Last updated: 30 August 2026

1. Who we are

This Privacy Policy explains how Brazil Bar Naxos (referred to as “Brazil Bar”, “we”, “us” or “our”) collects and uses personal data through https://brazilbarnaxos.gr.

Data controller:
BRAZIL BAR NAXOS
Trading name: Brazil Bar Naxos
Registered/business address: NAXOS TOWN
Naxos, Greece
Email: info@brazilbarnaxos.gr
Telephone: +30 697 888 2827

Please replace the bracketed information above with the registered business or owner details before publishing this policy.

2. Personal data we collect

We may collect the following categories of personal data:

• Contact enquiries: your first and last name, email address, subject, message and any information you voluntarily include when you contact us through the website, email or telephone.
• Technical and security data: IP address, browser type, device information, operating system, referring page, pages requested, date and time of access, and server or error logs.
• Cookie and consent information: your cookie preferences, consent status, consent identifier and related technical information recorded by our consent-management system.
• Usage information: where optional analytics or Buttonizer analytics are enabled and you have provided any required consent, we may receive information about visits, interactions, button clicks and general website usage.

Please do not include sensitive personal data in a contact-form message unless it is strictly necessary.

3. How we collect personal data

We collect personal data:

• directly from you when you submit a contact form, send us an email or call us;
• automatically through essential website technology, server logs and security systems;
• through optional cookies or similar technologies only where they are enabled and the applicable consent requirements have been met.

4. Why we use your personal data and our legal bases

We process personal data for the following purposes:

• To answer enquiries, provide requested information and discuss reservations or visits. The legal basis is taking steps at your request before entering into an arrangement and, where applicable, our legitimate interest in responding to customers.
• To operate, maintain, secure and troubleshoot the website. The legal basis is our legitimate interest in providing a safe and functional website.
• To remember and demonstrate your cookie choices. The legal basis is compliance with applicable legal obligations and our legitimate interest in maintaining consent records.
• To use non-essential analytics, advertising or similar technologies. The legal basis is your consent, where consent is required. You may withdraw consent at any time through the cookie settings.
• To establish, exercise or defend legal claims and comply with legal, accounting, regulatory or law-enforcement requirements. The legal basis is compliance with a legal obligation or our legitimate interests, as applicable.

We do not use information submitted through the contact form for unrelated marketing unless you have separately agreed to receive marketing communications.

5. Cookies and similar technologies

The website uses necessary technologies required for security, consent management and basic operation. Optional cookies or scripts may be used for analytics or third-party functionality only according to the choices available through our cookie banner.

For an up-to-date list of cookies, purposes, providers and retention periods, please read our Cookie Policy and use the cookie settings link to review or change your preferences. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

6. Contact forms

Our contact form is provided using Fluent Forms. When you submit the form, the details entered may be stored in the website’s WordPress database and sent to our designated business email account so that we can respond. Technical information, such as an IP address, may also be processed where required for form security, abuse prevention or troubleshooting.

Do not use the contact form to send payment-card details, identity documents or other highly sensitive information.

7. Buttonizer and contact buttons

The website may use Buttonizer to display contact or action buttons. Clicking a telephone or email button may open the relevant application on your device. Buttonizer or related technologies may process limited technical and interaction data where the integration or its analytics functions are enabled. Non-essential processing is controlled through the website’s consent settings where required.

8. Who may receive your personal data

We do not sell personal data. We may share data only where necessary with:

• website hosting, maintenance, security and backup providers;
• email and communications providers;
• WordPress, form, consent-management and website-functionality service providers;
• analytics or similar service providers, where enabled with an appropriate legal basis;
• professional advisers, such as accountants, lawyers or insurers, where necessary;
• public authorities, courts or law-enforcement bodies where disclosure is required by law or necessary to protect legal rights.

Service providers processing personal data on our behalf are expected to use it only for the agreed purposes and to protect it appropriately.

9. International data transfers

Some technology providers may process data outside Greece or the European Economic Area. Where personal data is transferred to a country that has not been recognised as providing an adequate level of protection, we will use an available lawful transfer mechanism where required, such as the European Commission’s Standard Contractual Clauses, together with appropriate supplementary safeguards.

Further provider-specific information may be available in our Cookie Policy or from us on request.

10. How long we keep personal data

We retain personal data only for as long as necessary for the relevant purpose, including:

• ordinary contact enquiries: generally for up to 12 months after the enquiry is resolved;
• information connected with a reservation, transaction, complaint or legal matter: for as long as necessary to manage the matter and meet applicable legal, tax or accounting requirements;
• server and security logs: generally for up to 90 days, unless a longer period is necessary to investigate security incidents or comply with law;
• cookie-consent records and cookie data: for the periods stated in our Cookie Policy and consent-management settings.

These periods must reflect our actual technical and business practices. Information may be retained longer where required by law or necessary for the establishment, exercise or defence of legal claims.

11. How we protect personal data

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. These measures may include access controls, software updates, encrypted connections, backups, security monitoring and limiting access to people who require it for legitimate business purposes.

No internet transmission or storage system can be guaranteed to be completely secure.

12. Your data-protection rights

Subject to the conditions and exceptions in applicable law, you may have the right to:

• be informed about how your personal data is used;
• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of your personal data;
• request restriction of processing;
• object to processing based on legitimate interests or to direct marketing;
• receive certain data in a structured, commonly used and machine-readable format;
• withdraw consent at any time where processing is based on consent;
• lodge a complaint with a competent data-protection authority.

To exercise a right, contact info@brazilbarnaxos.gr. We may need to request reasonable information to verify your identity. We will normally respond within one month, subject to the extensions permitted by law.

13. Complaints

Please contact us first if you have a concern so that we can try to resolve it.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority:

Hellenic Data Protection Authority
1–3 Kifisias Avenue
115 23 Athens, Greece
Website: https://www.dpa.gr/
Telephone: +30 210 6475600

14. Children

Brazil Bar is an adults-only venue and this website is intended for persons aged 18 and over. We do not knowingly collect personal data from children through the website. If you believe that a child has provided personal data to us, please contact us so that we can review and, where appropriate, delete it.

15. External links

The website may contain links to third-party websites or services. Those third parties are responsible for their own privacy practices. We recommend reviewing their privacy notices before providing personal data to them.

16. Changes to this Privacy Policy

We may update this Privacy Policy when our website, services, providers or legal obligations change. The revised version will be posted on this page with a new “Last updated” date.

17. Contact us

For privacy questions or to exercise your rights, contact:

Email: info@brazilbarnaxos.gr
Telephone: +30 697 888 2827
Address: [FULL LEGAL ADDRESS], Naxos, Greece