Privacy Policy

Last updated: 1st of July 2026

​

The protection of your personal data is important to us. This Privacy Policy explains how we collect, use, and protect the data you provide to us through the website www.asidekythnos.gr, in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Greek law.

​

1. Data Controller

The data controller for your personal data is:

Company name: Kythnos Services IKE Address: Koromila 7, Peristeri, PC 12133, Email: info@asidekythnos.gr, Phone: +3021 1010 7000.

​

2. What data we collect

Through the contact form: Name, surname, email, phone number, and the content of your message.

Through a booking request: Name, surname, email, phone number, address, arrival/departure dates, number of guests/companions, and, where required to confirm the booking, payment details (e.g., card number, expiry date). Payment details are submitted and processed securely, via an encrypted connection.

During check-in at the property (where required): ID/passport details, date of birth, nationality, and details of any companions, as required under applicable Greek guest-registration legislation.

​

3. Booking providers and third-party partners

We work with third-party booking providers and service tools, including, indicatively, Bookonlinenow, Booking.com, Airbnb, as well as tools such as Google Analytics. These providers process your data as independent controllers or processors, in accordance with their own privacy policies, which we recommend you review on their respective websites.

Within the scope of these arrangements, a contractual framework is in place with our third-party providers for the protection of your data, in line with GDPR requirements.

 

4. Purpose of processing

Your data is used to:

• Manage and confirm bookings.

• Respond to enquiries and contact requests.

• Fulfil legal obligations (e.g., guest registration).

• Send a newsletter, only where you have given your express consent.

• Improve the website's functioning through traffic statistics.

 

5. Legal basis for processing

Depending on the case, processing is based on the performance of the accommodation contract (booking), your consent (e.g., newsletter, non-essential cookies), compliance with a legal obligation (e.g., guest registration), or our legitimate interest (e.g., responding to enquiries).

 

6. Third-party data

If you make a booking on behalf of a third party (e.g., a companion), you represent that you have informed that person and obtained their consent to this Privacy Policy.

​

7. Data retention period

We retain your data for as long as necessary to fulfil the purposes described above, or as required by applicable law (e.g., tax/accounting obligations), after which it is securely deleted or anonymised.

​

8. Data security

We implement appropriate technical and organisational measures (encrypted connections, restricted access for authorised personnel) to protect your data against unauthorised access, loss, or disclosure.

​

9. Cookies Policy

Our website uses cookies to ensure its proper functioning, as well as for statistical purposes through tools such as Google Analytics. We distinguish between:

• Necessary cookies: for the website's basic functionality.

• Statistics/analytics cookies: to understand website traffic.

• Marketing cookies (where used): for personalised content/advertising.

You can manage your cookie preferences through your browser settings or via the consent banner on our website.

​

10. Your rights

You have the right to request:

• Access to your data.

• Correction of inaccurate data.

• Deletion of data ("right to be forgotten"), where applicable.

• Restriction of, or objection to, processing.

• Portability of your data.

• Withdrawal of your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise the above rights, please contact us at info@asidekythnos.gr. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

 

11. Minors

Our website is not directed at minors under 18 years of age. If we become aware that a minor's data has been collected without parental/guardian consent, we will promptly delete it.

​

12. Changes to this Policy

This Privacy Policy may be revised periodically. Continued use of the website following any modifications constitutes acceptance of the updated version.