Legal
Privacy Policy
Last updated: 6 August 2026
This Privacy Policy explains how Ficardo Restaurant & Garden (“we”, “us”, “our”), located atPoseidonos Avenue 50A, 8042 Kato Paphos, Cyprus, processes personal data when you visit our website or submit a reservation request. We aim to handle information carefully and in line with the EU General Data Protection Regulation (GDPR) and applicable Cypriot law.
1. Data controller
The data controller is Ficardo Restaurant & Garden, Poseidonos Avenue 50A, 8042 Kato Paphos, Cyprus. Contact:+357 26 960184 or email (provisional contact address pending confirmation): hello@ficardo.cyConfirm email.
2. What we collect
- Reservation requests: name, email, phone, preferred date and time, party size, seating preference, occasion, special requests, and consent timestamp.
- Technical data: limited server logs and a hashed network identifier used only for abuse prevention / rate limiting.
- Cookies: essential cookies for site function and, only if you consent, optional analytics or marketing cookies (see our Cookie Policy).
3. Why we process data
- Contract / pre-contractual steps: to receive, manage and respond to reservation requests and related communications.
- Legitimate interests: to operate and secure the website, prevent spam, and improve guest service — balanced against your rights.
- Consent: where you tick the reservation consent box, or where optional cookies are used.
- Legal obligations: where we must retain certain records under applicable law.
4. Sharing
We do not sell your personal data. We may share information with trusted service providers who help us run email delivery or hosting, solely to perform those services, and with authorities if required by law. Staff who manage reservations may access booking details as needed to confirm your table.
5. Retention
Reservation records are kept for as long as needed to manage your visit and for a reasonable period afterward for guest service and dispute handling (typically up to 24 months unless a longer period is required). Cookie preference records follow the periods described in the Cookie Policy.
6. Your rights
Under GDPR you may have the right to access, rectify, erase, restrict or object to certain processing, and to data portability where applicable. Where processing is based on consent, you may withdraw consent at any time without affecting prior lawful processing. You may lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus.
7. International transfers
If a provider processes data outside the EEA/UK, we will ensure appropriate safeguards (such as standard contractual clauses) where required.
8. Updates
We may update this policy from time to time. The “Last updated” date at the top will change when we do.