Privacy policy
Last updated: 16 October 2026
Who we are
Hotel Stavros, Pavlou Kountourioti 41, 57019 Peraia, Greece. We decide how the personal data described here is used (we are the "controller" under the GDPR). Contact us at stavros@hotelstavros.gr or +30 2392 024985.
What we collect and why
| What | Why | Legal basis (GDPR) |
|---|---|---|
| Enquiries and contact messages: name, email, phone, dates, number of guests, room and your message | To answer you and arrange your stay | Steps you ask for before a contract, Art. 6(1)(b) |
| Stays: the above plus your country, preferred language, stay details, amounts paid and our notes | To host you and keep our accounts | Contract, Art. 6(1)(b); tax law, Art. 6(1)(c) |
| Emails we exchange about your enquiry or stay | So anyone on our team can follow the conversation | Contract and legitimate interest, Art. 6(1)(b) and (f) |
| Bookings made through Booking.com, Expedia or Airbnb: the details they send us | To host you | Contract, Art. 6(1)(b) |
| Offers, only if you tick the box: name and email | Occasional offers, no more than a few a year | Your consent, Art. 6(1)(a), which you can withdraw at any time |
| Website security: our server logs (IP address and pages requested) | To keep out spam and misuse | Legitimate interest, Art. 6(1)(f) |
We never sell personal data or use it for advertising.
Who handles data for us
- DigitalOcean hosts our website and records on servers in Frankfurt, Germany.
- Our email providers host our mailbox and send the emails we write to you.
- WhatsApp (Meta), only if you choose to message us there.
Cookies
We only use the two cookies the website needs to work: one keeps your visit going (the session) and one protects our forms against misuse. We use no analytics, advertising or tracking cookies.
How long we keep it
- Enquiries that never become a stay: deleted after 24 months.
- Stays and invoices: as long as Greek tax law requires.
- The offers list: until you unsubscribe.
- Server logs: 14 days. Backups of the whole system: 7 days.
Your rights
You can ask to see, correct or delete your data, to limit or object to its use, to receive it in a portable format, and to withdraw your consent. Email stavros@hotelstavros.gr and we will reply within one month.
You can also complain to the Hellenic Data Protection Authority, Kifisias 1–3, 115 23 Athens, www.dpa.gr.
Security
The website uses an encrypted connection (HTTPS). Only our staff, each with a personal login, can see guest details.
Children
Our website is not meant for children under 15. Enquiries and bookings must be made by adults.
Changes
We update this policy when our practices change; the date at the top shows the latest version.