Privacy Notice

Controller

GKOUMOUTIS KONSTANTINOS TOU CHRISTOU, Santaroza 43, 24100 Kalamata, Greece. Greek tax number (AFM) 145854274 · GEMI 177824245000.

For privacy questions or requests, contact [email protected] or +30 698 220 7578. No Data Protection Officer has been designated for this website.

Information and purposes

• Contact and availability enquiries: name, email, topic, message and, if provided, arrival and departure dates. We use these details to respond and consider your enquiry. Submitting the form is not a reservation and no payment is made through it.
• Newsletter: email address, optional name and consent/confirmation status. We use these details to send updates only after consent and double opt-in confirmation. You can unsubscribe from any newsletter message.
• Live chat: only if you select “Accept” before tawk.to loads, the provider receives connection data and the information you choose to share in chat. Chat is optional.
• Form security: Cloudflare Turnstile processes a challenge token and technical signals to limit automated spam. It is not used for advertising profiles.
• Website operation and security: Cloudflare provides hosting/content delivery and may process technical request data such as IP address, browser details and security logs.

Legal bases

To answer an enquiry and consider a possible stay, we use the information necessary to take steps at your request before a contract and/or our legitimate interest in responding to communications. Newsletter messages and loading optional chat rely on your consent. Technical data needed to protect and operate the website is processed for service security and operation.

Service providers and transfers

Where needed for the services above, data may be sent to Cloudflare (hosting and Turnstile), Brevo (email delivery, newsletter and double opt-in) and, only after consent, tawk.to (live chat). Providers may use subprocessors or process data outside the European Economic Area under their applicable contractual terms and transfer mechanisms. Each provider’s privacy notice and data-processing terms describe the relevant arrangements.

Fonts are loaded from Google Fonts; that request may share technical connection data, such as your IP address, with Google. External links (for example maps and social networks) lead to third-party services that apply their own privacy notices.

Retention

Contact enquiries and chat messages are kept while needed to handle and reasonably follow up on the enquiry, then deleted or anonymised unless needed to establish or defend legal claims or to meet a legal record-keeping obligation. Newsletter data are kept while consent remains active. After an unsubscribe, only the minimum information needed to honour the request and prevent further messages may be retained. Security logs and consent records are kept only for their respective purposes, in line with the relevant provider settings and applicable obligations.

Your rights

Subject to applicable conditions, you may request access, correction, erasure, restriction or portability, or object to processing. Where processing is based on consent, you may withdraw it at any time without affecting processing carried out lawfully before withdrawal. Contact us at the email above. You may also complain to the Hellenic Data Protection Authority.

Automated decisions

We do not make decisions through this website based solely on automated processing that produce legal or similarly significant effects.