1. Data Controller

The Data Controller for your personal data is:

  • Business Name: ΧΡΙΣΤΟΦΙΛΟΠΟΥΛΟΣ ΒΑΣΙΛΕΙΟΣ ΤΟΥ ΔΗΜΗΤΡΙΟΥ
  • Trade Name: Windmills Hotel (Ξενώνες Ανεμόμυλοι)
  • Tax ID (AFM): 046771162
  • Address: Almyropotamos Beach, Styra, Karystos / Evia, 34015, Greece
  • Email: info@windmill-hotel.com
  • Phone: +30 22230 53696

2. What Data We Collect

We collect the following categories of data:

2.1 Data provided by you

  • Full Name
  • Email address
  • Phone number
  • Arrival and departure dates
  • Accommodation type preference (windmill or studio)
  • Messages sent to us via the contact form

2.2 Data collected automatically

  • IP Address
  • Browser type
  • Pages visited and duration of stay
  • Traffic source (how you found the website) The above are collected through cookies and analysis tools (Google Analytics).

3. Purpose & Legal Basis of Processing

We process your data for the following purposes:

  • Performance of a contract: Booking management and provision of accommodation services (Article 6§1b GDPR).
  • Legitimate interest: Improvement of services, fraud prevention, and website security (Article 6§1f GDPR).
  • Consent: Sending newsletters and offers (Article 6§1a GDPR) — only if you have opted in.
  • Legal obligation: Compliance with tax and accounting obligations (Article 6§1c GDPR).

4. Data Retention Period

  • Booking data: 5 years (tax obligation).
  • Communication data (contact form): 2 years from the last communication.
  • Marketing data (email list): Until consent is withdrawn.
  • Analytics data (cookies): According to cookie settings (see Cookie Policy).

5. Data Disclosure to Third Parties

We do not sell your data. We may share it with:

  • Booking platforms (e.g., Booking.com, Airbnb): Only if the booking is made through them.
  • Google LLC: For Google Analytics and Google Maps services.
  • Tax/Accounting authorities: Based on legal obligation.
  • Email marketing providers (if applicable): Upon your explicit consent.
    All third parties are contractually bound to comply with the GDPR.

6. Your Rights

In accordance with the GDPR (EU 2016/679) and Law 4624/2019, you have the right to:

  • Access: To know what data of yours we process.
  • Rectification: To request the correction of inaccurate data.
  • Erasure (“Right to be forgotten”): To request deletion under certain conditions.
  • Restriction of processing: To request a limitation on how your data is processed.
  • Portability: To receive your data in a structured format.
  • Objection: To oppose processing for marketing purposes.
  • Withdrawal of consent: At any time, without retroactive effect.

To exercise your rights, please contact: info@windmill-hotel.com
You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA): www.dpa.gr | tel. +30 210 6475600.

7. Data Security

We implement appropriate technical and organizational security measures to protect your data from unauthorized access, loss, or destruction, including SSL/TLS encryption for the website.

8. Privacy Contact Information

  • Email: info@xenones-anemomili.gr
  • Phone: +30 22230 53696
  • Address: Almyropotamos Beach, Styra, Karystos / Evia, 34015, Greece
Scroll to Top