Legal

Privacy Policy

Protecting your data matters to us. Rodist works without tracking, advertising cookies or third-party analytics. Personal data is processed only to the limited extent described below. The General Data Protection Regulation (GDPR) applies.

1. Controller

2. Hosting and server log files

The website is hosted on a server in Germany (provider: netcup GmbH). When you access the pages, the server automatically processes technical access data in server log files: your IP address, the date and time of access, the requested resource, and the transmitted browser and operating-system type. This data serves solely the secure and stable operation of the website and the prevention of attacks, is stored only briefly, and is not combined with other data.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure operation of the website).

3. Cookies

Rodist uses a single cookie: lang stores only the language you deliberately chose (English or German), so the right language version is shown on later visits. It is set only when you actively pick a language, contains no identifier, and expires after one year. As it is strictly necessary for the function you requested, no consent is required. No tracking or advertising cookies are used.

4. Newsletter / waitlist

If you join the waitlist, we process your email address to inform you about the launch of Rodist and newly added venues. Sign-up uses the double opt-in procedure: you first receive a confirmation email and are only added to the list after confirming. Delivery and management run on self-hosted software (listmonk) on our own server; there is no transfer to third parties.

Legal basis: Art. 6(1)(a) GDPR (consent). You can withdraw your consent at any time via the unsubscribe link in every email or by message to info@rodist.com.

5. Market-research survey

Before launch we run a voluntary survey. In doing so we process:

• your answers (selected values or free text), not directly identifying;
• your email address only if you agree to the separate newsletter opt-in within the survey;
• a pseudonymised value of your IP address (a salted, truncated SHA-256 hash; the real IP is never stored), a truncated browser string and the timestamp, solely to protect against spam and duplicate submissions.

The survey data is used only to shape the restaurant guide. It is not shared with third parties and is automatically deleted after 365 days at the latest.

Legal basis: Art. 6(1)(a) GDPR (consent).

6. Third parties and third countries

No personal data is transferred to third parties or to countries outside the EU/EEA. No analytics, advertising or social-media services are embedded.

7. Retention

Personal data is stored only as long as necessary for the respective purpose or until you withdraw your consent. Survey data is deleted after 365 days at the latest; server log files are kept only briefly.

8. Your rights

Under the GDPR you have the following rights:

• access to your stored data (Art. 15),
• rectification of inaccurate data (Art. 16),
• erasure (Art. 17),
• restriction of processing (Art. 18),
• data portability (Art. 20),
• objection to processing (Art. 21),
• withdrawal of any consent given (Art. 7(3)) with effect for the future.

An informal message to info@rodist.com is enough. We can delete your survey answers based on your email address.

9. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the Hellenic Data Protection Authority (www.dpa.gr).

Last updated: 16 June 2026