Legal notice
Legal disclosure for the website and for the café it belongs to.
The business
- Trading name
- Cat Café Zepos Garden
- Legal name
- Δ. Ψαρρής – Δ. Μπράτης Ο.Ε.
- Legal form
- Ο.Ε. — Ομόρρυθμη Εταιρεία (general partnership)
- Owners
- Διονύσιος Ψαρρής (Dionysios Psarris)
Διονύσιος Μπράτης (Dionysios Bratis) - Address
- Crystal Beach Road
Kalamaki 291 00
Zakynthos, Greece - Tax number (ΑΦΜ)
- 801582112
- Tax office (ΔΟΥ)
- Δ.Ο.Υ. Ζακύνθου (Zakynthos)
- Commercial register (ΓΕΜΗ)
- 159557324000
- VAT number
- EL801582112
Contact
- Telephone
- +30 2695 033496
+30 699 386 6555 - Responsible for content
- Διονύσιος Ψαρρής & Διονύσιος Μπράτης
Dispute resolution
The European Commission provides a platform for online dispute resolution at ec.europa.eu/consumers/odr. We are neither obliged nor willing to take part in dispute resolution proceedings before a consumer arbitration board.
Liability for content and links
We take care over the content of these pages but cannot guarantee that everything is accurate, complete or current — opening hours, the menu and the cats in particular change. Where this site links to external websites, we have no influence over their content and accept no responsibility for it. If you find something here that should not be here, tell us and we will remove it.
Copyright
The text, illustrations, photographs and code on this site belong to their respective authors. The Captain Zepos mark and the drawn cats are the property of Cat Café Zepos Garden. Photographs left in the guest log remain the property of the people who took them and are published here with their consent.
Website
Designed and built by PROvisions Concepts & Consulting, donated to the café. Hosted on Vercel; data stored with Supabase in the EU (Frankfurt).
Privacy policy
Short version: we collect almost nothing. If you sign the guest log, we publish what you send us, and we delete it whenever you ask.
Who is responsible
The data controller for this website is:
- Controller
- Δ. Ψαρρής – Δ. Μπράτης Ο.Ε. (D. Psarris – D. Bratis O.E.)
Crystal Beach Road, Kalamaki 291 00, Zakynthos, Greece - Contact
- zeposgarden@gmail.com
- Supervisory authority
- Hellenic Data Protection Authority (ΑΠΔΠΧ), dpa.gr
Visiting the website
We run no analytics, no tracking pixels and no advertising. We set no cookies of our own, and nothing on this site profiles you.
We do count how many times a page is opened each day, so the café can see whether anyone is reading it. That count is a single number per day. It records nothing about who you are, nothing about your device, and nothing is stored on your device — two people opening the page look exactly the same to us, and so does the same person twice. It is not personal data, which is why you have not been asked to agree to it.
Our host, Vercel, records ordinary server log data when a page is requested — including the IP address, the time, and which page was fetched. This is technically necessary to deliver the site and to defend it against attack. Legal basis: legitimate interest, Art. 6(1)(f) GDPR. We do not use these logs for anything else.
The fonts and images on this site are served from our own domain. Nothing is loaded from Google Fonts or any other third party, so no request of yours reaches them.
No cookie banner
You have not been asked to accept cookies because there is nothing to accept. We use no non-essential cookies and no third-party trackers. The only cookie this site can set is a session cookie on the staff dashboard, which visitors never see.
The guest log
The guest log is signed in the garden. If you scan the code on your table and complete the form, you send us:
- One photograph, taken by you
- A short message
- A name — a first name is plenty
- Optionally, where you are visiting from
- A record that you gave consent: the date, the time, and which version of this policy you agreed to
Legal basis: your consent, Art. 6(1)(a) GDPR. Nothing is published until a human at the café has looked at it and approved it. You can withdraw consent at any time, and withdrawing it does not affect anything that was lawful before you did.
One technical detail, for completeness. When you open the form, your browser stores a random number for itself. It exists so that one device cannot flood the guest log with entries, it is tied to nothing about you, and it never leaves your browser except as that number. Clearing your browser data removes it. It is there to keep the guest log usable, not to recognise you, and it is the only thing this site stores on your device.
What happens to your photograph
Your photograph is resized and re-encoded in your own browser before it is ever sent to us. That process discards the original file completely, which means the location, camera, date and any other metadata your phone attached to it never reach our server. We receive only the picture.
Photographs of people
If there are people in your photograph, you are confirming that every one of them is happy to appear on a public website. Please do not upload photographs of other people’s children. If a photograph of your child has ended up here and you want it gone, email us and it will be removed the same day — no explanation needed and no questions asked.
How long it stays up
Entries stay published until you ask us to take them down, or until we retire them ourselves. Entries that are not approved are kept for seven days — long enough for us to undo a mistake — and are then deleted automatically, together with their photograph.
Getting an entry removed
We deliberately do not ask for your email address, which means we have no way to contact you later — and no way to recognise you if you come back. So removal works by asking us: email zeposgarden@gmail.com with the name on the entry and roughly when you left it, or the reference shown to you after you submitted, and we will delete it. We do not require you to prove who you are; if you can identify the entry, that is enough.
Adopting a cat
If you email or message us about a cat, we keep that correspondence for as long as the conversation is useful and for as long as we are legally required to. Legal basis: steps taken at your request before entering into an agreement, Art. 6(1)(b) GDPR, and our legitimate interest in placing cats in homes that suit them, Art. 6(1)(f).
The Ask about… buttons open your own email app or WhatsApp. Until you press send, nothing has been sent to us. If you use WhatsApp, that conversation is subject to WhatsApp’s own privacy terms, not ours.
Who processes data for us
- Vercel
- Hosting and serverless functions. Server logs. Functions run in Frankfurt (fra1). Static pages are cached worldwide.
- Supabase
- Database and file storage for the guest log and the adoption list. Hosted in the EU (Frankfurt, eu-central-1).
- Resend
- Sends one email to the café when a guest log entry is waiting for approval. The email says only that something is waiting — it carries no name, no message and no photograph, so nothing about you passes through it.
Each of these acts as a processor on our instructions under Art. 28 GDPR, and each is contracted through their standard data processing agreement.
Your data is stored in the European Union: the database and the photographs sit in Frankfurt, and the code that handles them runs there too. Once an entry has been approved it becomes public content, and like any page on the internet it is then delivered through a worldwide network of servers so that it loads quickly wherever someone opens it.
Your rights
Under the GDPR you have the right to ask us for a copy of your data, to have it corrected, to have it deleted, to restrict or object to how we use it, to receive it in a portable form, and to withdraw consent at any time. Email zeposgarden@gmail.com and we will answer within one month. If you think we have handled your data badly, you can complain to the Hellenic Data Protection Authority.
Security
The site is served over HTTPS. Uploaded images are re-encoded before storage, so no original file is ever kept. The staff dashboard is password protected, rate limited, and the credentials that can change data are held on the server and never sent to a browser.
Changes
If this policy changes in a way that affects what you agreed to, the version recorded against your guest log entry tells us which text you consented to. Older entries keep their original basis.
Version 1.0 · last updated 7 September 2026