Privacy and Cookies Policy

This Privacy and Cookies Policy describes how www.apollon-milos.com collects, uses and protects the personal data of its visitors and customers, as well as how cookies and similar technologies are used.

For simple browsing of our website, no personal data is collected from the user, except for technical data necessary for the secure and proper operation of the website.

The processing of personal data is carried out in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the applicable Greek legislation, including Law 4624/2019, as well as the applicable framework governing electronic communications and cookies.

1. Data Controller

The Data Controller responsible for the processing of personal data is:

[Company Name / Natural Person]
Registered address: Pollonia, Milos, Greece
Telephone: +30 22870 41347
Contact e-mail: milos.apollon@gmail.com

For any matters relating to this policy or the exercise of your rights regarding your personal data, you may contact us using the above details.

2. What data we collect

Depending on the way you use the website and the booking system, we may collect the following categories of data:

a. Booking data

When submitting or managing a booking, we may collect:

• full name
• e-mail address
• telephone number
• check-in and check-out dates
• number of guests / accommodation details
• special requests or comments you send us
• invoicing / receipt details, where required

b. Payment data

In the case of online payment or booking guarantee, payment details may be processed by a cooperating payment provider and/or the booking system. Our website does not store full card details unless this is explicitly stated and carried out lawfully and securely.

c. Communication data

When you contact us via contact form, e-mail or telephone, we may collect:

• full name
• e-mail address
• telephone number
• message content

d. Technical data

While browsing our website, technical information may be collected, such as:

• IP address
• device type and browser
• operating system
• date and time of access
• pages visited
• data collected through cookies or similar technologies

An IP address may, depending on the circumstances, constitute personal data and is used only for security, proper operation, statistical analysis and protection of our services.

3. Purposes of processing and legal basis

We process your data only where there is an appropriate legal basis, as required by the GDPR. Indicatively:

a. For the performance of a booking or to take steps prior to entering into a contract

We use your data for:

• management of booking requests
• confirmation, modification or cancellation of bookings
• communication regarding your stay
• customer service

b. For compliance with legal obligations

We process data where required by tax, accounting or other applicable legislation.

c. For our legitimate interests

We may process certain data for:

• network and information systems security
• fraud prevention or prevention of malicious use
• technical support
• improvement of the website and our services

d. Based on your consent

Where required, we ask for your consent, especially for:

• non-essential cookies
• sending newsletters or promotional material, where applicable
• other specific cases requiring explicit consent

4. Booking system and third-party providers

In order to provide booking services, we may cooperate with third-party providers, such as:

• booking engine / channel manager
• online payment providers
• website hosting providers
• e-mail or technical support providers
• statistics or analytics providers, where you have given your consent

These third parties process data only to the extent necessary for the provision of their services and are contractually bound to implement appropriate security and confidentiality measures.

5. Data transfers

We do not sell or rent your personal data to third parties.

We may transfer data:

• to cooperating service providers, only where necessary
• to public, tax, judicial or other competent authorities, where required by law
• to accountants, legal advisers or technical consultants, where necessary for the lawful operation of the business

If any provider is located outside the European Economic Area, the transfer will take place only where an appropriate legal basis and adequate safeguards are in place in accordance with the GDPR.

6. Data retention period

We retain personal data only for as long as necessary for the purpose for which it was collected, unless a longer retention period is required by law.

Indicatively:

• booking data: for as long as necessary to complete and manage the booking and address possible legal claims
• tax / accounting data: for as long as required by applicable tax and commercial legislation
• communication data: for as long as necessary to handle your request
• consent-based data: until consent is withdrawn or the processing is no longer necessary

7. Your rights

According to the GDPR, you have the right to:

• access your personal data
• rectify inaccurate or incomplete data
• request erasure, where legally applicable
• request restriction of processing
• object to processing, where applicable
• data portability, where applicable
• withdraw your consent at any time, without affecting the lawfulness of prior processing
• lodge a complaint with the competent Hellenic Data Protection Authority

To exercise your rights, you may contact us at milos.apollon@gmail.com.

8. Data security

We implement appropriate technical and organisational measures to protect personal data against loss, unauthorised access, alteration, disclosure or destruction.

9. Cookies Policy

Our website uses cookies and similar technologies for the proper operation of the website, improvement of user experience and, where you have consented, for statistical analysis or other optional functions.

Cookies are small text files stored on your device while browsing a website.

Categories of cookies we may use

a. Strictly necessary cookies

These cookies are essential for the basic operation of the website and booking system, such as:

• maintaining user sessions
• storing cookie preferences
• browsing security
• completion of the booking process

No prior consent is required for strictly necessary cookies.

b. Preference / functionality cookies

These cookies remember your choices, such as language, form entries or other preferences that improve user experience. If they are not strictly necessary, they are activated only with your consent.

c. Statistics / analytics cookies

These cookies help us understand how visitors use the website so that we can improve content, structure and services. These cookies are used only if you have provided your consent.

d. Third-party cookies

In some cases, cookies from third-party services may be used, such as embedded maps, booking engines, analytics tools or social media services. These cookies are also subject to the policies of the respective third-party providers.

10. Managing cookie consent

When you first visit our website, a cookie notice and preferences mechanism is displayed. You may at any time:

• accept or reject non-essential cookies
• modify your preferences
• withdraw your consent

Continuing to browse the website on its own does not constitute valid consent for the installation of non-essential cookies; a clear affirmative action by the user is required.

11. How to control cookies through your browser

You may also configure your browser to:

• notify you before storing cookies
• block some or all cookies
• delete previously stored cookies

Please note that disabling strictly necessary cookies may affect the proper functioning of the website and booking system.

12. Links to third-party websites

The website may contain links to third-party websites. We bear no responsibility for the content, security or privacy practices of such websites. We recommend that you read the privacy policy of every website you visit.

13. Changes to this policy

We reserve the right to amend this Privacy and Cookies Policy at any time so that it reflects legal, technical and business developments. The current version will always be posted on this website with an indication of the date of update.