Your data

Privacy Policy

Villa Pandora, Sparto, Amfilochia, Greece is the data controller for the personal information you share with us. This policy explains what we collect, why we collect it, how long we keep it, and the rights you have under the EU General Data Protection Regulation (GDPR).

What we collect

When you send a booking inquiry we collect your name, email address, phone number (if you give it), the number of guests, your requested dates and any notes or questions you write.

If you email or call us, we keep that correspondence. Our hosting provider also records standard technical data such as IP address and browser type in server logs for security purposes.

Why we use it and our legal basis

We use your details to answer your inquiry, confirm and manage your stay, take deposits and payments, and keep in touch about your booking. The legal basis is performance of a contract with you, or our legitimate interest in responding to inquiries before a contract exists.

Where the law requires us to keep booking or accounting records, the legal basis is compliance with a legal obligation. We only send marketing emails if you have asked us to, and you can opt out at any time.

Who we share it with

We never sell your personal information. We share it only with service providers who help us run the villa and this website: our website and database hosting, our email delivery provider, and (if applicable) our payment provider, accountant and local property manager.

These providers act on our instructions under a data processing agreement. Where data is transferred outside the European Economic Area, that transfer is covered by the European Commission's Standard Contractual Clauses or an adequacy decision.

How long we keep it

Inquiries that do not become bookings are deleted within 12 months. Booking and payment records are kept for as long as required by Greek tax and accounting law, normally six years from the end of the relevant financial year, and then deleted.

Server logs are kept for a short period for security and troubleshooting.

Cookies

This website uses only essential cookies and local storage needed to keep the site secure and to keep the owner signed in to the dashboard. We do not use advertising cookies or third-party tracking, so no cookie consent banner is required.

Your rights

You have the right to ask for a copy of the personal data we hold about you, to have it corrected, to have it deleted, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on consent, you can withdraw it at any time.

To exercise any of these rights, email us using the address in the footer. We will respond within one month. If you are not happy with our response you can complain to the Hellenic Data Protection Authority (dpa.gr) or to the supervisory authority in your own country.

Security and contact

Access to booking data is limited to the villa owner and is protected by password-based authentication; data is encrypted in transit and at rest by our hosting provider.

For any privacy question or request, contact us using the email address or phone number shown in the footer of this website.

This policy is governed by Greek and EU data protection law. Last updated when saved in the owner dashboard.

Read our terms & conditions