Privacy policy

Who is responsible

For property accounts the controller is [Provider name, VAT number, address, contact email]. For the details of guests who send a booking request the controller is the property; we process them on its behalf.

What data and why

Properties: name, email, phone, password (encrypted), property details. To run the account (contract, GDPR art. 6(1)(b)).

Guests: name, email, phone, dates, number of guests, message. To bring the request to the property and send the booking emails (on the property’s behalf).

Technical: IP address for a short time, to protect against abuse (legitimate interest, art. 6(1)(f)). Only necessary login and language cookies; no advertising or tracking cookies.

Where it is kept and who helps

On Hetzner servers in Germany (EU). Emails are sent through Brevo (France, EU). Traffic passes through Cloudflare (protection and speed; [transfer basis outside the EU: standard contractual clauses / EU-US framework, to be confirmed by the lawyer]).

How long

Accounts: while active and [period] after deletion. Bookings: as long as the property decides, and at most [period, set by the lawyer]. Backups: up to 14 days.

Your rights

Access, correction, deletion, restriction, portability, objection. Write to us at [email]. Guests: for a booking, contact the property first; we will help it answer. You may complain to the Hellenic Data Protection Authority (www.dpa.gr).