Privacy Policy

EUPHORIA MONOPROSOPI IDIOTIKI KEFALAIOUCHIKI ETAIREIA ("we", "us", "our") operates www.euphoriaboutiquehotel.com and is committed to protecting your personal data in accordance with the General Data Protection Regulation 2016/679 (GDPR). This Privacy Policy explains how we collect, use, and protect your information when you visit our website or make a booking.

1. Contact Information & Data Controller
Company: EUPHORIA MONOPROSOPI IDIOTIKI KEFALAIOUCHIKI ETAIREIA
Address: Skala Panagias O.T. 58, Thasos 64004, Greece
VAT Reg. Number: EL997155948
Gen. Commerce No.: 148622630000
Telephone: +30 2593 440020
Data Protection Officer: Anestis Zamanopoulos
Email: anestis@euphoriaboutiquehotel.com
For any privacy-related questions or requests, please contact us at the details above.

2. Personal Data We Collect & Why
Depending on how you interact with our website, we may collect the following:
• Booking data (name, ID/passport number, email, phone, address, arrival/departure dates, special requests) → to process and manage your reservation, on the basis of Art. 6(1)(b) GDPR.
• Technical data (IP address, browser type, device info, language settings, usage activity) → for website operation and analytics, on the basis of Art. 6(1)(a) and Art. 6(1)(f) GDPR, as further described in our Cookies Policy.
• Marketing data (email address, name, communication preferences) → to send you newsletters and promotional offers, on the basis of Art. 6(1)(a) GDPR (consent), where you have explicitly opted in.
Note: Card payment processing is handled securely by our third-party payment provider. We do not store your card details on our systems.

3. Marketing Communications
Where you have given us your explicit consent, we may send you newsletters, special offers, and promotional content related to our hotel and services. You can withdraw your consent at any time by clicking the "unsubscribe" link in any marketing email or by contacting us directly. Withdrawing consent does not affect the lawfulness of any prior processing carried out on the basis of your consent.

4. Who We Share Your Data With
We do not sell or trade your personal data. We may share it only where necessary with:
• Service providers who support our website and booking operations (e.g. IT and reservation platforms), strictly for the purpose of delivering those services.
• Law enforcement or regulatory authorities, when required by applicable law or court order.
All recipients are required to handle your data securely and in compliance with GDPR.

5. Where Your Data is Processed
Your personal data is stored and processed exclusively within the EU/EEA. If a transfer outside the EU/EEA ever becomes necessary, we will inform you and apply appropriate safeguards in accordance with applicable data protection law.

6. How Long We Keep Your Data
We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Retention periods are determined by factors such as the duration of our relationship with you, legal and tax obligations, and any legitimate interest in maintaining accurate records for dispute resolution.

7. Children's Data
Our website and services are not directed at children under the age of 16. We do not knowingly collect personal data from minors under 16 without verifiable parental consent. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at anestis@euphoriaboutiquehotel.com so we can promptly delete it.

8. Automated Decision-Making & Profiling
We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you, within the meaning of Art. 22 GDPR.

9. Your Rights
Under the GDPR, you have the right to:
• Access your personal data and receive a copy of it.
• Correct inaccurate or incomplete data.
• Request erasure of your data, where the conditions of Art. 17 GDPR are met.
• Restrict processing of your data, where the conditions of Art. 18 GDPR are met.
• Object to processing based on legitimate interest, including direct marketing.
• Data portability, where the conditions of Art. 20 GDPR are met.
• Withdraw consent at any time, without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at anestis@euphoriaboutiquehotel.com. We will respond promptly. If you are unsatisfied with our response, you have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA), 1-3 Kifissias Avenue, Athens 11523 - www.dpa.gr.

10. Links to Third-Party Websites
Our website may contain links to external sites. We have no control over and accept no responsibility for the content or privacy practices of those sites. We encourage you to review their privacy policies before providing any personal data.

11. Updates to This Policy
We may update this Privacy Policy from time to time. Any significant changes will be posted on our website. We encourage you to review this page periodically to stay informed.