Privacy policy
1. Who we are
The Kala Nera Guide website and mobile-style web app (“PWA”) are operated for local discovery of businesses and related services around Kala Nera, Pelion, Greece (project “E‑Project”). For privacy questions contact info@spiti.tech.
Some pages show technical attribution (for example “Powered by KanteKlik”) linking to that same contact channel, and may include machine-readable site descriptions for search engines (such as schema.org JSON‑LD naming publisher roles). Those disclosures do not add visitor profiling beyond what this notice describes elsewhere.
2. What this covers
This policy describes categories of data processing tied to features actually shipped in the current site/app bundle (including cached directories, bus timetable integration, lightweight telemetry, analytics scripts, offline behaviour, and links or embeds to third-party sites).
This document is informational and does not constitute legal advice.
3. Analytics & measurement (browser)
3.1 Google Analytics 4
Certain pages include Google Analytics 4, operated by Google. That service may use cookies or similar technologies and process usage-related data under Google’s policies. See Google’s privacy documentation for retention, regional controllers, and available controls.
4. Application telemetry
Shortly after load, the client sends a small JSON payload (typically ~1.5 s delay) via HTTPS POST to an endpoint on self-hosted workflow automation operated for this site. We intentionally do not publish the full hostname here. Regulatory or data-protection enquiries (including processor details where appropriate): info@spiti.tech.
The payload supports secure operation and product diagnostics only — not advertising profiling. It may include: event kind (for example open, first recorded install/version, bundle update); whether the UI ran as an installed PWA or in the browser; coarse app/stylesheet version markers; coarse OS/device class from the user-agent; viewport size; referrer or “direct”; light/dark preference; and a human-readable timestamp.
The server may derive approximate, non-precise location context from the connection IP using standard geo-lookup services, for aggregated operational statistics.
No telemetry POST is sent while you stay on privacy.html or privacy-el.html.
5. Directory & timetable data
The business directory and bus timetable views load content over HTTPS from backend endpoints operated for this site. Like any web request, infrastructure may log technical metadata (for example IP address and timestamps). No login is required to view this information.
Bus timetables: schedules shown are for convenience and reflect official KTEL information. For Kala Nera and the wider Pelion area, the regional operator is KTEL Magnesia (Volos). For authoritative times, cancellations, and service changes, follow that operator’s official channels — we do not list third‑party timetable URLs in this notice.
Responses may be cached briefly on the server (including material maintained via spreadsheets or APIs behind those endpoints) to reduce upstream load; that processing happens server-side, not in your browser.
5.1 Business detail pages (/business/)
Listings may also be published as static pages under /business/ on this domain. For privacy purposes, treat them like other public pages on the site: the same client bundle applies unless this notice says otherwise.
6. Weather widget
Where the weather chip is shown, the app calls Open‑Meteo (api.open-meteo.com) using fixed coordinates for Kala Nera. No precise device GPS is sent for that lookup. Review Open‑Meteo’s privacy statement for details.
7. Embedded content & outbound links
Pages may embed or link to external resources (e.g. live webcam images, Meteoblue, Google Maps, Facebook, KTEL websites). Opening those links or embeds exposes standard connection data to those third parties under their policies.
7.1 “Add your Business” form (Tally)
The listing-interest form for adding a business is embedded from Tally (tally.so). Your submission is processed by Tally under their terms and privacy policy; the site operator receives the response through that product for operational handling (review, publication decisions, or follow-up).
7.2 Mobile “More” sheet
On narrow viewports the bottom bar includes a More action that opens a sheet of shortcuts (e.g. Pelion guide hub, flights, events, walking resources, useful numbers, install prompt, Facebook, email, privacy). Content is assembled in the browser from the same script bundle as other pages; internal links are adjusted when you are viewing a page under /business/ so you stay on the correct origin.
8. Local storage on your device
The app uses browser localStorage and PWA / service-worker caches so content loads faster and parts of the directory or bus views can work offline. Typical categories stored locally include UI preferences (such as theme and directory layout), favourites, cached snapshots of listings or timetables with refresh timestamps, bus-screen choices, and markers linked to version reporting.
Favourites stay on your device.
Language choice: English and Greek are separate HTML pages; switching language is normal navigation.
You can clear site data via browser or installed-app settings.
9. Service worker (PWA)
A service worker caches static assets for faster repeat visits and offline fallback. Separately, the frontend shows a sticky offline banner at the top of the screen when the browser reports that the network connection is unavailable (and keeps it visible for as long as you remain offline). While offline, the app may load previously cached data (for example the directory or bus timetable cache) and certain embeds (like maps) are disabled.
The service worker reports its version string to the page for display/diagnostics. It does not replace the analytics/telemetry statements above.
10. Fonts & CDN
We load fonts from Google Fonts and icons from cdnjs (Font Awesome). Your browser connects to those CDNs; they may log IP and technical metadata under their policies.
11. Legal bases & rights (EEA/UK overview)
Where GDPR/UK GDPR applies, we rely on appropriate grounds such as legitimate interests (secure operation, aggregated statistics, product improvement) and, where required, consent for non-essential cookies or similar technologies — in line with national guidance (e.g. cookie rules for analytics). You may have rights of access, rectification, erasure, restriction, portability, and objection; contact info@spiti.tech. You may also lodge a complaint with your supervisory authority.
12. Children
The directory is aimed at travellers and local services. It is not directed at children, and we do not knowingly collect children’s personal data.
13. Changes
When features or processors change materially, we will update this page and the “Last updated” date.
This privacy page intentionally does not load the same analytics scripts as other marketing pages, to keep this read as lightweight as possible. If you navigate back to the main site, normal measurement may resume.