1. Overview
D&N Villas as operator of this website is committed to protecting your privacy and personal data. We comply with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679), and the Greek Law 4624/2019, which implements the GDPR in Greece, as well as the ePrivacy Directive (2002/58/EC). This Policy explains how we handle personal data and cookies in connection with your use of this website.
2. Cookies
- This website only uses technically necessary cookies, if any, that are essential for the proper operation of the website (for example, to maintain a session).
- These cookies do not collect personal or behavioural data and are deleted automatically when your session ends.
- No marketing, tracking, or advertising cookies are used.
- If non-essential cookies are introduced in the future, you will be clearly informed and given a choice to accept or refuse them.
3. Personal Data
3.1 Personal Data We Collect
- We collect only the personal data that you voluntarily provide via the Inquiry Form: your full name, email address, message content (any text you send us).
- We do not collect personal data through any other means (no user accounts, no analytics, no third-party tracking).
3.2 Purpose and Lawful Basis of Processing
- Your personal data is processed exclusively to communicate with you and to manage your inquiry or booking process.
- Lawful bases (Art. 6 GDPR): Consent (Art. 6(1)(a)), Contract / Pre-contractual steps (Art. 6(1)(b)), Legal obligation (Art. 6(1)(c)).
3.3 Data Sharing and Transfers
- We will not sell, rent, or otherwise provide your personal data to third parties.
- We do not use your data for marketing or advertising purposes without your explicit.
- We do not transfer your personal data outside the European Economic Area (EEA).
3.4 Data Retention
- We retain your data only for as long as necessary to process your booking or inquiry, and fulfill legal or tax obligations, if any.
- After these purposes are fulfilled, your data will be securely deleted.
4. Your Rights under GDPR
You have the following rights concerning your personal data:
- Access – obtain confirmation and a copy of your personal data.
- Rectification – request correction of inaccurate or incomplete data.
- Erasure (“Right to be forgotten”) – request deletion of your data where legally possible.
- Restriction of processing – request that we limit how we use your data.
- Objection – object to processing in specific circumstances.
- Data portability – request transfer of your data to another controller.
If you wish to exercise any of these rights, please contact us at dnvillascrete@gmail.com. We will respond within one month, as required by Art. 12(3) GDPR. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA): Kifisias 1-3, 11523 Athens, Greece; www.dpa.gr, contact@dpa.gr.
5. Data Security
- We take appropriate technical and organisational measures to protect your personal data from accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.
- Access to data is restricted to persons who require it for the purposes described above.
6. Changes to This Policy
- We may update this Policy to reflect changes in our practices or legal requirements.
- The updated version will always be available on this website and include a revised “Last updated” date.
- We will notify you of major changes (e.g. by email or prominent notice) if those changes affect how your personal data is handled.
7. Contact Information
If you have any questions or requests regarding this Policy, how we process your personal data, or any concerns about privacy or data protection, please contact us at dnvillascrete@gmail.com.