
An anonymized string created from your email address (a “hash”) may be provided to the Gravatar service to check whether you use it. The Gravatar service privacy policy is available at https://automattic.com/privacy/. After your comment is approved, your profile picture is visible to the public in the context of your comment.
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS). Visitors to the website can download and extract any location data from images on the website.
For users who register on our website (if any), we store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
When you visit the site we automatically collect certain technical data such as your IP address, browser type and version, device information, pages visited and time spent, via cookies and similar technologies (see the Cookie Policy below). Legal basis: your consent for non-essential cookies (Art. 6(1)(a)); legitimate interest for strictly necessary cookies (Art. 6(1)(f)).
Articles and pages on this site may include embedded content (e.g. videos, images, maps, social posts). Embedded content from other websites behaves exactly as if you had visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction if you have an account and are logged in to that website.
A detailed breakdown is in the Cookie Policy at the end of this document. In short:
With your consent, we use the following third-party services. Each acts as an independent or joint controller for the data it collects; we recommend reading their privacy policies.
We use Google Analytics to understand how visitors use the site (pages viewed, time on site, approximate location, device). Data may be processed by Google Ireland Ltd and Google LLC (USA). IP addresses are truncated/anonymized where this feature is enabled. Privacy policy: https://policies.google.com/privacy
We use Google Ads conversion tracking and remarketing to measure ad performance and show you relevant ads on Google and partner sites after you’ve visited ours. This may involve Google’s advertising cookies. Ad settings / opt-out: https://adssettings.google.com
We use the Meta Pixel to measure the effectiveness of our advertising and to show you relevant ads on Facebook and Instagram (remarketing/custom audiences). Data is processed by Meta Platforms Ireland Ltd. Privacy policy: https://www.facebook.com/privacy/policy/ Ad preferences: https://www.facebook.com/ads/preferences
These providers may transfer data outside the EU/EEA (e.g. to the USA). Such transfers rely on the EU–US Data Privacy Framework and/or Standard Contractual Clauses with supplementary safeguards.
We do not sell your personal data and we do not share it with third parties for their own marketing. We only disclose data to:
If you request a password reset, your IP address will be included in the reset email.
We require all processors to keep your data secure and to use it only for the purposes we specify.
Where data is transferred outside the European Economic Area (for example to Google or Meta in the USA), we ensure an appropriate safeguard is in place, such as the EU–US Data Privacy Framework or European Commission Standard Contractual Clauses. You can request a copy of the relevant safeguard by contacting us.
We do not keep personal data longer than necessary, except where we are obliged to retain it for administrative, legal, accounting, or security purposes.
Under the GDPR you have the right to:
If you have an account on this site or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
To exercise any right, contact us at [info@sunsetmichalistaverna.gr]. We will respond within one month.
Right to complain: If you believe we have mishandled your data, you may lodge a complaint with the Greek supervisory authority: Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα) Kifissias Ave. 1-3, 115 23 Athens — www.dpa.gr — complaints@dpa.gr
Visitor comments may be checked through an automated spam-detection service. Analytics and advertising data may be sent to Google and Meta as described above.
We take reasonable technical and organisational measures to protect your data, including secure (HTTPS) transmission, access controls, and trusted hosting. No method of transmission over the internet is 100% secure, but we work to protect your data and review our measures regularly.
This website is not directed at children under 16. We do not knowingly collect personal data from children under 16 without parental consent. If you believe a child has provided us data, please contact us and we will delete it.
We may update this Privacy & Cookie Policy from time to time. The latest version will always be posted on this page with an updated “Last updated” date. Significant changes will be highlighted on the site.
This section explains the cookies and similar technologies we use. Non-essential cookies (analytics, advertising, remarketing) are only placed after you consent via our cookie banner. You can withdraw or change consent at any time through “Cookie settings”.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
wordpress_test_cookie | This site | Checks whether the browser accepts cookies | Session |
wordpress_logged_in_* | This site | Keeps registered users logged in | 2 days (2 weeks if “Remember Me”) |
wp-settings-* | This site | Stores screen/display preferences | 1 year |
comment_author_* | This site | Remembers comment-form details (opt-in) | 1 year |
cookie_consent / CMP cookie | This site | Stores your cookie-consent choices | 6–12 months |
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
_ga | Google Analytics | Distinguishes unique users | 2 years |
_ga_<container-id> | Google Analytics (GA4) | Persists session state | 2 years |
_gid | Google Analytics | Distinguishes users | 24 hours |
_gat / _dc_gtm_* | Google Analytics | Throttles request rate | 1 minute |
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
_gcl_au | Google Ads (Conversion Linker) | Stores ad-click info for conversion measurement | 90 days |
IDE | Google DoubleClick | Ad targeting, measurement, remarketing | up to 13 months |
test_cookie | Google DoubleClick | Checks if browser supports ad cookies | 15 minutes |
_gac_* | Google Ads | Links campaign data to conversions | 90 days |
_fbp | Meta (Facebook) Pixel | Identifies browsers for ad delivery & remarketing | 90 days |
fr | Meta (Facebook) | Ad delivery and measurement | 90 days |
_fbc | Meta (Facebook) Pixel | Stores last ad click for attribution | 90 days |
Cookie names and durations are set by the third-party providers and can change. The list above reflects the typical cookies set by these services; please refer to each provider’s policy (Section 6) for the authoritative list.