Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

2. Information We Collect

We only collect personal information that you voluntarily provide to us, namely:

• Reservation & contact details: name, email address, phone number (including country code), preferred date and time of visit, number of guests, and any message you choose to include in the reservation form.
• Communication records: emails, phone calls or messages exchanged with us regarding a booking or enquiry.
• Technical information: anonymised data such as browser type, device and approximate location, which may be collected automatically by our hosting provider for security and performance purposes.

We do not collect special categories of personal data (such as health, religion, or political opinions) and we do not knowingly collect data from minors.

3. How We Use Your Information

Your information is used only to:

• Process and confirm your reservation request.
• Respond to enquiries and communicate with you about your visit.
• Comply with our legal and regulatory obligations.
• Maintain the security and proper functioning of our website.

We do not use your data for automated decision-making or profiling, and we do not send marketing communications unless you have explicitly opted in.

4. Legal Basis for Processing

We process your personal data on the following bases:

• Performance of a contract — to handle and confirm your reservation.
• Legitimate interest — to operate and secure our website and communicate with guests.
• Legal obligation — where processing is required by Greek or EU law.
• Consent — where you have given it explicitly, for example by submitting the contact form.

5. Sharing of Information

We do not sell, rent or trade your personal information. We may share it only with:

• Trusted service providers who help us operate the website (e.g. hosting), bound by confidentiality obligations.
• Public authorities, where disclosure is required by law.

6. Data Retention

We keep reservation and enquiry data only for as long as necessary to serve the purpose for which it was collected — typically no longer than 12 months after your visit — unless a longer retention period is required by law.

7. Cookies

Our website uses only essential cookies necessary for its operation. We do not use third-party advertising or tracking cookies. Embedded content (such as Google Maps) may set its own cookies governed by the respective third party's privacy policy.

8. Your Rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data (“right to be forgotten”).
• Object to or restrict the processing of your data.
• Request portability of your data.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

To exercise any of these rights, please contact us at otiapomeine@yahoo.com.

9. Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, misuse or alteration. However, no transmission over the internet is completely secure, and we cannot guarantee absolute security.

10. Changes to this Policy

We may update this Privacy Policy from time to time. The most recent version will always be available on this page, with the date of last revision shown at the top.

11. Contact

For any questions regarding this Privacy Policy or how we handle your personal data, please reach out to us at otiapomeine@yahoo.com or by phone at +30 22890 71534.