This policy explains what personal data Chatzis Villas collects when you request a stay or get in touch, why we collect it, who we share it with, and the rights you have over it.
Who we are
Chatzis Villas, Rhodes, Greece. We are the "data controller" for the personal data described here. For any privacy question or request, email info@chatzisvillas.com.
What we collect and why
When you request a stay we collect the details you enter in the form: your name, phone number, email address, guest count, and your chosen villa and dates. We use these only to check availability, respond to your request, and manage your stay if confirmed.
The legal basis for this is performance of a contract (Article 6(1)(b) GDPR): we need these details to process your request. If you email or call us, we use your contact details to answer you.
The request form also includes automated security measures to detect and block fake or automated submissions; we rely on our legitimate interest in protecting the business and genuine guests (Article 6(1)(f) GDPR).
Who we share it with
We do not sell your personal data and we do not use it for advertising. We share it only with the service providers that make the booking work, acting on our instructions:
- Our booking system, running on a server hosted by Hetzner in Helsinki, Finland (inside the EU), which stores your request.
- Cloudflare, which hosts this website and runs the security check on the request form.
- An email service provider that delivers our reply and any confirmation emails.
- Our property manager, if your stay is confirmed and needs to be registered with them.
Where your data is stored
Your request details are stored on servers inside the European Union (Finland). Some providers we rely on, such as Cloudflare, are based in the United States. Where your data is handled outside the EU, it is protected by appropriate safeguards — the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.
How long we keep it
We keep your request data only for as long as we need it to manage your stay and keep reasonable business records — normally no longer than 24 months after your visit — after which it is deleted or anonymised.
Cookies and tracking
This website uses no analytics, advertising, or tracking cookies, and we do not profile visitors. The request form loads a security check (Cloudflare Turnstile); this is strictly necessary for that feature. Because we set no non-essential cookies, we do not show a cookie-consent banner.
Your rights
Under the GDPR you have the right to:
- ask for a copy of the personal data we hold about you;
- have inaccurate details corrected;
- ask us to delete your data;
- restrict or object to how we use it;
- receive your data in a portable format.
To exercise any of these, email info@chatzisvillas.com. You also have the right to complain to the Hellenic Data Protection Authority (www.dpa.gr).
Contact
Questions about this policy or your data? Email info@chatzisvillas.com.