Privacy Policy
Last updated 22 October 2026
This policy explains what personal data Chania Greco Villas I.K.E. ("Greco Villas", "we", "us") collects through this website (grecovillas.gr), why, and what rights you have under the EU General Data Protection Regulation (GDPR) and Greek Law 4624/2019.
Who we are
Chania Greco Villas I.K.E.
GEMH no. 191838958000 · VAT no. 803197125
Θέση Μαστοράκι ή Μακρύ Χωράφι, 73014 Χανιά, Crete, Greece
Email: chaniagrecovillas@gmail.com · Phone: +36 20 931 1029
What data we collect
This site collects personal data in two places: the "Send an enquiry" form (your name, email address, the property and dates you're asking about, and any message you write) and the booking request form on the Book page.
The enquiry form does not submit to a server we operate. Clicking "Send enquiry" opens your own email application with a pre-filled message addressed to chaniagrecovillas@gmail.com. We only receive what you actually send from your own email account, and only if you complete that step.
Booking requests
When you send a booking request from the Book page, the details you enter (name, email, optional phone number and message, dates and number of guests) are sent over an encrypted connection to our own booking system and stored in a database that Supabase hosts for us on servers in the EU. Booking emails to you and to us are delivered by Resend on our behalf. To show which dates are free, the Book page reads the booked dates from our Airbnb and Booking.com calendars, and those platforms in turn see only the dates of confirmed stays, never your name or contact details. The legal basis is taking steps at your request before a possible contract (GDPR Art. 6(1)(b)), and we keep booking records for as long as Greek tax and accounting law requires.
Why we process it, and on what basis
We use the information in your enquiry solely to answer your questions and, if you go on to book, to arrange your stay. This is processing necessary to take steps at your request prior to a possible contract (GDPR Art. 6(1)(b)).
Bookings through Airbnb or Booking.com
If you book through Airbnb or Booking.com instead of contacting us directly, that platform collects and processes your data under its own privacy policy, independently of this website.
Cookies and this site
This site uses Google Analytics only if you accept it in the cookie banner, and never uses advertising cookies. See our Cookie Policy for details, including the Google Maps embed on the Location section, which is a third-party service.
Website analytics
If you accept analytics cookies, Google Analytics 4 collects usage data (pages viewed, approximate location, device and browser type, a pseudonymous identifier) so we can understand how the site is used. The legal basis is your consent (GDPR Art. 6(1)(a)), which you can withdraw at any time via "Cookie settings" in the footer. Google Ireland Ltd. processes this data on our behalf; some of it may be transferred to the US under the EU–US Data Privacy Framework. We keep it for no longer than 14 months.
Server logs
Like most websites, our hosting provider automatically logs basic technical data (IP address, browser type, pages visited) for security and reliability. This is processed on the basis of legitimate interest (GDPR Art. 6(1)(f)) and kept for a maximum of 30 days before automatic deletion.
How long we keep it
Enquiry emails are kept only as long as needed to respond to you or, if you book directly, for the period required by Greek tax and accounting law for booking and payment records.
Your rights
Under the GDPR you have the right to access, correct, delete, or restrict the personal data we hold about you, to object to its processing, and to receive it in a portable format. To exercise any of these rights, email chaniagrecovillas@gmail.com. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).
Changes to this policy
If we start using marketing tools or change how bookings are handled, we will update this policy and, where required, request your consent first.