Visitors to your web site sending requests to your web server. This web server has a unix user associated with it. The permissions of this unix user are what governs whether the page can be read or not.

If your web server user has read privs to that directory, then it will display the content.