The details
How your information is handled
This policy applies to the Villa Anna website. External services, including Booking.com and Google Maps, also apply their own privacy terms when you choose to use them.
01
Who we are
This website is operated for Villa Anna in Paleochora, Crete. The property operator is responsible for personal data handled through this website and direct communications.
02
Personal data we collect
- Information you provide: name, email address, telephone number, requested dates, number of guests and enquiry details.
- Technical information: IP address, browser, device, approximate location, pages viewed, referral source, access time and website error or performance data.
- Cookie information: consent choices and identifiers stored by necessary or optional cookies.
- Booking information: information received from an external booking provider where needed to manage a reservation.
Please do not send payment-card details, identity documents or unnecessary sensitive information through ordinary email.
03
How and why we use data
- To respond to enquiries and take steps towards a booking.
- To manage a confirmed stay and provide requested services.
- To operate, protect and improve the website.
- To understand website use when optional analytics consent has been given.
- To comply with accounting, tax and other legal duties.
We do not use this website to make automated decisions that produce legal or similarly significant effects.
04
Cookies and analytics
The website may use strictly necessary cookies for operation, security and consent preferences. Optional analytics or third-party cookies may also be used, depending on the services enabled.
Analytics information helps us understand how the website is used and how it performs. Optional analytics should remain disabled until consent is provided where required. Your choice can be changed through the cookie settings control.
05
External services and data sharing
We do not sell personal data. Information may be processed only where needed to host the website, communicate with guests, manage reservations, comply with law or protect legitimate interests.
SiteGroundWebsite hosting, server logs, security, backups and technical infrastructure.
Google servicesMaps, Fonts or analytics, depending on the website configuration and your consent.
Booking.comExternal availability and reservation services under Booking.com’s own privacy notice.
WordPress providersTheme, plugin, caching, security or maintenance services where technical access is necessary.
Some providers may process information outside the European Economic Area. Where required, transfers must rely on a lawful safeguard such as an adequacy decision or Standard Contractual Clauses.
06
Retention and security
We keep personal data only for as long as reasonably necessary for the purpose for which it was collected or to meet legal obligations. This may include enquiry correspondence, booking and transaction records, limited server logs, analytics records and cookie-consent records.
Reasonable safeguards may include HTTPS encryption, controlled administrator access, software updates, backups, security monitoring and reputable hosting. No online service can guarantee complete security.
07
Your data-protection rights
Subject to applicable law, you may request access, correction, deletion, restriction or portability of your personal data; object to certain processing; withdraw consent; and lodge a complaint with the Hellenic Data Protection Authority.
08
Contact and policy updates
We may update this policy when the website, providers, tracking configuration or legal requirements change. The latest version will appear on this page with a revised date.
