1. Who We Are
This Privacy Policy applies to Kreta Greek Gyros & Grill, operating two restaurant locations in Malta:
- Paceville: St George's Road, St Julian's, STJ 3200, Malta · +356 2149 5594
- Sliema: 140 Tower Road, Sliema, SLM 1604, Malta · +356 9906 9599
For privacy enquiries, contact us at: hello@kretamalta.com
2. What Data We Collect
We collect the following personal data when you submit a table reservation request via our website:
- Full name
- Email address
- Party size
- Preferred location (Paceville or Sliema)
- Special requests or dietary requirements (if provided)
We do not collect payment information, and we do not use cookies beyond what is strictly necessary for the website to function.
3. Why We Collect It
We use your personal data solely to:
- Process and confirm your table reservation
- Contact you if we need to discuss your booking
- Accommodate dietary or accessibility requirements you have mentioned
4. Legal Basis for Processing
Our legal basis for processing your data is performance of a contract (Article 6(1)(b) GDPR) — specifically, processing necessary to take steps at your request before entering into a reservation agreement with us.
5. How Long We Keep Your Data
Reservation enquiry data is retained for 90 days after your reservation date, after which it is securely deleted. We do not retain data for marketing purposes unless you have explicitly opted in.
6. Data Sharing
We do not sell, rent, or share your personal data with third parties for marketing purposes. Your data may be shared only with:
- Our restaurant staff, solely for the purpose of fulfilling your reservation
- Email service providers used to receive your reservation enquiry, under strict data processing agreements
7. Your Rights
Under GDPR, you have the following rights regarding your personal data:
- Right of access — request a copy of the data we hold about you
- Right to rectification — request correction of inaccurate data
- Right to erasure — request deletion of your data
- Right to restriction — request that we limit processing of your data
- Right to data portability — receive your data in a machine-readable format
- Right to object — object to processing based on legitimate interests
To exercise any of these rights, email us at hello@kretamalta.com. We will respond within 30 days.
8. Complaints
If you believe your data has been handled unlawfully, you have the right to lodge a complaint with the Office of the Information and Data Protection Commissioner (IDPC), Malta's supervisory authority:
idpc.org.mt · +356 2328 7100 · idpc.org.mt/contact
9. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. Continued use of our website after changes constitutes acceptance of the updated policy.