🔒 Privacy Policy for Villa Malia Syros

Effective Date: November 20, 2025

Website: book.villamaliasyros.com

The privacy of our visitors and guests is a top priority at Villa Malia. This Policy details the information we collect, its usage, and your rights under the General Data Protection Regulation (GDPR).

For questions or further information, please contact us via email at info@villamaliasyros.com.

1. Scope and Consent

● This Policy applies only to our online activities and the information collected via book.villamaliasyros.com.

● It does not apply to information collected offline or through other channels.

● Consent: By using our website, you expressly consent to this Privacy Policy and agree to its terms.

________________________________________

2. Information We Collect and Legal Basis

We collect Personal Data when you interact with us for specific, defined purposes.

Following: Type of Information - Examples Collected - Purpose of Collection - GDPR Legal Basis

  • Identity/Contact Data: Name, Email Address, Phone Number. To respond to inquiries, process bookings, and send confirmations. Contractual Necessity (to fulfill your reservation).
  • Financial Data: Partial card details, transaction receipts (processed by Stripe/Aegean Aura). To securely process payments for services rendered. Contractual Necessity (to complete the transaction).
  • Communication Data: Contents of messages, attachments sent via email or inquiry form. To provide effective customer service, support, and issue resolution. Legitimate Interest (effective customer support management).
  • Usage Data (Non-Identifiable): IP address, Browser type, ISP, timestamps, referring/exit pages. For website maintenance, security, trend analysis, and general administration. Legitimate Interest (site functionality and security assurance).
  • Marketing Data: Your preference to receive newsletters or promotional offers. To send marketing emails (only when you have actively opted in). Consent (where required by law).

________________________________________

3. How We Use Your Information

We use the collected information in the following key ways:

● Service & Operations: To provide, operate, maintain, and manage our booking services and website.

● Improvement: To improve, personalize, and expand our website and service offerings.

● Analysis: To understand and analyze how visitors use our website (using Usage Data).

● Communication:

○ To communicate with you directly for customer service and support.

○ To provide necessary updates and other information relating to your booking or the website.

○ To send marketing and promotional information (if consent is given).

○ To send essential transactional and service-related emails.

● Security: To find and prevent fraud and enhance the overall security of our systems.

________________________________________

4. Tracking Technologies: Log Files and Cookies

● Log Files: We follow a standard procedure of using log files, which are a function of hosting services analytics. The collected Usage Data is used for analyzing trends, site administration, and tracking user movement on the website. This data is not linked to personally identifiable information.

● Cookies: Like any other website, Villa Malia uses ‘cookies’ to store information, including visitors' preferences and the pages accessed. This information helps us optimize your experience by customizing our web page content based on your browser type and other details.

○ You have the right to accept or decline cookies via your browser settings.

________________________________________

5. GDPR Privacy Policy (Your Data Protection Rights)

Every user is fully entitled to the following data protection rights. We will respond to your valid request within one month.

Your Right & Description

  • Right to Access: You can request copies of your personal data we hold. A small administrative fee may apply.
  • Right to Rectification: You can request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
  • Right to Erasure: You can request the erasure of your personal data, under certain conditions (the 'Right to be Forgotten').
  • Right to Restrict Processing: You can request that we restrict the processing of your personal data, under certain conditions.
  • Right to Object to Processing: You can object to our processing of your personal data, under certain conditions (e.g., for direct marketing).
  • Right to Data Portability: You can request the transfer of the collected data to another organization or directly to you, under certain conditions.
  • Right to Lodge a Complaint: You have the right to complain to the relevant Data Protection Supervisory Authority (the Hellenic DPA in Greece).

To exercise any of these rights, please contact us at info@villamaliasyros.com.

________________________________________

6. Children's Information

● Our priority includes adding protection for children using the internet. We encourage parents and guardians to monitor and guide their online activity.

● Villa Malia does not knowingly collect any Personal Identifiable Information from children under the age of 16 (the GDPR age of consent in Greece).

● If you believe your child has provided this information on our website, we urge you to contact us immediately, and we will promptly remove such information from our records.