Legal

Privacy Policy

Last updated: August 2026

This policy explains what personal information Krama Mykonos collects through this website, how that information is used, and the choices you have. It describes only the technology this website actually uses.

Information we collect

You can browse this website without giving us any personal details. We collect personal information only in these situations:

• Reservations. Table bookings are handled by OpenTable. When you book, your details are collected and processed by OpenTable under its own privacy policy; we receive the booking information needed to prepare for your visit.
• The enquiry form. If you send an enquiry from the contact, private events or weddings page, we receive your name, email address and telephone number, together with whatever you tell us about the date, the number of guests, the occasion and the evening you have in mind. We also record which form you used, the language of the page, the time, your browser user-agent string and the page you arrived from. Your enquiry is written to our database first and emailed to us second, so that a mail failure can never lose it.
• Your consent to that form. The form cannot be sent without ticking the consent box, and we store the tick together with the exact wording you agreed to, so that both of us have a record of it. Your IP address is held briefly and separately, and only to limit how many enquiries one sender can make in an hour.
• Enquiries by email or telephone. If you write or call us instead, we receive the contact details and the content of your message so we can reply.
• Chat assistant. If you use the chat assistant, we store your question, the reply, the page you were on, a random session identifier, the language of the page, and a coarse indication of where you are: a country code and a timezone, taken from your connection rather than from your IP address, which is never read or stored. These records are deleted automatically after 90 days. Please do not enter payment-card numbers or sensitive personal data in the chat.
• Cookies, analytics and advertising. With your consent, we and our advertising partners set cookies and similar identifiers to measure how the website is used and how our advertising performs. See the section below and our Cookie Policy.

How we use your information

We use the information above to take and manage reservations, to answer your enquiries, to organise private events you ask about, to operate and improve the website, to measure and improve our advertising, and to keep the site secure. We do not sell your personal information, and we do not use it for automated decisions that affect you.

Legal bases

We rely on the performance of a contract, or on steps taken at your request before one, to handle your reservation and to answer your enquiry. We rely on our legitimate interest in running and securing the website, and in keeping a record of the consent you have given us. Everything to do with analytics and advertising, including the cookies and identifiers described below, rests on your consent alone, and you may withdraw it at any time.

Advertising and measurement

Krama advertises on Google, on Meta (Facebook and Instagram) and on TikTok. Those platforms place measurement tags on this website. The tags load only after you have consented to marketing cookies, and not before.

• Google Ads. When you send an enquiry, a one-way, irreversible hash of your email address, telephone number and name is sent to Google so that the enquiry can be matched to an advertisement you clicked. We never send Google the plain values: they are hashed in your browser before they are sent.
• Meta. The Meta pixel currently has automatic advanced matching switched on, with every field enabled. Meta therefore receives a hashed form of details you type into forms on this site: your email address, telephone number, first and last name, gender, town or city, county or region, postcode, country, date of birth, and an identifier for you. The pixel is also set to send Meta further detail about the pages you look at, including page information and any prices shown on them.
• TikTok. The TikTok pixel records visits and actions on the site so that advertising can be measured.

You can withdraw your consent at any time through the cookie banner, and these tags will stop loading.

Service providers

We rely on a small number of trusted providers who process data on our behalf or as independent controllers:

• Google: website hosting and database (Firebase), where your enquiry and the chat records are stored; email delivery (Google Workspace); tag management (Google Tag Manager); and, with your consent, analytics (Google Analytics) and advertising (Google Ads).
• Cybot (Cookiebot): the consent banner that records your cookie choices.
• Anthropic: the AI model that generates replies in the chat assistant.
• OpenTable: the reservation platform.
• Meta Platforms: advertising measurement on Facebook and Instagram, with your consent.
• TikTok: advertising measurement, with your consent.
• Repuso: the widget that displays guest reviews.

International transfers

Some of these providers are based outside the European Economic Area. Where that is the case, the transfer is protected by appropriate safeguards, such as the European Commission's standard contractual clauses.

How long we keep it

We keep enquiries and booking information only for as long as needed to serve you and to meet our legal and accounting obligations, and no longer than 24 months, except where tax law requires an accounting record to be kept for longer. Chat-assistant records are deleted automatically after 90 days. Analytics data is retained according to the settings described in our Cookie Policy.

Your rights

Under the General Data Protection Regulation you have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent at any time. To exercise any of these rights, contact us using the details above. You also have the right to complain to the Hellenic Data Protection Authority (HDPA).

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised. Significant changes will be highlighted on this page.