Privacy Policy

At Zefyros Seaside Hotel Apartments, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website or stay at our hotel.

1. Information We Collect

1.1 Personal Information

When you make a reservation, contact us, or use our services, we may collect:

• Full name and contact details (email address, phone number, postal address)
• Date of birth and nationality (for registration purposes)
• Passport or ID card details (required by Greek law for guest registration)
• Payment information (credit card details are processed securely and not stored)
• Booking preferences and special requests
• Communication history with our staff

1.2 Automatically Collected Information

When you visit our website, we automatically collect:

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on our website
• Referring website addresses
• Cookies and similar tracking technologies (see our Cookie Policy below)

2. How We Use Your Information

We use the collected information for the following purposes:

• Processing and managing your reservations
• Communicating with you about your booking and stay
• Providing customer support and responding to inquiries
• Complying with legal obligations (Greek hospitality laws require guest registration)
• Improving our services and website functionality
• Sending promotional communications (only with your consent)
• Analyzing website usage to enhance user experience

3. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on:

• Contract Performance: Processing necessary to fulfill your booking and provide accommodation services.
• Legal Obligation: Processing required to comply with Greek law (e.g., police registration of guests).
• Legitimate Interest: Processing for business purposes such as improving our services and security.
• Consent: Processing based on your explicit consent (e.g., marketing communications).

4. Data Sharing and Disclosure

We may share your personal information with:

• Greek Authorities: Guest information is reported to the Hellenic Police as required by Greek law.
• Service Providers: Third parties who assist us with payment processing, email services, and website hosting.
• Booking Platforms: If you booked through a third-party platform (e.g., Booking.com), we may share relevant information with them.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

5. Cookies and Tracking Technologies

Our website uses cookies to enhance your browsing experience. Cookies are small text files stored on your device that help us:

• Remember your preferences and settings
• Analyze website traffic and usage patterns
• Provide personalized content

5.1 Types of Cookies We Use

• Essential Cookies: Necessary for the website to function properly. Cannot be disabled.
• Analytics Cookies: Help us understand how visitors interact with our website (e.g., Google Analytics).
• Marketing Cookies: Used to deliver relevant advertisements and track campaign effectiveness.

You can manage your cookie preferences through our cookie consent banner or your browser settings.

6. Data Retention

We retain your personal data for as long as necessary to:

• Fulfill the purposes outlined in this policy
• Comply with legal obligations (guest records must be kept for 5 years under Greek law)
• Resolve disputes and enforce agreements

7. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data (subject to legal retention requirements).
• Right to Restrict Processing: Request limitation of how we use your data.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or for marketing purposes.
• Right to Withdraw Consent: Withdraw consent at any time for consent-based processing.

To exercise any of these rights, please contact us using the details provided below.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for data transmission
• Secure payment processing through certified providers
• Access controls and authentication procedures
• Regular security assessments and updates

9. International Data Transfers

Your data is primarily processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

10. Children's Privacy

Our website and services are not directed at children under 16. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

13. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Hellenic Data Protection Authority: