Privacy Policy

Who we are

Villa Notos Lesvos is a private vacation rental located in Agios Isidoros, near Plomari, South Lesvos, Greece. This website (villanotoslesvos.com) is operated by the villa owners.

What data we collect

We only collect data that you provide directly to us through the booking enquiry form on this website. This may include:

• Full name (first and last)
• Email address
• Phone number (optional)
• Intended arrival and departure dates
• Number of guests (adults and children)
• Special requests or messages
• How you found us (optional)

With your consent, we also use Google Analytics to understand how visitors use this website (see "Cookies" below). We do not use cookies for advertising or profiling. Beyond this, we do not collect any data automatically beyond what is standard for web hosting (server logs such as IP address and browser type, retained briefly for security purposes).

Why we collect it and legal basis

We process your data for the following purposes:

To respond to your booking enquiry

Legal basis: Pre-contractual necessity (Article 6(1)(b) GDPR). We need your contact details and stay information to check availability and send you a quote.

To manage your booking

Legal basis: Performance of a contract (Article 6(1)(b) GDPR). Once a booking is confirmed, we use your data to manage your stay, communicate arrival details, and handle any requests.

To comply with legal obligations

Legal basis: Legal obligation (Article 6(1)(c) GDPR). Greek law requires tourist accommodation to register guest details with the relevant authorities.

How long we keep your data

We retain your personal data only as long as necessary:

• Enquiries that do not result in a booking are deleted within 3 months.
• Confirmed booking records are kept for up to 5 years for accounting and legal compliance purposes.

Who we share your data with

We do not sell, rent, or share your personal data with third parties for marketing purposes. Your data may be shared only in these limited circumstances:

• Email service provider — our email platform transmits enquiry form submissions to our inbox. Data is processed according to their privacy policy.
• Google Analytics — only if you accept analytics cookies (see "Cookies" below). Google acts as our data processor for this anonymised, aggregated usage data.
• Greek tax and tourism authorities — as required by Greek law for accommodation registration.
• Legal requirements — if required by law or a court order.

This website embeds Google Maps to display the villa location. Google may process data from your visit according to Google's Privacy Policy. The map loads only when you view the location section.

Cookies

When you first visit this website, a cookie banner asks whether you consent to analytics cookies. Your choice is stored in your browser (localStorage) so we don't ask again on future visits, and you can change your mind at any time using the "Cookie Preferences" link in the footer.

Strictly necessary

These are required for the website to function and cannot be switched off — for example, remembering your cookie consent choice and handling form submissions. They do not require consent.

Analytics (optional — requires your consent)

If you accept, we use Google Analytics (Google Ireland Limited) to understand how visitors use the site — for example, which pages are viewed and roughly how visitors found us. This helps us improve the website. Google Analytics is only loaded after you click "Accept" on the cookie banner; if you click "Decline" or take no action, it is never loaded and no analytics cookies are set.

Legal basis: Consent (Article 6(1)(a) GDPR). IP addresses are anonymised before being processed. Data collected by Google Analytics is processed according to Google's Privacy Policy, and you can opt out at any time by declining or withdrawing consent via "Cookie Preferences," or by installing the Google Analytics opt-out browser add-on.

Data security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or disclosure. All data is transmitted over encrypted HTTPS connections. Access to enquiry data is restricted to the villa owners.

Children's privacy

This website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with data, please contact us and we will delete it promptly.

Changes to this policy

We may update this Privacy Policy from time to time. The "last updated" date at the top of this page will reflect any changes. Continued use of the website after changes constitutes acceptance of the updated policy.

Contact

For any privacy-related questions or requests, please contact: