Privacy Policy
1. Data Controller
The Data Controller for the processing of personal data is:
Rosa’s Beach Studios – ROZALIA ANDREATOU
Email: rosasbeachstudios@gmail.com
Website: www.rosa-studios.gr
For any matter related to the processing of personal data, you may contact us using the above details.
2. How we collect personal data
Personal data are collected when you:
- make a reservation (online or directly),
- contact us via email or contact form,
- stay at our accommodation,
- browse and use our website.
3. Personal data we collect
The Business collects only the personal data that are strictly necessary, including:
- Full name
- Telephone number
- Email address
- Reservation and stay details
- Identification document details, where required by law
- Payment-related information, processed via certified payment providers
- Information you provide through communication with us
- Technical data (e.g. IP address)
4. Purposes of processing
Personal data are processed exclusively for the following purposes:
- management of reservations and stays
- provision of accommodation services
- processing of payments
- communication with guests regarding their stay
- compliance with legal and tax obligations
- improvement of the quality of our services
5. Legal basis for processing
The processing of personal data is based on:
- the performance of a contract (reservation and accommodation)
- compliance with a legal obligation
- the data subject’s consent, where required
- the legitimate interests of the Business
6. Online reservations & payments
Online reservations are carried out through a third-party certified online booking engine, acting as a Data Processor, in accordance with the GDPR. Payments are processed through secure and certified payment providers. The Business does not store credit or debit card details on its systems.
7. Disclosure of personal data to third parties
Personal data may be disclosed only:
- to cooperating service providers (e.g. booking engine, accountant), strictly for the provision of services,
- to competent public authorities, where required by law.
- No transfer of personal data outside the European Union takes place without the legally required safeguards.
8. Data retention period
Personal data are retained only for as long as necessary to fulfill the purposes of processing and in accordance with applicable legal obligations.
9. Rights of data subjects
Guests have the right to:
- access their personal data
- rectify or complete inaccurate data
- request erasure, where legally permitted
- request restriction of or object to processing
- data portability
- withdraw consent, where consent has been given
Requests may be submitted to rosasbeachstudios@gmail.com.
Data subjects also have the right to lodge a complaint with the Hellenic Data Protection Authority.
10. Cookies
The website www.rosa-studios.gr uses cookies to ensure proper operation and to enhance the browsing experience.
Further information is available in the website’s Cookie Policy.
11. Data security
The Business implements appropriate technical and organizational measures to ensure the confidentiality, integrity and security of personal data.
12. Amendments to this Policy
This Privacy Policy may be amended from time to time. Any changes will be published on the Business’s website.