Privacy & Cookies Policy

1. Data Controller

The controller responsible for processing the personal data collected through the website androsroyalvilla.gr is:

2. What personal data we collect

While browsing the website or when sending a request through the contact form, we may collect the following data:

• Identification and contact details: name, email, phone.
• Stay request details: number of guests, arrival date, departure date and the message you fill in on the form.
• Technical data: IP address, device type, browser, operating system and basic information about your use of the website.
• Cookie data: information stored or read through cookies, depending on your consent choices.

We do not request special categories of personal data through the website, such as health data, religious beliefs or other sensitive information. Please do not enter such information in the message field of the form.

3. For what purposes we use your data

The personal data you provide is used solely for lawful and specific purposes, such as:

• to respond to the contact or availability request you sent us,
• to inform you about a possible booking, availability, prices or stay details,
• to manage communication before, during or after your stay,
• to ensure the proper and secure operation of the website,
• to improve the browsing experience and the performance of the website, where relevant cookies have been enabled with your consent.

4. Legal basis for processing

The processing of your personal data is based, depending on the case, on the following legal grounds:

• Pre-contractual measures or performance of a contract: when you contact us about availability, a booking or stay information.
• Legitimate interest: for the security of the website, the prevention of malicious use and basic communication management.
• Consent: for the use of non-essential cookies, such as statistics, marketing or third-party service cookies, where these are used.
• Legal obligation: where required by applicable law, for example for tax or accounting obligations that may relate to a completed booking.

5. Contact form and availability requests

When you fill in the website's contact form, you send us the details you choose to provide, such as name, email, phone, number of guests, arrival and departure dates, as well as your message.

This information is used to contact you and assist you with your request. Submitting the form does not automatically complete a booking, unless there is separate confirmation and agreement.

6. Data retention period

We keep personal data only for as long as necessary for the purpose for which it was collected.

• Simple contact requests may be kept for a reasonable period of time, so that the communication can be completed.
• Data related to a booking or financial transaction may be kept for as long as required by a tax, accounting or other legal obligation.
• Cookie data is kept in accordance with the duration set for each cookie or until you withdraw your consent, where applicable.

7. With whom your data may be shared

We do not sell, rent or transfer your personal data to third parties for independent commercial use.

It may be shared only where necessary, such as:

• with website hosting and technical support providers,
• with email or communication service providers,
• with accounting, tax or legal partners, where required,
• with competent authorities, where there is a relevant legal obligation.

Partners who process data on our behalf are required to take appropriate technical and organisational protection measures.

8. Links to third-party services

The website may include links to third-party services, such as Instagram, WhatsApp or other communication platforms. When you choose to go to these services, the processing of your data is carried out in accordance with their own privacy policies and terms of use.

Andros Royal Villa is not responsible for the way in which third-party websites or platforms handle your personal data.

9. Data security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, alteration or misuse.

Nevertheless, no transmission of data over the internet can be considered completely secure. For this reason, we recommend that you do not send sensitive or confidential information through the contact form.

10. Your rights

In accordance with applicable data protection legislation, you have the right:

• to request access to your personal data,
• to request the correction of inaccurate or incomplete data,
• to request the deletion of your data, where permitted,
• to request the restriction of processing,
• to object to processing, where a relevant right exists,
• to request the portability of your data, where applicable,
• to withdraw your consent, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of the above rights, you can contact us at info@androsroyalvilla.gr.

11. Cookies Policy

Cookies are small text files stored on your device when you visit a website. They are used to make the website work properly, to remember your choices or, where you have given consent, to help analyse traffic and improve the user experience.

Categories of cookies that may be used

12. Managing and disabling cookies

You can manage or disable cookies through your browser settings. Most browsers allow you to delete cookies, block them or display a notice before they are stored.

If the website has an active cookie consent management mechanism, you can change your choices at any time through the available cookie settings.

13. Changes to this policy

This Privacy & Cookies Policy may be updated when the website, our services, the tools used or our legal obligations change.

Each new version will be published on this page with an updated last-modified date.