Privacy Policy
Last updated: March 2026
Who we are
Kefalonia Caves (Drogarati Cave & Melissani Cave) is operated by the Municipality of Kefalonia, Greece. This site is the official ticket booking platform for both caves.
What data we collect
When you book a ticket, we collect: your full name, email address, optional phone number, the cave and time slot selected, ticket quantities, and a booking reference. We do not collect payment card data directly — payments are processed by Stripe.
How we use your data
Your data is used solely to: confirm your booking, send your e-ticket and QR code, send a visit reminder email approximately 2 hours before your appointment, and handle any customer service requests.
Cookies
We use strictly necessary session cookies to operate the booking system. We do not use advertising, tracking, or third-party analytics cookies. You may decline optional cookies without affecting your ability to book.
Data retention
Booking records are retained for 2 years for tax and operational purposes. After 2 years, personal identifiers (name, email, phone) are automatically anonymized. Anonymized statistical data may be retained indefinitely.
Your rights (GDPR)
Under GDPR, you have the right to: access your data, correct inaccurate data, request deletion (right to erasure), and object to processing. Use the form below to request deletion of your booking data. For other requests, contact us at privacy@kefalonian.gr.
Data transfers
Your data is stored in Supabase (EU region). Email delivery is handled by Resend (EU-compliant). No personal data is transferred outside the EEA without appropriate safeguards.
Contact
For privacy questions, contact: Municipality of Kefalonia, Argostoli, Kefalonia 28100, Greece. Email: privacy@kefalonian.gr
Request Data Deletion
Use the form below to anonymize all bookings linked to your email across both caves.