Skip to content
ALATRO

Privacy & cookies

Last updated: 25 September 2026

1. Data controller

ALATRO ΑΣΤΙΚΗ ΜΗ ΚΕΡΔΟΣΚΟΠΙΚΗ ΕΤΑΙΡΕΙΑ (ALATRO Non-Profit Civil Company), 20 Alexandroupoleos St., 115 27 Athens, Greece. Phone: +30 210 3472341. Email: info@alatro.com. For any data protection matter, write to info@alatro.com.

2. What data we collect

  • Bookings: first name, last name, email, phone, date and time, number of guests, and anything you write in the notes (e.g. allergies).
  • Donations: amount, cause and, if you provide them, your name, email and message.
  • Applications from young musicians: the musician's name and age, the parent's/guardian's name for minors, email, phone, instrument, links and message.
  • Contact: whatever you send us by email or phone.
  • Technical data: IP address and browser type, for website security (e.g. spam prevention), and, only with your consent, measurement data from the Facebook Pixel.

3. Why, and on what legal basis

  • To handle your booking, donation or application and send you the related emails (performance of a contract or pre-contractual steps, Art. 6(1)(b) GDPR).
  • For accounting and tax obligations (legal obligation, Art. 6(1)(c)).
  • For website security and abuse prevention (legitimate interest, Art. 6(1)(f)).
  • For measurement and advertising via Facebook Pixel and the Conversions API (consent, Art. 6(1)(a)). You can withdraw it at any time.

We do not sell your data, and we do not use it for newsletters without your explicit consent.

4. Who receives it

  • Twilio SendGrid (USA): sending the website's emails.
  • The website's hosting provider, where the database is stored.
  • Meta Platforms (Facebook): only if you have consented to measurement. Emails and phone numbers are sent hashed.
  • The artists and hosts of an event receive only what they need (e.g. your name and the number of guests).
  • Public authorities, when required by law.

Where data is transferred outside the EU (e.g. to the USA), this is done with the appropriate GDPR safeguards (the EU–US Data Privacy Framework adequacy decision or standard contractual clauses).

5. How long we keep it

  • Bookings and applications: up to 2 years after the event or the review of the application, unless the law requires longer.
  • Donations: as long as tax law requires.
  • Technical security logs: for a short period.

6. Your rights

You have the right of access, rectification, erasure, restriction of processing, portability and objection, and the right to withdraw your consent. Write to info@alatro.com and we will reply within one month.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (1-3 Kifisias Ave., 115 23 Athens, www.dpa.gr).

7. Minors

Applications for underage musicians are submitted only by a parent or guardian, who consents to the processing of the data.

8. Cookies and similar technologies

  • Essential: your cookie choice is stored in your browser (localStorage, “alatro-consent”). Administrators get a login cookie on the admin pages only.
  • Measurement & advertising: the Facebook Pixel (cookies _fbp, _fbc) loads only after you click “Accept”. If you click “Reject”, it does not load.

To change your choice, clear this website's data in your browser; the banner will appear again.

9. Security

The website runs on HTTPS only, the admin area is protected by a password and additional security measures, and the photos we upload are stripped of location metadata.

10. Changes

We may update this policy. The date at the top shows the latest change.