🛡️ Privacy Policy for Aiolis-Rooms.com
📝 Data Controller
The data controller responsible for the processing of your personal data is Aiolis Rooms I.K.E. (“We,” “Us,” or “Our”).
Website: aiolis-rooms.com
Address: Kamariotissas-Samothrakis PO: 68002 Samothrace – Greece
Email: [email protected]
📊 Data We Collect
We collect and process the following categories of personal data, primarily for reservation purposes:
Technical Data: IP address, browser type, and location data (collected via our booking system, web server, and analytics tools).
Reservation Data: Full name, phone number, email address, nationality, and special requests (e.g., dietary needs, mobility).
Financial Data: Payment method details, including partial or full advance payment status (note: We do not store full credit card numbers; payment processors handle this).
Communication Data: Records of emails or messages sent between you and us.
⚖️ Legal Basis and Purpose of Processing (GDPR)
We rely on the following legal bases to process your data:
| Legal Basis | Purpose of Data Collection | Data Collected |
| Contractual Necessity | To process, confirm, and manage your reservation and stay (including advance payments). | Reservation Data, Financial Data |
| Legitimate Interest | To improve our services, manage our website security, and analyze website traffic. | Technical Data, Communication Data |
| Legal Obligation | To comply with local tax, health, and tourist registration laws (e.g., identity verification). | Name, Nationality, Dates of Stay |
🔗 Data Sharing and Recipients
4. 🔗 Data Sharing and Recipients
We only share your data with third parties when absolutely necessary to operate our services:
Law Enforcement: When legally required to comply with mandatory reporting or requests.
Payment Processors (PayPal, Banks): To process the advance payment securely.
Online Travel Agencies (OTAs): If your reservation originated from a third-party platform (e.g., Booking.com, Airbnb), we share status updates via iCalendar sync.
Retention and Your Rights
A. Data Retention
We retain your reservation data for the duration required by local tax and commercial law (typically 5 to 10 years) after your departure. All other data is retained only as long as necessary for the purpose it was collected.
B. Your GDPR Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right to Access: You can request a copy of the personal data we hold about you.
- Right to Rectification: You can request correction of inaccurate or incomplete data.
- Right to Erasure (‘Right to be Forgotten’): You can request that we delete your personal data, subject to any legal obligations we have (e.g., tax record keeping).
- Right to Restriction of Processing: You can request limits on how we use your data.
- Right to Data Portability: You can request that we transfer your data to another organization.
- Right to Object: You can object to processing based on legitimate interests or for direct marketing.
To exercise any of these rights, please contact us using the email provided in Section 1.
🍪 Cookies and Tracking
We use cookies to ensure the website functions correctly, analyze usage, and remember your preferences. By using the website, you consent to the use of cookies. We use:
- Essential Cookies: Required for the booking engine and navigation.
- Analytics Cookies: To track website traffic (e.g., via Google Analytics) and understand user behavior.
You can manage or disable cookies through your browser settings.
📅 Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our data processing practices or legal requirements.
We will post any changes on this page.
Last Updated: November 2, 2025