Privacy Notice
Trilogy F&B Ltd (hereinafter referred to as “Trilogy F&B”, “we”, “us”, “our”), registered in Cyprus under registration number HE 452163, with registered office at Agia Filaxeos, Nikolas Court, Office No. 203, 3025 Limassol Cyprus, acts as the Data Controller in connection with this Privacy Notice.
Trilogy F&B is committed to protecting your personal data and respecting your privacy. This Privacy Notice explains how we collect, use, retain and share your personal data when you interact with us, including through our website, reservation services or any other communications with us. This Notice is provided in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the Cyprus Law 125(I)/2018.
1. Personal Data We Collect
We may collect and process the following categories of personal data:
- Data you provide when making a reservation through our website or by telephone (such as your name, contact number, email address, date and time of booking and any special requests);
- Data you provide when choosing to receive news, events and offers (marketing preferences);
- Data you provide when submitting a complaint to us;
- Data you provide when collaborating or partnering with us;
- Data you provide when completing customer satisfaction surveys;
- Data you provide when contacting us in any way (including by email info@orislimassol.com, social media or telephone);
- Details of your visits to our website, collected through cookies or similar technologies;
- Data you provide when you enter a competition or promotion;
- Data you submit when applying for a job through the “Join our Team” section on our website.
We do not intentionally collect special categories of personal data (such as health information) unless you voluntarily provide such information in connection with your reservation (for example, to notify us of allergies). Such data will only be processed where necessary to accommodate your request.
2. Lawful Basis for Processing
We process your personal data only where permitted by law. Depending on the processing activity, we rely on one or more of the following legal bases:
- Performance of a contract: to confirm and manage your reservation, respond to your requests and provide our services;
- Compliance with legal obligations: to comply with Cyprus and EU laws, including tax, accounting and health and safety regulations;
- Legitimate interests: to operate and improve our business (such as customer service improvement and internal administration);
- Consent: where you have given your explicit consent (such as for marketing communications). You may withdraw your consent at any time by contacting us at dpo@orislimassol.com.
3. Use of Personal Data
We use your personal data for the following purposes:
- To provide our services;
- To manage your reservations and enquiries;
- To facilitate reservation deposits through our partner Eat App, including the transmission of payment instructions and confirmation notifications. All payment transactions are processed directly and securely by JCC Payment Systems Ltd, and Trilogy F&B Ltd does not access or store your payment card details;
- To communicate with you regarding bookings, confirmations and service-related matters;
- To send you news, updates and promotional offers (only if you have opted in);
- To evaluate job applications submitted through our website;
- To improve our services, website functionality and customer experience;
- To comply with legal and regulatory obligations;
- To protect our business, enforce our rights and manage disputes.
4. Where and How We Store Your Personal Data
We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised access or disclosure. Your personal data is stored on secure servers within the European Economic Area (EEA) and may be processed by authorised third-party service providers strictly for the purposes set out in this Privacy Notice.
5. Cookies
Our website uses cookies and similar technologies to enhance your user experience, analyse site usage and improve our services. You may manage or disable cookies through your browser settings. However, please note that some features of our website may not function properly without cookies. For more information, please refer to our Cookie Policy or contact us at dpo@orislimassol.com.
6. Marketing and Advertising
We may use your personal data to deliver advertising to you and measure the effectiveness of our marketing campaigns. This may include online advertising through platforms such as Google and Meta (Facebook/Instagram). Where required by law, such activities are carried out based on your consent, which you may withdraw at any time.
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable law. Retention periods depend on:
- The type and nature of the data;
- The purpose for which it was collected;
- Any legal, regulatory or contractual requirements;
- The establishment or defence of legal claims.
When personal data is no longer needed, it is securely deleted or anonymised. For more information about our retention practices, please contact us at dpo@orislimassol.com.
8. Disclosure of Personal Data
We do not sell or rent your personal data. We may disclose your data only where necessary and lawful:
- To authorised employees who need access for operational purposes;
- To our reservation service provider A&K EatApp Cyprus Ltd (“EatApp”), who processes reservation data on our behalf under strict confidentiality and data protection obligations;
- To JCC Payment Systems Ltd, which operates the secure payment gateway used for deposit authorisations and releases. All payment card data is collected and processed directly by JCC Payment Systems Ltd on its own systems and is never accessible to Trilogy F&B Ltd;
- To trusted third-party service providers (such as website hosting, IT support and communication services) who act as Data Processors;
- To professional advisors where applicable;
- To regulatory, governmental or law enforcement authorities where required by law;
- To a successor organisation in the event of a business transfer, merger or restructuring.
All third parties that process data on our behalf are bound by contractual data protection obligations.
9. International Data Transfers
We do not transfer your personal data outside the EEA unless adequate safeguards are in place in accordance with Chapter V of the GDPR. Where our service providers transfer or access data from outside the EEA, such transfers are protected using Standard Contractual Clauses (SCCs) or other approved transfer mechanisms.
10. Your Rights
You have the following rights regarding your personal data:
- Right of access: You have the right to request confirmation as to whether we process your personal data and to receive a copy of the data we hold about you.
- Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data concerning you.
- Right to erasure (“right to be forgotten”): You have the right to request the deletion of your personal data where there is no lawful reason for us to continue processing it (for example, where the data is no longer necessary or you withdraw your consent).
- Right to restrict processing: You have the right to request that we limit the processing of your personal data in certain circumstances, such as where the accuracy of the data is contested.
- Right to object: You have the right to object to the processing of your personal data where we rely on legitimate interests as the legal basis. You also have the absolute right to object to processing for direct marketing purposes at any time.
- Right to data portability: You have the right to receive your personal data in a structured, commonly used and machine- readable format and to request that we transfer it to another organisation where technically feasible.
- Right to withdraw consent at any time: Where processing is based on your consent (for example, marketing communications), you have the right to withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.
- Right to lodge a complaint: You have the right to lodge a complaint with the Cyprus Data Protection Authority at www.dataprotection.gov.cy.
To exercise any of your rights, you may contact us at dpo@orislimassol.com. We will respond to your request without undue delay and in any event within one (1) month, in accordance with Article 12(3) GDPR.
11. Personal Data of Minors
Our services are not directed to individuals under the age of sixteen (16), and we do not knowingly collect personal data from minors. If we become aware that we have collected personal data from a minor without appropriate consent, we will delete it immediately.
12. Updates to this Privacy Notice
We may update this Privacy Notice from time to time to reflect changes in our data processing practices or legal requirements. Any updates will be posted on our website with a revised “Last Updated” date.
13. Contact Us
If you have any questions or concerns about this Privacy Notice or the way we process your personal data, please contact us at:
Trilogy F&B Ltd
Agia Filaxeos, Nikolas Court, Office No. 203,
3025 Limassol Cyprus
Tel: +357 25 747878
Email:dpo@orislimassol.com
Last updated: 13 October 2025