Privacy Policy

This policy describes the methods and purposes of the processing of personal data carried out by Kithos in relation to content dedicated to coffee and restaurants in Australia. The approach protects data subjects, with attention to the relevance of data and the transparency of collection, storage and consultation operations. The information provided helps to understand how data is used, which legal bases support the activities and which rights the user has.

Data Controller: Kithos, with address at 633 Bourke St, Surry Hills NSW 2010, Australia; contact email: kithos@gmail.com; phone: +61731028476. The controller defines the purposes and oversees the protection processes applied to the processed data.

Types of data: identifying and contact data provided via forms or communications (for example name and email), technical data relating to browsing and use of the site (logs, pages visited, session identifiers), preferences expressed regarding content such as menus, hours and reviews. Data is processed in a manner proportionate to the purposes described.

Purposes and legal bases: provision of informative content about selected venues, sending communications requested by the user, handling responses to questions and update requests, improving the experience through aggregate metrics. The legal bases include performance of pre-contractual measures at the request of the data subject, consent where required for periodic communications, legitimate interest for security, technical maintenance and abuse prevention.

Processing methods: systems and procedures follow minimization criteria, with access controls, logical separation of environments and periodic backups. Organizational and technical measures reduce risks of alteration, loss or unauthorized access. Authorized personnel receive clear instructions and appropriate training on data protection.

Retention periods: data remains available for periods related to the purposes; information for promotional communications remains active as long as the user maintains consent, while technical logs follow rotation cycles oriented toward security and diagnostics. Once the relevant terms expire, data is deleted or anonymized through documented procedures.

Disclosure and recipients: strictly necessary activities may involve providers that supply technological or organizational support services. These entities operate as external processors on the basis of agreements that provide for confidentiality obligations, specific instructions and appropriate controls.

Transfers: where operational needs arise with infrastructures located outside the European Economic Area, flows are based on recognized safeguard instruments, such as standard contractual clauses and impact assessments referring to the specific processing chain.

Data subject rights: access to data, rectification, erasure, restriction, portability, objection to processing where legitimate grounds exist, and the possibility of withdrawing consent at any time for activities that require it. Requests can be sent to the email address indicated in this policy. Users may also contact the competent supervisory authority to protect their legal positions.

Cookies and similar technologies: the site uses technical cookies for essential functionality and optional cookies for aggregate measurements and experience improvement. An initial choice is proposed via a specific banner and remains modifiable thereafter by deleting the relevant preference from the browser or by sending a request. The duration of preferences is defined according to operating needs and is indicated in the banner.

Security: the infrastructure adopts encryption in transit, segmentation of environments and periodic monitoring. Incident management procedures establish communication channels and times, with recovery plans that support operational continuity and data integrity.

Minors: the content is aimed at an adult audience. Sending contact requests or subscriptions to periodic communications requires the user's eligibility under applicable regulations and the practices of the reference country.

Policy updates: any changes enter into force upon publication on this page. Previous versions or main changes are summarized to facilitate consultation. Continued use of the services after publication of the changes indicates acceptance of the new text.

For clarifications and requests relating to the processing of personal data, you can contact Kithos at the email address indicated above or at the phone number shown on this site. The constant commitment to transparency and protection guides the entire information lifecycle, with attention to data quality and the proportionality of the activities carried out.