Privacy Policy

Who we are

The data controller is [Owner full name], Aphrodite Apartments, Mytikas 300 19, Greece. E-mail: [e-mail] · Phone: [phone].

What we collect and why

• Your booking – name, e-mail, phone, country, dates, number of guests and children’s ages, arrival time and any requests – to make and manage your booking and to contact you about it (performance of the contract).
• Payments – the amount, date and a reference from our payment provider. Card details are entered on the provider’s secure page; we never see or store them.
• Tax records – booking amounts are passed to our accountant for our tax declarations, as Greek law requires (legal obligation).
• Reviews – after your stay we may e-mail you once to ask for a review; your review is published only with your first name and initial (legitimate interest; you can ignore or object to this e-mail).
• Security – limited technical data such as your IP address, to protect bookings against abuse (legitimate interest).

Who receives your data

Only those who help us run your stay: our payment provider ([payment provider]), our website host and e-mail provider, our accountant, and the Greek authorities where the law requires it. If you booked through a platform such as Booking.com or Airbnb, that platform also has your data under its own privacy policy. We do not sell your data or use it for advertising.

Some providers may process data outside the European Economic Area; in that case they are bound by the safeguards of the GDPR (for example Standard Contractual Clauses).

How long we keep it

Booking data is kept for 5 years after your stay and then anonymised. Payment and tax records are kept for as long as Greek tax law requires.

Cookies and similar technologies

We use only what the website needs to work: a language cookie, a short-lived cookie (6 hours) that brings you back to your booking after payment, and your browser’s storage for your chosen currency and the link to your booking in the open tab. We do not use advertising or tracking cookies.

Your rights

You can ask us for access to your data, correction, deletion, restriction or a copy in a portable format, and you can object to processing based on legitimate interest. Write to us at [e-mail]. You also have the right to complain to the Hellenic Data Protection Authority (www.dpa.gr).