1. Who We Are

We are the data controller responsible for your personal data collected via this Website and related hotel services.

2. Types of Personal Data We Collect

We collect personal information that you provide directly or automatically through your use of the Website.

2.1 Data You Provide
• Full name
• Email address
• Telephone number
• Nationality
• Booking details (dates, number of guests, room preferences and requests)
• Messages or inquiries sent via contact or booking forms

2.2 Automatically Collected Data
• IP address
• Browser type and version
• Device type
• Website pages visited
• Cookies and similar tracking technologies

2.3 Optional Data
• Newsletter subscription details
• Loyalty program membership data

3. How We Use Your Personal Data

We use your personal data for the following purposes:
1. To process and manage bookings and provide hotel services.
2. To communicate with you, reply to inquiries, confirmations, reminders, updates.
3. To personalise your experience and improve services.
4. To send marketing communications, if you have consented.
5. To maintain Website functionality, analyse usage, performance and security.
Some data (such as IP address) is used to protect our site from fraud and unauthorized access.

4. Legal Basis for Processing

We rely on the following legal bases for using your personal data:
• Consent — where you agree to receive marketing communications.
• Contractual necessity — to fulfil booking agreements and provide services.
• Legal obligation — to comply with applicable laws (e.g., tax, safety).
• Legitimate interests — to administer the Website, improve services, and ensure security.

5. Cookies and Tracking Technologies

Our Website uses cookies and similar technologies to:
• Ensure proper Website operation
• Remember preferences
• Analyse traffic and usage
You may manage cookies through your browser settings or via the cookie consent banner.
Some cookies may be set by third-party services embedded on the Website.

6. Who We Share Your Data With

Your personal data may be shared with:
• Booking systems, reservation platforms, channel managers
• Payment service providers (secure third-party processors)
• IT, hosting, website support vendors
• Third-party analytics and advertising partners
• Legal or governmental authorities when required by law
All partners processing your personal data are contractually required to protect your privacy and comply with GDPR.

7. International Transfers of Personal Data

We may transfer personal data outside the EU/EEA only when appropriate safeguards are in place, such as:
• Standard Contractual Clauses (SCCs)
• Adequacy decisions approved by the European Commission

8. Data Retention

We retain personal data only as long as necessary:
• To provide services and fulfill contract obligations
• To comply with legal, tax, accounting requirements
• For legitimate business purposes such as dispute resolution and audits
After the retention period expires, personal data is securely deleted or anonymised.

9. Your Data Protection Rights (Under GDPR)

Subject to applicable law, you have the right to:
• Access your personal data
• Correct inaccurate data
• Request erasure (“right to be forgotten”)
• Restrict or object to processing
• Withdraw consent at any time
• Receive a copy of your data (data portability)
• Lodge a complaint with a supervisory authority
If you are in Greece or the EU, your supervisory authority is the Hellenic Data Protection Authority. You can find more information at https://www.dpa.gr.

10. Marketing Communications

We only send promotional emails if you have given consent. You can opt-out at any time by:
1. Clicking “unsubscribe” in the email
2. Contacting us directly at [info@seacoastresort.gr]

11. Data Security Measures

We implement technical and organisational measures to protect personal data against unauthorised or unlawful processing, and against accidental loss, destruction or damage.
These include encryption, secure servers, access controls, and monitoring systems.

12. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in law, technology, or hotel operations. We will post the revised version on this Website with the effective date.

13. Contact Information

For questions, requests or concerns about your personal data or this Privacy Policy, please contact:
Email: info@seacoastresort.gr
Phone: +30 2371440850