This notice explains what personal data we process when you use calamarirestaurant.com and when you make a reservation with us, why and on what legal basis, who receives it and how long we keep it. It also sets out your rights under the Personal Data Protection Law No. 89/2007 of Northern Cyprus.
Data controller ("controller" in the Law)
CALAMARY RESTORAN & BAR ENTERPRISES LTD., which runs Calamari. Address: MAREŞAL FEVZI ÇAKMAK CAD. NO:3 LAPTA GIRNE. Phone and WhatsApp: 0533 888 22 00.
The website is built, hosted and run for Calamari by Elevates Digital Services OÜ (Estonia, registry code 17455911). Elevates processes your data only on our instructions and only for the purposes in this notice.
Information the website's server does not keep
Your cookie choice is stored only in your own browser. So is your language choice.
What you choose or type to make a reservation (such as the date, the time, the number of people, your name or a note) is not sent to the website's server and is not stored there. When you press the reservation button, it opens in WhatsApp as a message ready to send. You decide whether to send it.
Information that reaches us, why, and on what legal basis
Some of this information you give us yourself, by WhatsApp, by phone or at our venue. The rest is recorded automatically while you use the site: server records always, and Google Analytics data only if you agree.
Reservations and questions by WhatsApp or phone
When you contact us by WhatsApp or phone, we receive: your name, your phone number, the date, time and number of people for your reservation, any request you add, and your message. We use them to answer you, to hold your table, and to contact you about your reservation, for example if its time has to change.
Legal basis: carrying out your reservation, and taking steps at your request before it is made (Law No. 89/2007, Article 6(2)).
You are under no legal obligation to give us information. Without your name and phone number, however, we cannot hold a reservation for you.
If you tell us about an allergy or a special diet
Information about an allergy or an intolerance, or about a diet you follow for health or religious reasons, is sensitive data, which the Law protects more strictly. We use it only to prepare and serve your meal safely, share it only with the staff who prepare and serve it, and do not keep it after your visit.
Legal basis: your explicit consent, which you give by telling us for this purpose (Article 7(1)). You do not have to tell us, but then we cannot take it into account.
Every time you visit the site
Your browser automatically sends your IP address, browser details, the pages you open and the time to the server that hosts the site. We use these records to run the site, find errors and protect the site against attacks. Cloudflare also filters traffic to the site for the same purposes on our behalf, and sees your IP address while doing so.
Legal basis: our legitimate interest in providing the site securely (Article 6(5)). Server records are deleted after 14 days; they may remain for about two more weeks in the hosting company's server snapshots.
Only if you agree: Google Analytics
If you accept Statistics cookies in the cookie banner, Google Analytics 4 loads and automatically records: the pages you view, how far you scroll, clicks on external links, the site or campaign that brought you here, device type, browser, operating system, screen size, language and your approximate location (city and country) derived from your IP address. Your IP address reaches Google to determine your location, but Google Analytics does not store it. A random identifier, kept in a cookie for up to two years, is used to recognise returning browsers.
The purpose is to understand which pages and dishes interest people, so we can improve the site. Google Signals and advertising features are switched off. Your name, phone number and reservation details are not sent to Google Analytics. Detailed visit data is deleted automatically after 14 months; summary reports such as total visit counts remain.
Legal basis: your explicit consent (Article 6).
Only if you agree: the Google map
If you accept Maps cookies in the cookie banner, or press "Load the map" in the map area, the Google map showing where we are will load. Your browser then connects directly to Google's servers; Google receives your IP address, may set its own cookies and may read cookies it set earlier. If you do not agree, a static image appears where the map would be.
Legal basis: your explicit consent (Article 6).
You do not have to agree. Even if you refuse, the menu, reservations and the rest of the site work; only the map is replaced by a static image. You can withdraw your consent at any time through at the bottom of every page; statistics data already sent stays in Google Analytics until its retention period ends.
Who receives it, and why
- Elevates Digital Services OÜ (Estonia): builds, hosts and maintains the site for us, and runs the Google Analytics account on our behalf.
- Hostinger: the server holding the site, in Düsseldorf, Germany. Hostinger's own full server snapshots are kept in Lithuania for about two weeks.
- Cloudflare, Inc. (USA): protects and speeds up the site, and sees your IP address while doing so. It also stores the site's images and encrypted backups; the backups are kept in European Union countries.
- Google, statistics and the map (Google Ireland Limited and Google LLC): receives your data only if you agree. This data is processed on servers abroad, including in the United States; the legal basis for this transfer is your explicit consent (Article 11(2)(A)).
- WhatsApp (Meta): when you write to us on WhatsApp, your message travels over WhatsApp's infrastructure under WhatsApp's own terms. You start this transfer yourself; for reservations, it is needed to carry out your reservation, or steps you ask us to take before it (Article 11(2)(B)).
- Banks: when you pay by card at our venue, your payment is processed by your bank and ours. Your card details go to the bank through the card terminal, not to us.
- Public authorities: only where the law requires it, and only as much as it requires.
We do not sell or rent your information, and we do not use it for advertising. We do not send you promotional or advertising messages without your written consent.
How long we keep it
- Server records: 14 days. The hosting company's server snapshots: about two weeks.
- Detailed visit data in Google Analytics: 14 months.
- Reservation details and WhatsApp conversations: until your visit has taken place and any question about it is settled. Payment and accounting records: for the retention period the legislation requires.
- Allergy and diet information: not kept after your visit.
- Your cookie choice: 6 months, in your own browser. Your language choice: in your own browser until you delete it.
- The site's encrypted backups: data deleted from the site is also removed from the backups within 6 months at the latest.
How it is protected
The site works only over an encrypted connection (HTTPS). Backups are encrypted before they leave the server.
Your rights
Under Law No. 89/2007 you can:
- find out whether personal data about you is processed, and ask what data is processed and where it came from, why it is processed, who has received it and which categories of data are involved (Article 14);
- ask for your data to be corrected, deleted or blocked from use, and ask for this to be notified to any third party that received it (Article 14);
- object at any time, on legitimate grounds relating to your particular situation, to the processing of your data (Article 15);
- withdraw any consent you gave, at any time. For cookies, use at the bottom of every page.
Send your request in writing to our WhatsApp line or to the address above. We reply in writing within 30 days to requests for information, correction, deletion or blocking (Article 14), and within 15 working days to objections (Article 15).
If you get no reply within these periods, or find our reply unsatisfactory, you can apply to the Personal Data Protection Board of Northern Cyprus (Kişisel Verileri Koruma Kurulu). You can also take any complaint about how the Law is applied directly to the Board at any time (Article 34; kvkk.gov.ct.tr).
Cookies
Our Cookie policy lists one by one what the site stores on your device, why, and for how long.
Changes
If we change this notice, we publish the new text on this page with its update date. Before using your data for a new purpose, we inform you separately.