Privacy policy

Who is responsible

BeeQR is run by BeeDigital (Michalis Koulouras & Stefanos Patelis), El. Venizelou 161, Malia, Crete, Greece. Phone +30 2817 001168, email info@beedigital.gr.

For this site, the contact form and property accounts, we are responsible for the data.

For anything a guest enters in a property’s guide, the property is responsible. We process those details only on the property’s behalf and on its instructions. Every guide has its own privacy notice at beeqr.gr/g/<property>/privacy.

The contact form

When you send the form we receive the property name, its type, the number of rooms, your phone number and, if you add it, your email.

The details reach info@beedigital.gr as an email sent through Brevo. We do not store them in a database. We use them only to call you about BeeQR, because you asked us to.

If sending fails, the details are written to the server log so your request is not lost.

To limit repeated sends, we keep a one-way hash of your IP address in server memory. It is never written to storage and is gone when the server restarts. The address itself is never stored.

When you visit beeqr.gr

On this website (home page, privacy, terms) we use Google Tag Manager and Google Analytics to see how many people visit beeqr.gr and which pages they view. The property guides and the admin have no analytics or advertising tools.

Analytics and marketing cookies are set only if you accept them. Until you choose, no such cookie is stored on your device. The legal basis is your consent, and you can change or withdraw it at any time with “Cookie settings” at the bottom of every page. Even if you decline, the Google tool still loads and may receive technical details of the visit, such as the IP address, without setting cookies on your device and without identifying you.

As with any website, our host (Vercel) records technical details of each request, such as the IP address, to run and protect the service.

The demo on the page is a real BeeQR guide. If you use it, the guide cookies described below apply.

Property accounts

For each staff account we keep the email address and password. Supabase handles the password, and it is never stored in readable form.

We also keep what the property enters: property details, texts, menus, rooms, and the email addresses or WhatsApp numbers that receive alerts. We need these to provide the service we agreed.

We keep them for as long as we work together. When that ends we delete them, apart from what we must keep for tax purposes.

Guest details in the guide

The guide takes orders, requests and check-in before arrival. It keeps only what the property needs to handle them: the room, the order or request, a note, and for check-in the guests’ details and document number.

We never keep a copy of a passport or ID card. Document numbers are stored encrypted and deleted automatically once the number of days the property has set after departure has passed (90 unless the property changes it).

Contact details are kept only if the guest consents. To limit abuse we keep a hash of the IP address, never the address itself, and delete it after 30 days.

Staff alerts show the room and the request. A check-in alert also shows the lead guest’s name, the dates and the arrival time. Alerts never include contact details or document data.

Providers

Vercel: hosts the app. Server code runs in its Dublin region.

Supabase: database and files, in the EU (Ireland).

Brevo: sends the contact form emails and staff alerts.

Meta: WhatsApp alerts, only where the property uses them.

OpenRouter: machine translation of guide texts. Personal data is never sent for translation.

OpenFreeMap: the maps in the guide. When a guide shows a map, the guest’s browser loads the map tiles directly from OpenFreeMap, which therefore sees the guest’s IP address.

Open-Meteo: the weather in the guide. We send it only the property’s location.

Google (Google Ireland Limited): Tag Manager and Analytics for the website statistics, on the website only and according to your choice. Data may be transferred outside the EEA, with the safeguards the GDPR provides.

Cookies and browser storage

The guide uses three cookies: language (1 year), the room after a room QR code is scanned (1 year) and the cart (3 days). To count page views without identifying anyone, the browser keeps a visit marker for the current session only.

In the admin, login cookies keep you signed in, and the browser remembers whether you turned on alerts.

On the beeqr.gr website (not in the guide or the admin) the following also applies. The bdt_consent cookie remembers your choice for 6 months and is necessary. If you accept analytics, Google sets cookies such as _ga and _ga_* (up to 2 years) to tell visitors apart without knowing who they are. If you allow “Marketing”, Google may set advertising cookies such as _gcl_* (up to 90 days). We do not use them at present. The guide and the admin have no third-party cookies.

Your rights

You can ask to see, correct or delete your data, to restrict or object to its use, or to receive a copy. Write to info@beedigital.gr.

If you are a guest of a property, contact the property. It can export or delete your details from the admin.

You can also complain to the Hellenic Data Protection Authority (www.dpa.gr) or the authority in your country.

Changes

When anything changes in how we handle data, we update this page and the date at the top.