AegeanBlue Cliffside Villas is committed to protecting your personal data. This policy explains what we collect, why, and the rights you have under the GDPR.
Data controller
AegeanBlue Cliffside Villas (sole proprietorship of Eleni Vlachou), Imerovigli, Santorini 84700, Greece.
Email: [email protected] · Phone: +30 22860 71 423
GNTO Licence 1167K91K0814201 · AFM (Greek tax ID) EL 153842671.
Data we collect
- Booking enquiries — name, email, phone, dates, party size and special requests, submitted via the contact form on this site.
- Booking confirmations — the full booking record including guest names, as required by Greek hospitality registration, together with payment receipts.
- Newsletter subscriptions — email, locale and consent timestamp.
- Analytics — anonymised browsing data via Google Analytics 4 (IP truncated, no cross-site tracking).
- Cookies — see our Cookie Policy.
Legal basis (GDPR Article 6)
- Booking processing — Article 6(1)(b), contractual necessity.
- Hospitality registration data — Article 6(1)(c), legal obligation under Greek Law 4276/2014.
- Newsletter — Article 6(1)(a), explicit consent, withdrawable in one click.
- Analytics — Article 6(1)(f), legitimate interest.
How long we keep it
- Booking enquiries with no booking made — 12 months.
- Confirmed booking records — 5 years (Greek tax authority requirement).
- Newsletter — until you unsubscribe.
- Analytics — 26 months (GA4 default).
Third-party processors
- Google LLC — Google Analytics 4 (anonymised).
- Stripe Payments Europe Ltd — direct booking payments.
- Booking.com BV — for bookings made via that platform (their own privacy policy applies).
- Mailchimp / Brevo — newsletter delivery.
We do not sell your data, and we do not share it for marketing.
Your rights
Under GDPR Articles 15–22 you have the right to access, rectification, erasure, portability and objection. Contact [email protected] and we will respond within 30 days.
Supervisory authority
Hellenic Data Protection Authority (HDPA) — www.dpa.gr.