Protecting your personal data is a priority for us. This Privacy Policy transparently describes what data we collect, for what purpose, on what legal basis, with whom we share it, and what your rights are, in accordance with the General Data Protection Regulation (EU Regulation 2016/679 — the "GDPR") and Law 4624/2019.
1. Data Controller
The controller responsible for processing your data is:
- Full Name: Chalkiopoulos Efstratios
- Address: Filopoimenos 4–6, Patras, Postcode 26221
- Tax ID: 025526954
- Email: patrasapartments.gr@gmail.com
- Phone: +30 697 586 1000
For any matter related to the processing of your data, you can contact us using the details above.
2. What Data We Collect
Depending on how you interact with us, we may collect:
- Identification & contact details: full name, email, phone, country/address and Tax ID (for Greek citizens).
- Booking details: arrival/departure dates, accommodation, number and details of guests, special requests.
- Payment details: transaction data required to complete the booking. We do not store card details; card payments are processed exclusively via POS terminal.
- ID/passport details: where required by law for guest registration (e.g. authorities, obligations of tourist accommodation providers).
- Communication data: the content of messages you send us via form, email, phone or social media.
- Technical data & cookies: IP address, device/browser type, browsing data via cookies.
3. Purposes & Legal Basis for Processing
| Purpose | Legal basis (Article 6 GDPR) |
|---|---|
| Management & completion of your booking | Performance of a contract (Article 6.1.b) |
| Issuing receipts/invoices, tax & accounting obligations, guest registration where required | Legal obligation (Article 6.1.c) |
| Responding to inquiries/contact requests | Consent or legitimate interest (Article 6.1.a / 6.1.f) |
| Sending newsletters / offers | Consent (Article 6.1.a) |
| Website improvement, security, statistics | Legitimate interest / Consent for non-essential cookies |
| Establishment/exercise/defence of legal claims | Legitimate interest (Article 6.1.f) |
4. How Long We Retain Your Data
- Booking & receipt data: for as long as required by tax/accounting legislation (a minimum of 5–6 years).
- Communication data: for as long as required to handle your request, plus a reasonable period thereafter.
- Newsletter: until you withdraw your consent / unsubscribe.
- Technical data/cookies: according to the duration of each cookie (see section 9).
After the above periods have elapsed, the data is securely deleted or anonymised.
5. Recipients — Who We Share Data With
We do not sell your data. We may share it, only to the extent strictly necessary, with:
- Our website hosting provider for the operation of the site.
- Payment providers (PayPal, IRIS) for processing transactions.
- Our bank for payments via wire transfer/deposit.
- Our accountant/tax advisor for fulfilling tax obligations.
- Public authorities (e.g. the Greek Tax Authority (AADE), police/tourism authorities) where required by law.
- Email providers & communication/marketing tools, where used.
6. Transfer Outside the EU/EEA
Certain providers (e.g. statistics or payment tools) may process data outside the EEA. In such cases, the transfer is carried out with the appropriate safeguards provided for by the GDPR (e.g. Standard Contractual Clauses or an adequacy decision).
7. Your Rights
Under the GDPR, you have the right to:
- Access your data
- Rectify inaccurate data
- Erasure ("right to be forgotten")
- Restrict processing
- Data portability
- Object to processing
- Withdraw your consent at any time (without retroactive effect)
For the exercise of your rights, please contact us at patrasapartments.gr@gmail.com. We reply within one (1) month. If you believe your rights have been violated, you have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA) — 1-3 Kifisias Ave., 115 23 Athens, www.dpa.gr.
8. Data Security
We apply appropriate technical and organisational measures (SSL encryption, controlled access, regular security updates) to protect your data from unauthorised access, loss or misuse.
9. Cookies
The website uses cookies for its essential operation, traffic analysis and to improve your experience. Essential cookies are active by default; for non-essential cookies (statistics/marketing) we ask for your consent. You can manage or withdraw your consent via the cookie settings or your browser settings.
10. Minors
The website is not directed at minors under the age of 16. We do not knowingly collect data from minors without the consent of the person exercising parental responsibility.
11. Amendments
We reserve the right to update this Policy. Any change is posted on this page with an updated date. We recommend that you check it periodically.
12. Contact
For any question regarding the Terms or your booking: patrasapartments.gr@gmail.com · +30 697 586 1000.
