Privacy and Personal Data Protection Policy

1. Data Controller

The data controller is:

For any matter relating to personal data protection, you may contact us using the details above.

2. Personal Data We Collect

When you visit or use this website, we may collect the following categories of personal data.

a. Data you provide to us

When you contact us through a contact form, email, telephone or another available communication method, you may provide us with:

• name and surname,
• email address,
• telephone number,
• message content,
• booking or reservation details, where applicable,
• date, time, number of guests or any preferences you choose to share with us.

Please do not send sensitive personal data through the website unless it is strictly necessary for your request.

b. Technical and security data

When you visit the website, certain technical information may be recorded automatically, such as:

• IP address,
• date and time of access,
• pages visited,
• device and browser type,
• basic server log data.

This data is used for the secure, reliable and proper operation of the website.

c. Analytics and usage data

The website may use analytics and SEO tools, such as Google Analytics and Ahrefs, to understand website traffic, improve content and monitor the performance of the website.

Analytics tools that are not strictly necessary are used only in accordance with the user's cookie consent choices, where consent is required.

Ahrefs may be used as an SEO, performance or analytics tool, depending on the specific service and configuration used.

3. Google Maps

The website may display a map through Google Maps.

Google Maps is not loaded automatically without the user's consent. If the user has not given the relevant cookie consent, the website displays an option or button allowing the user to open the map separately or choose whether to load the service.

When Google Maps is loaded, a connection may be made to Google services and Google's own terms and privacy policies may apply.

4. Cookies

The website uses cookies or similar technologies.

Strictly necessary cookies are used for the operation of the website and do not require consent. Optional cookies, such as analytics, functionality or third-party service cookies, are used only if the user has given consent.

More information about cookies, their categories, duration and how you can manage your choices is provided in our separate Cookie Policy.

5. Purposes of Processing

We process personal data only for specific and lawful purposes, including:

• to respond to messages and contact requests,
• to manage booking or reservation requests, where applicable,
• to provide customer service,
• to ensure the security, protection and proper technical operation of the website,
• to comply with legal obligations,
• to analyse website traffic, where the user has given the required consent,
• to improve the content, structure and performance of the website.

We do not use personal data for automated decision-making that produces legal effects concerning the user.

6. Legal Bases for Processing

Depending on the case, we process personal data on one or more of the following legal bases:

• Consent, when the user chooses to accept optional cookies, analytics tools or the loading of third-party services such as Google Maps.
• Performance of a contract or pre-contractual steps, when the request concerns a booking, service or communication related to our services.
• Legitimate interest, for the security, protection, improvement and proper operation of the website.
• Legal obligation, when the retention or disclosure of data is required by applicable law.

7. Who Has Access to Personal Data

Access to personal data is limited to the persons or partners who need it for the purposes described in this Policy, such as:

• authorised staff of the business,
• the website hosting provider,
• technical support providers,
• email or communication service providers,
• analytics or SEO service providers, such as Google Analytics and Ahrefs, where enabled,
• third-party service providers, such as Google Maps, only when the user chooses to load the service or gives the relevant consent,
• accounting, legal or other professional advisers, where necessary,
• public authorities, where required by law.

We do not sell or rent personal data to third parties.

8. Data Location and Transfers

Data stored in our own systems and basic website server logs is kept within the European Economic Area.

For third-party services such as Google Analytics, Google Maps and Ahrefs, data is processed in accordance with the terms, settings and safeguards provided by the respective service providers.

Where available, we choose settings and services that limit processing within the European Economic Area or provide appropriate safeguards in accordance with applicable law.

9. Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected.

In particular:

• Contact messages are retained for 1 month after the communication has been completed, unless longer retention is required for a lawful reason.
• Booking or reservation details, where applicable, are retained for as long as necessary to manage the booking and comply with any legal obligations.
• Technical server logs are retained for 6 months for security, technical operation and troubleshooting purposes.
• Cookie consent choices are retained for as long as necessary to record and apply the user's preferences.
• Data collected through third-party analytics tools is retained according to the settings selected in the relevant service providers and as further described in the separate Cookie Policy.

10. User Rights

Each user has the rights provided under applicable data protection law, including:

• the right to be informed,
• the right of access,
• the right to rectification,
• the right to erasure,
• the right to restriction of processing,
• the right to data portability,
• the right to object,
• the right to withdraw consent, where processing is based on consent.

To exercise your rights, you may contact us at:

We will respond to your request in accordance with the time limits and conditions provided by applicable law.

11. Right to Lodge a Complaint

If you believe that the processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with the Hellenic Data Protection Authority or another competent supervisory authority.

12. Data Security

We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access, alteration or disclosure.

These measures may include:

• use of HTTPS secure connection,
• restricted access to management systems,
• technical protection measures for the server and application,
• data minimisation practices,
• limited retention of server logs,
• regular maintenance and monitoring of the website.

13. Links to Third-Party Websites

The website may include links to third-party websites or services, such as maps, social media, booking platforms or external profiles.

We are not responsible for the privacy policies or practices of third-party websites. Users should read the privacy policies of the respective third-party services.

14. Changes to This Policy

This Privacy and Personal Data Protection Policy may be updated when the operation of the website, the services provided or the applicable legal requirements change.

The latest version will always be available on this page.

15. Language Versions

This Policy may be made available in more than one language. In case of inconsistency between translations, the Greek version shall prevail, unless otherwise required by applicable law.