Privacy Policy

Who is responsible

The controller of the personal data described here is the operator of Tino's Bowling, 15-ти Корпус 87, Охрид. Privacy questions and requests can be sent to info@tinosbowling.com.

What we collect

• Event inquiry form: full name, email address, phone number, wished date, number of guests, event type, wished time (optional) and your message. While staff handle your request they add internal notes and a contact log (date, channel and a short note).
• Reviews: name, email address (never shown publicly), city (free text you type), rating, review text, and a record that you accepted the review rules (time and version of the rules).
• Photo Lab: the photograph you upload, the first name, last name and lane number you enter, the number of copies and your personalization choices (style, logo, date, bowling graphics, message).
• Staff accounts: name, email address, role, sign-in time and the network address used for sign-in attempt limits.
• Operating records: an audit log of staff actions (who did what and when) and technical error logs needed to keep the site running.

Why we use it and on what basis

• Event inquiries: to answer you and to check availability and arrange the event you asked about. Basis: steps taken at your request before an agreement, and our legitimate interest in handling requests.
• Reviews: to moderate and, after staff approval, publish name, city, rating and text. Basis: your consent given when you submit the review.
• Photo Lab: to prepare and print the souvenir you requested at the venue. Basis: performing the service you asked for.
• Staff accounts and operating records: to run the site securely, prevent misuse and keep an accountable record of changes. Basis: our legitimate interest in security and operation.

Event inquiries and the 30-day rule

What we store: the details you enter in the inquiry form, plus the internal notes and the contact log (date, channel and a short note) that staff add while handling your request. They are visible only to authorized staff.

Inquiries that do not become a confirmed booking (new, contacted, waiting, declined, cancelled, closed or archived): the personal data is deleted automatically 30 days after the inquiry was closed or archived, and no later than 30 days after you sent it if nobody has handled it.

Confirmed bookings: we keep the data while the event is still upcoming. The 30-day period starts when the event has taken place or the booking is cancelled; after that the inquiry, its contact log and the personal details on the booking are deleted. Only non-personal calendar information (date, time, number of guests and status) remains.

An automatic daily clean-up applies these rules. You can also ask us to delete your inquiry earlier.

Notification to staff: when you send an inquiry, the website also sends an operational e-mail to authorized staff so that no request is missed. The e-mail contains only the inquiry number, your name, the wished date and time, the event type, the number of guests, a note that a message was included and a protected link to the Admin page. It does not contain your phone number, your e-mail address or the text of your message; those stay in the protected Admin. These are operational notifications to staff, not marketing messages or subscriptions. Unsent notification records are deleted together with the inquiry.

Reviews

When you submit a review we store your name, email address, city (free text), rating and review text, the time you sent it and the time you accepted the review rules (with the version of those rules).

Before sending, you confirm in a dialog that the review reflects your genuine experience and that you have read this Privacy Policy. This confirmation is recorded. It does not prove that a review is genuine, so staff moderate reviews and may reject or remove them.

Only after staff approval are your name, city, rating and text shown on the website. Your email address is never published; it is used only to prevent several reviews from the same address.

To limit spam, a one-way (hashed) form of your connection address is kept for a short time to count review attempts. It cannot be turned back into your address.

Photo Lab photographs

Your photograph is stored privately by the application. It is not published to the Gallery or the Media Library and has no public address. Only authorized venue staff and the Photo Lab operator can open it. After a job is completed, the original, preview and print files and the personal details entered for the job are removed automatically after 24 hours. Sales totals used for venue statistics are kept without the photo or names. Jobs that were rejected or never completed are not removed automatically; staff remove them, and you can ask us to remove yours. The four-character confirmation code shown after sending is only a hand-over check for staff; it does not give access to your photograph.

How long we keep data

• Photo Lab photographs and the names entered for a job: 24 hours after completion.
• Event inquiries: deleted automatically. Unconfirmed inquiries 30 days after they were closed or archived, or 30 days after submission if nobody handled them. Confirmed bookings are kept while the event is upcoming and deleted 30 days after the event took place or the booking was cancelled (see the section on event inquiries).
• Reviews: while the review remains on the website or until you ask for removal; there is no automatic deletion period for reviews.
• Staff accounts and audit records: while the account exists and as long as needed to account for changes.
• No other fixed deletion periods have been set; when data is no longer needed for its purpose it is deleted or anonymized.

Who receives data

• Authorized Tino's Bowling staff, according to their role. The website and its database are run by a commercial web hosting provider, which stores the data on our behalf. We do not sell personal data and do not use it for advertising.
• Notification e-mails about new inquiries are sent through the business e-mail service of our hosting provider and delivered to the mailbox of authorized staff, so those e-mail providers process the notification.
• Weather on the home page: our server asks the Open-Meteo service for the weather in Ohrid. No visitor data is sent in that request.
• Fonts: some pages still load typefaces from Google Fonts. Your browser then sends your IP address and browser details to Google, which may process them outside North Macedonia. We plan to remove this by self-hosting the fonts.
• Location: the “Open in Google Maps” links open Google Maps only when you click them; no data is sent to Google before that.
• We disclose data to authorities only when the law requires it.

Security and access

Staff sign in with individual accounts and see only what their role allows. Forms are protected against forged requests, uploaded photographs are stored outside public folders, and administrative actions are recorded. No website can promise absolute security; if a breach affecting you occurs we will act as the law requires.

Your rights

You can ask us for: information about how your data is used; a copy of your data (access); correction of wrong data; deletion; restriction of processing; transfer of data you gave us (portability, where it applies); and you can object to processing based on our legitimate interest. Where processing relies on your consent, you can withdraw it at any time.

Send your request to info@tinosbowling.com. We will answer within the period set by the law. We may need to verify your identity first.

Complaints

If you believe your rights were violated, contact us first. You can also submit a request for determination of a violation to the Personal Data Protection Agency (Агенција за заштита на личните податоци, AZLP), bul. Goce Delchev 18, 1000 Skopje, info@privacy.mk, https://azlp.mk. The Agency publishes the form and filing options on its website.

Cookies and browser storage

• This website uses only strictly necessary technologies. It uses no analytics, advertising or tracking cookies and embeds no social-media content, so there is no cookie banner. Social-media icons are ordinary links that open the network only when you click them.
• tinos_lang (cookie, up to 400 days) and tinos_language (local storage): remember the language you chose.
• tinos_public (cookie, ends when you close the browser): keeps forms secure and protects them against forged requests.
• tinos_admin (cookie, ends when you close the browser): staff sign-in only; never set for guests.
• tinos-photolab-preview (session storage): shows your own photo preview after sending a Photo Lab request; cleared when the tab closes.
• tinos-pl-scrolled (session storage): remembers that you already saw a scrolling hint; cleared when the tab closes.

Contact

Questions about this notice or your data: info@tinosbowling.com. We update this notice when the site changes; the date at the top shows the latest version.