Privacy Policy
How this website handles your data
This website is deliberately simple. It sets no cookies, contains no analytics, no tracking pixels and no advertising, and it loads nothing from third-party servers — the fonts, the film and every script are served from our own server. What follows describes the little that does happen.
1. Who is responsible
- Controller
- Velmore P.T. LTD registered name and address to be confirmed
- Café
- Dimitriou Dimitriadi 4A, 6021 Larnaca, Cyprus
- Phone
- +357 24 333034
- Email for data protection
- contact address to be added
2. Server log files
When you open a page, your browser sends a request to our web server, and the server records it. This is a technical necessity, not a choice. Each entry contains:
- your IP address
- the date and time of the request
- the file requested and the amount of data transferred
- the page you came from, if your browser sent one (referrer)
- your browser and operating system as reported by your browser (user agent)
These entries are needed to deliver the site, to keep the server stable and secure, and to investigate attacks or faults. The legal basis is our legitimate interest in operating a functioning and secure website, Article 6(1)(f) GDPR. The data is not combined with any other source and is not used to identify individual visitors. Log files are deleted by the hosting provider after a short retention period exact retention period to be confirmed with the host.
3. Hosting
This website is hosted on infrastructure operated by our hosting provider provider's legal entity to be added, on servers located in the European Union. The provider processes the log data described above on our behalf as a processor under Article 28 GDPR.
4. Cookies, analytics and tracking
None. This site stores nothing on your device — no cookies, no local storage — and there is no analytics or tracking of any kind. That is why you are not being asked to consent to anything: there is nothing to consent to.
5. Fonts, scripts and media
The typefaces, the animation library and the film are all delivered from our own server. No request goes to Google, to a content delivery network, or to any other third party while you are reading this site, so no data about your visit reaches them.
6. Links to other services
The site links to Wolt (delivery orders), Instagram and Google Maps. These are ordinary links — nothing from those services is embedded here, and no data is sent to them while you stay on our pages. As soon as you follow such a link you are on their infrastructure, and their privacy policies apply.
7. If you contact us
If you write or call us, we use what you tell us solely to answer you. The legal basis is Article 6(1)(b) GDPR where your message concerns a booking or an order, and otherwise our legitimate interest in responding to enquiries, Article 6(1)(f) GDPR. We keep such correspondence only as long as it is needed, unless a statutory retention period applies. Note that our email runs on Google Workspace, so messages you send us are processed on Google's servers.
8. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you (Art. 15)
- have inaccurate data corrected (Art. 16)
- have your data erased (Art. 17)
- have processing restricted (Art. 18)
- receive your data in a portable format (Art. 20)
- object to processing based on legitimate interest (Art. 21)
To exercise any of these, contact us using the details in section 1. You also have the right to lodge a complaint with a supervisory authority. In Cyprus this is the Office of the Commissioner for Personal Data Protection.
9. Encryption
This site is served over HTTPS. The connection between your browser and our server is encrypted, which you can verify by the padlock in the address bar.
10. Changes to this policy
If the site changes in a way that affects how data is handled, this policy will be updated accordingly. The date below tells you which version you are reading.
Last updated: 4 September 2026