This policy explains how we collect and use personal data when you visit villadimokratia.gr or contact us, in line with the EU General Data Protection Regulation (GDPR).
Last updated:
Who we are
The data controller is Villa Dimokratia (Nikos Baritakis & Dimokratia Angelaki), Kolymbari 730 06, Chania, Crete, Greece. Email: info@villadimokratia.gr, phone: +30 210 300 2211.
What we collect and why
Contact form and emails. Your name, email address and message, and optionally your phone number. We use them only to reply to you and to handle your enquiry or booking (GDPR Art. 6(1)(b) — steps prior to a contract — and Art. 6(1)(f) — our legitimate interest in answering enquiries).
Technical data. When you visit the site, our hosting provider processes your IP address and standard request data to deliver the pages and keep the site secure. To prevent spam, the IP address used to send the contact form is kept briefly in memory to limit repeated submissions.
Bookings. Bookings are made on our separate booking system (reserve-online.villadimokratia.gr). The data you enter there is handled as described on that site.
Guest registration. When you stay with us, we record the identity details of each adult guest because Greek law requires it (GDPR Art. 6(1)(c) — legal obligation). These details are kept only for as long as the law requires.
Who receives your data
We do not sell your data. We share it only with the service providers below, who process it on our behalf and only for the purposes described here, and with public authorities where the law requires it (for example guest registration).
- Plesk — hosting of this website and of our email, and delivery of the messages sent through the contact form.
- Google (Google Maps) — the map on the Home and Location pages; when it loads, Google receives data such as your IP address. See the Cookie Policy.
- Google (Google Analytics) — visit statistics, only if you accept analytics cookies. See the Cookie Policy.
- Our booking system provider — for bookings made at reserve-online.villadimokratia.gr.
Transfers outside the EU
Some of these providers are based in the United States or may process data there. Where this happens, the transfer is protected by the EU–US Data Privacy Framework or by the European Commission’s Standard Contractual Clauses.
How long we keep it
Enquiries that do not lead to a booking are deleted within 12 months. Booking-related data is kept for as long as tax and accounting law requires.
Your rights
You can ask for access to, correction or deletion of your data, restriction of or objection to its processing, and data portability, by emailing info@villadimokratia.gr. You also have the right to complain to the Hellenic Data Protection Authority (www.dpa.gr).
Cookies
See our Cookie Policy for the cookies and similar technologies used on this website and how to manage them.
Security
This website is served only over an encrypted connection (HTTPS). Messages sent through the contact form are not stored on the website; they are delivered to our email inbox, which only we can access.
Children
This website is not aimed at children. Enquiries and bookings must be made by an adult.
Changes to this policy
We may update this policy from time to time. The date at the top of this page shows when it was last changed.