Privacy Policy

Last updated: April 26, 2026

This Privacy Policy explains how Aphrodite Studios collects, uses, and protects your personal data when you use our website, and informs you of your rights under the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Greek law.

1. Data Controller

The data controller responsible for your personal data is:

Aphrodite Studios
Kallithea, Halkidiki 63077, Greece
Email: info@aphroditestudios.gr
Phone: +30 2374 023662

2. What Data We Collect

Booking enquiry data

When you submit a booking enquiry through our contact form, we collect:

  • Full name
  • Email address
  • Number of guests (adults and children)
  • Requested check-in and check-out dates
  • Any message you choose to include

Usage data

We use Google Analytics to understand how visitors use our website. With your consent, Google Analytics may collect your IP address, browser type, pages visited, and time spent on pages. This data is anonymised and used solely to improve our website. Google Analytics is only activated if you accept analytics cookies.

3. Legal Basis for Processing

We process your personal data on the following legal bases (Article 6 GDPR):

  • Performance of a contract / pre-contractual steps (Art. 6(1)(b)) — processing your booking enquiry so we can respond to your request for accommodation.
  • Consent (Art. 6(1)(a)) — for analytics cookies (Google Analytics). You may withdraw consent at any time via the cookie preferences link in the footer.
  • Legal obligation (Art. 6(1)(c)) — where we are required to retain data to comply with applicable law.

4. How We Use Your Data

We use your booking enquiry data solely to:

  • Respond to your accommodation enquiry
  • Communicate availability, pricing, and booking arrangements
  • Comply with any legal obligations

We do not use your data for marketing, profiling, or automated decision-making. We do not sell your data to third parties.

5. Data Sharing

We share your data only where necessary:

  • Email service provider (Resend.com) — processes enquiry emails on our behalf as a data processor. They act under our instructions and may not use your data for their own purposes.
  • Google LLC — if you consent to analytics cookies, Google Analytics processes anonymised usage data. Google may transfer data outside the EU under Standard Contractual Clauses.
  • Law enforcement — where required by law or valid public authority request.

We do not share your data with any other third parties.

6. Data Retention

We retain booking enquiry data for up to 3 years from the date of your enquiry, consistent with the statutory limitation period for contractual claims under Greek law. Usage data collected by Google Analytics is retained as configured in our Google Analytics account (default: 26 months).

7. Cookies

We use two categories of cookies:

  • Strictly necessary cookies — required for the website to function (e.g., anti-forgery tokens for the contact form, language preference). These do not require consent.
  • Analytics cookies (Google Analytics) — used to understand site usage. Activated only with your explicit consent. You can withdraw consent at any time via the cookie preferences link in our footer.

8. Your Rights

Under GDPR, you have the following rights regarding your personal data:

  • Right of access (Art. 15) — request a copy of the personal data we hold about you.
  • Right to rectification (Art. 16) — request correction of inaccurate data.
  • Right to erasure (Art. 17) — request deletion of your data, subject to our legal retention obligations.
  • Right to restriction (Art. 18) — request that we restrict processing of your data in certain circumstances.
  • Right to data portability (Art. 20) — receive your data in a machine-readable format where processing is based on consent or contract.
  • Right to object (Art. 21) — object to processing based on legitimate interests.
  • Right to withdraw consent (Art. 7(3)) — withdraw cookie consent at any time via the preferences link in the footer, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at info@aphroditestudios.gr or by phone at +30 2374 023662. We will respond within 30 days.

9. Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA):

  • Website: www.dpa.gr
  • Address: Kifissias 1-3, 115 23 Athens, Greece
  • Phone: +30 210 6475600
  • Email: contact@dpa.gr

10. Children's Privacy

Our website is not directed at children under the age of 15. We do not knowingly collect personal data from children under 15. If you believe a child has submitted an enquiry, please contact us and we will delete the data promptly.

11. Links to Other Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and recommend you review their policies.

12. Changes to This Policy

We may update this policy from time to time. The updated date at the top of this page reflects when changes were last made. For significant changes, we will endeavour to notify you via the website.

13. Contact Us

For any questions about this Privacy Policy or to exercise your data rights: