Privacy policy

Who is responsible

BeeDigital (Michalis Koulouras & Stefanos Patelis), El. Venizelou 161, Malia, Crete, Greece. Email: info@beedigital.gr, phone: +30 2817001168.

When you open a menu

You don’t need an account and we keep no name, email or phone number. We read your browser’s language to show the menu in the right one.

If you pick a language on the menu, a cookie called lang is stored for one year so the menu opens in that language next time. Menus set no advertising or analytics cookies.

When you visit beemenu.gr

On this website (home page, privacy, terms) we use Google Tag Manager and Google Analytics to see how many people visit beemenu.gr and which pages they view. The restaurant menus and the management area have no analytics or advertising tools. Fonts load from our own server, not from third parties.

Analytics and marketing cookies are set only if you accept them. Until you choose, no such cookie is stored on your device. The legal basis is your consent, and you can change or withdraw it at any time with “Cookie settings” at the bottom of every page. Even if you decline, the Google tool still loads and may receive technical details of the visit, such as the IP address, without setting cookies on your device and without identifying you.

On the beemenu.gr website (not in the menus or the management area) the following also applies. The bdt_consent cookie remembers your choice for 6 months and is necessary. If you accept analytics, Google sets cookies such as _ga and _ga_* (up to 2 years) to tell visitors apart without knowing who they are. If you allow “Marketing”, Google may set advertising cookies such as _gcl_* (up to 90 days). We do not use them at present. The menus and the management area have no third-party cookies.

Like any website, the server logs technical details of each request (IP address, browser, time) for security and to track down errors.

When you manage your menu

For your account we keep your email and your password in hashed form. When you sign in, a session cookie is set that expires after 12 hours.

To block repeated wrong sign-in attempts, we record the email and IP address of each failed attempt.

We keep your menu content (dishes, prices, descriptions, photos, logo) and a history of every change so you can undo it. If you change the menu by typing or talking, the history also keeps what you typed or said.

When you talk, speech recognition runs in your browser and only the text reaches us. Your browser may send the audio to its maker (Google, in Chrome) under its own terms.

Why we use it

We need your account and menu details to provide the service we agreed with you. We keep technical details and failed sign-ins to keep the service secure (legitimate interest). The language cookie is only set when you pick a language.

Which providers handle it

Vercel: hosting the site and storing photos and logos. Neon: the database. OpenRouter and the AI model provider behind it: they receive the text of a change you type or say, and menu text for translation. Google (Google Ireland Limited): Tag Manager and Analytics for the website statistics, on the website only and according to your choice. Data may be transferred outside the EEA, with the safeguards the GDPR provides.

We do not sell data or share it for advertising. Some of these providers may process data outside the European Economic Area. When they do, the transfer is covered by the European Commission’s standard contractual clauses.

How long we keep it

Account and menu data for as long as we work together. When that ends we delete it, apart from what we must keep for tax purposes. The language cookie expires after one year and the session cookie after 12 hours. The bdt_consent cookie expires after 6 months and Google’s _ga cookies after up to 2 years. Google’s _gcl cookies expire after up to 90 days.

Your rights

You can ask to see, correct or delete your data, to restrict or object to its use, and to receive it as a file. Write to info@beedigital.gr.

If you think we have not respected your rights, you can complain to the Hellenic Data Protection Authority (www.dpa.gr).