Last updated: 07/09/2026
Who we are
This website, https://basiliconuovo.gr , is operated by Basilico Nuovo Restaurant, Profitis Ilias Street, Kato Gouves 70014, Heraklion, Crete, Greece.
We are the data controller for the personal data described in this policy.
Contact: info@basiliconuovo.gr · +30 2897 042597
This policy applies only to this website. It does not cover information collected offline or through other channels.
What information we collect
Information you give us
When you complete our reservation form, we collect your name, telephone number, email address, party size and requested date and time.
When you use our contact form, we collect your name, email address and the content of your message.
Information collected automatically
When you visit this website, our servers record standard log information: IP address, browser type, internet service provider, date and time, and the pages you viewed. This is standard for web hosting and is used for security and site administration.
Where you have given consent, our analytics and advertising tools collect additional information as described in the Cookies section below.
Why we use it, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Managing your table reservation | Performance of a contract, Art. 6(1)(b) GDPR |
| Replying to your enquiry | Legitimate interest, Art. 6(1)(f) GDPR |
| Website security and abuse prevention | Legitimate interest, Art. 6(1)(f) GDPR |
| Analytics and measuring website usage | Your consent, Art. 6(1)(a) GDPR |
| Advertising measurement and remarketing | Your consent, Art. 6(1)(a) GDPR |
We do not sell your personal data. We do not use your reservation details to send marketing messages unless you have separately asked us to.
How long we keep it
| Data | Retention |
|---|---|
| Reservation details | Retained for as long as reasonably necessary to manage the reservation and any related enquiries, and thereafter only where necessary for legitimate business, legal or accounting purposes. |
| Contact form messages | Retained for as long as reasonably necessary to respond to and manage the relevant enquiry, and thereafter only where necessary for legitimate business or legal purposes. |
| Google Analytics data | 14 months |
| Your cookie consent choice | 12 months |
| Server log files | As retained by our hosting provider |
Cookies and tracking technologies
This website uses cookies and similar technologies to analyse traffic, measure the performance of our advertising, and improve your browsing experience.
You can accept or reject non essential cookies at any time through the cookie consent banner, or by updating your choices via the cookie settings link on this site.
We use the following categories:
- Necessary: required for the website to function and for your consent choice to be remembered. These cannot be switched off.
- Preferences: remember choices you make so the site behaves the way you expect.
- Statistics: help us understand how visitors use our website.
- Marketing: used to measure and improve our advertising campaigns and to show relevant ads.
Consent management: Complianz
We use Complianz to manage your cookie preferences. It stores small files on your device to remember your choice so that you are not asked repeatedly. These are necessary cookies and are set regardless of your selection.
Google Tag Manager
We use Google Tag Manager to manage the tags used on our website. Google Tag Manager does not itself collect personal data, but it loads the tools described below according to your consent choices.
Google Analytics
We use Google Analytics, a web analytics service provided by Google Ireland Limited, to understand how visitors interact with our website. It collects information such as pages visited, time spent on the site, device type and approximate location at city level. This data is aggregated and is not used to identify you personally.
Google Analytics loads only if you accept statistics cookies.
You can also opt out using the Google Analytics Opt out Browser Add on . Please note that this add on is available for desktop browsers only.
Google Ads: conversion measurement and remarketing
We use Google Ads to promote our restaurant. Where you accept marketing cookies, Google Ads uses cookies to:
- Measure conversions: to understand which advertisements lead to actions such as a table reservation or a phone call.
- Remarketing: to show you relevant advertisements on other websites and platforms after you have visited our website.
You can manage or disable personalised advertising at any time in your Google Ad Settings .
Enhanced conversions
To improve the accuracy of our advertising measurement, we may use Google's Enhanced Conversions feature. Where this is active and you have accepted marketing cookies, information you provide in the reservation form, such as your email address or telephone number, may be converted into a coded format before being sent to Google. It is used solely to match conversions and is never transmitted in readable form.
Google Consent Mode v2
This website uses Google Consent Mode v2, which adjusts how Google's tools behave according to the choices you make in the cookie banner.
If you decline statistics or marketing cookies, Google's tools do not store cookies or identifiers on your device. Anonymous, aggregated signals that contain no personal identifiers may still be sent to Google to help estimate overall statistics.
hCaptcha
Our contact form uses hCaptcha to protect against automated abuse. hCaptcha may collect device and usage information in order to distinguish human visitors from automated systems. This is necessary for the security of our website and operates on the basis of our legitimate interest.
hCaptcha is provided by Intuition Machines, Inc. Their privacy policy: https://www.hcaptcha.com/privacy
Embedded Google Map
Our contact page includes an embedded Google Map. When this loads, Google may set cookies and process your IP address in order to deliver the map.
Managing cookies in your browser
You can also control cookies through your browser settings. Please note that blocking necessary cookies may affect how parts of this website function.
Who we share data with
We share personal data only with service providers who help us operate this website and our advertising:
- Google Ireland Limited: analytics and advertising
- Intuition Machines, Inc.: form security through hCaptcha
- Our hosting provider: website operation
- Our marketing agency: campaign management on our behalf
Each acts under a data processing agreement or as an independent controller as applicable. We do not sell personal data to third parties.
International transfers
Data collected through Google services may be transferred to and processed in the United States. Google relies on the EU US Data Privacy Framework and on Standard Contractual Clauses as safeguards for such transfers.
Your rights
Under the General Data Protection Regulation, you have the right to:
- Access: request a copy of the personal data we hold about you
- Rectification: ask us to correct inaccurate or incomplete data
- Erasure: ask us to delete your personal data, in certain circumstances
- Restriction: ask us to limit how we process your data, in certain circumstances
- Objection: object to processing based on our legitimate interests
- Portability: receive your data in a structured, machine readable format
- Withdraw consent: at any time, without affecting the lawfulness of processing carried out before withdrawal
The first copy of your data is provided free of charge. We will respond within one month.
To withdraw or change your cookie consent, use the cookie settings link available on this website.
For any data related request, contact us at info@basiliconuovo.gr.
You also have the right to lodge a complaint with the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα): www.dpa.gr
Children
This website is not directed at children. We do not knowingly collect personal data from children under the age of 15, which is the age of digital consent in Greece. If you believe a child has provided us with personal data, please contact us and we will delete it.
Changes to this policy
We may update this policy from time to time. The date at the top of this page shows when it was last revised.