1. Information We Collect To provide you with our hospitality services, we may collect the following information:

Contact Details: Your name, email address, and phone number when you use our contact form or book via WhatsApp.
Booking Information: Arrival/departure dates and any special requests.
Check-In Data: Upon arrival, we are required by Greek tourism and tax authorities to record your ID/Passport number and home address.
Technical Data: Like most websites, our server logs standard technical data (IP address, browser type) to ensure the security of our site.

2. How We Use Your Data We strictly use your information to:

Manage your reservation and communicate with you about your stay.
Issue legal invoices and receipts as required by Greek tax law (AADE).
Respond to your inquiries.
Ensure the security of our website.

3. Data Sharing & Third Parties We do not sell your personal data. We only share your data when absolutely necessary:

With our booking partners (like Booking.com) if you made your reservation through their platform.
With our trusted server host (our self-hosted secure Virtualmin server) which stores our website data safely.
With Greek legal or tax authorities, only when strictly required by law.

4. Cookies Our website uses essential technical cookies to function properly and provide a fast browsing experience. We do not use invasive tracking cookies or sell your browsing data to advertisers.

5. Data Retention We keep your contact inquiries for as long as necessary to answer them. For confirmed guests, we retain billing and check-in records for the duration required by Greek tax laws (typically up to 10 years) before securely destroying them.

6. Your Rights (GDPR) Under the GDPR, you have the right to:

Request access to the personal data we hold about you.
Ask us to correct any inaccurate information.
Request the deletion of your data (provided it does not conflict with our legal obligations to Greek tax authorities).
To exercise these rights, please contact us at [email protected].