Privacy Policy

Who we are

Veneto Sea View Apartments, Agiou Ioanni, Stalida Beach road, Stalis 700 07, Crete, Greece (phone +30 6971549430, email info@venetostalis.gr) is the controller of the personal data described in this policy.

If you have any question about this policy or the way we handle your data, write to info@venetostalis.gr or call us during reception hours.

What data we collect

Through the contact form on this website we collect your name, e-mail address, optionally your phone number, and the message you write to us.

If you contact us by phone, e-mail or a booking platform, we collect the details you give us in that conversation.

If you book and stay with us, we collect the information needed to host you: your name, arrival and departure dates, contact details, and the identification details that Greek law requires accommodation providers to record for their guests.

Why we use your data

To answer your enquiry (contact form, e-mail or phone): legal basis is your consent, Art. 6(1)(a) GDPR.

To prepare, manage and host your stay: legal basis is the performance of a contract, Art. 6(1)(b) GDPR.

To comply with obligations that Greek and EU law place on accommodation providers, such as guest registration and tax records: legal basis is a legal obligation, Art. 6(1)(c) GDPR.

To keep this website and our systems secure: legal basis is our legitimate interest, Art. 6(1)(f) GDPR.

Bookings through other platforms

You can book Veneto through our direct booking engine and through Booking.com, Airbnb, Expedia or by phone. If you book through one of those platforms, that platform processes your booking data under its own privacy policy. Please read the privacy policy of the platform you use.

When a booking is forwarded to us, we receive only the details needed to prepare your stay, such as your name, contact details and dates.

Where your data is stored

This website is hosted by a hosting provider in the European Union. When you submit the contact form, your message is delivered to our e-mail inbox, where we read and answer it.

The hosting provider keeps short-lived server access logs (for example your IP address, the time of your visit and the page requested) for security and error diagnosis.

How long we keep it

Enquiries are kept only as long as needed to answer you and for a reasonable period afterwards.

Guest records are kept for as long as Greek tax and commercial law requires, typically up to five years. Anything beyond that is deleted or anonymised.

Your rights under the GDPR

You have the right to access your personal data, to have it corrected or erased, to restrict its processing, to receive it in a portable format, to object to its processing and to withdraw a consent you have given at any time.

To exercise any of these rights, contact info@venetostalis.gr. We will answer within one month.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (1-3 Kifisias Avenue, 115 23 Athens, www.dpa.gr).

Security

This website is served over HTTPS. Access to our e-mail and booking systems is password-protected and limited to the people who need it to look after our guests.

Changes to this policy

We may update this policy from time to time. The date below always reflects the current version.