Privacy Policy

Processing of Personal Data:

This Privacy Policy describes the policies of Kyziridi House, Epar.Od. Astrous – Leonidiou, South Kynouria 223 00, Greece, email: on the collection, use and disclosure of your information that we collect when you use our website (, or our Booking Services. By accessing or using our booking services, you are consenting to the collection, use and disclosure of your information in accordance with this Privacy Policy. If you do not consent to the same, please do not access or use our website or our booking services.  

We may modify this Privacy Policy at any time without any prior notice to you, and will post the revised Privacy Policy on the Service. Your continued access or use of the Service after such time will constitute your acceptance of the revised Privacy Policy. We therefore recommend that you periodically review this page.

Processing of Personal Data:

The term Personal Data refers to any information of natural persons such as name, postal address, contact telephone number, e-mail address, identity number, VAT number, residential address, passport, bank account number, etc., which can be used to determine identity of a natural person, hereinafter “Personal Data or Data”. Processing of Personal Data is any act of collection, registration, organization, storage, use, transmission to third parties, etc. of personal data.

What personal data we collect:

Contact Form – Booking

In the event that you choose to contact us using our contact form or book a room, in addition to your message, you will need to fill in name, email, mobile, date of birth, address, identity number, country, VAT number, residential address, passport and when paying, your transaction bank card, bank account number or any other payment info. These are necessary in order to be able to contact you directly and to respond to the request for the use of services and information about your reservation. Your IP address is automatically recorded.

Purpose of personal data processing:

We collect your Data solely for the purposes of:

  1. The accommodation service provided in our apartments (indicative: accommodation reservation identification, etc.),
  2. To process financial transactions (indicative: payment confirmation, etc.)
  3. To comply with the obligations imposed by the applicable legislation and the tax obligations, e.g. issuing an invoice or receipt etc.,
  4. For statistical purposes, ensuring an appropriate level of security.
  5. Customer feedback collection.
  6. Dispute resolution.
  7. To update offers, promote, advertise our services.


If we want to use your information for any other purpose, we will ask you for consent and will use your information only on receiving your consent and, then, only for the purpose(s) for which grant consent unless we are required to do otherwise by law.

Booking cancellation policy:

We use Stripe (credit and debit cards, Google Pay, Apple Pay etc.) as payment method for our booking service.

You can cancel until 20 days before arrival for the full price of your transaction. You will be charged 50% of the total price of your booking if you cancel 19 days before arrival. If the guest doesn’t show up, they will be charged the total price of the transaction.

*A large portion of the underlying cost of payment processing is driven by fees assessed by banks and payment networks (like Visa and Mastercard). These networks set rules about which fees apply for refunded payments, and in many cases banks and card networks keep the entire upfront cost of a refunded transaction. For some regions and payment types, refunded payments also incur additional fees.

You may cancel your booking just by contact us through our contact form.

Embedded content from other websites:

Our Service may contain links to other websites that are not operated by us. This Privacy Policy does not address the privacy policy and other practices of any third parties, including any third party operating any website or service that may be accessible via a link on the Service. We strongly advise you to review the privacy policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Posts on this website may have embedded content (e.g. images, videos, plugins) from other websites (e.g. YouTube, Facebook). Embedded content behaves in the same way as if the user had visited the websites from which it originated.

These sites may collect data about you, use cookies, incorporate additional tracking from third-party services, and record your interaction with that content (including your interaction with the content if you have an account on the site and are logged in).

Google Analytics:

This website uses the Google Analytics service. The data recorded by the service is anonymous and relates to traffic information for each visitor, such as pages visited by a user, time spent on each page and geographic origin of views. By using the website, you declare that you accept the recording of this data.

How We Share Your Information:

We will not transfer your personal information to any third party without seeking your consent, except in limited circumstances as described below:

  • Analytics
  • Payment recovery services
  • Data collection & process


We require such third party’s to use the personal information we transfer to them only for the purpose for which it was transferred, and not to retain it for longer than is required for fulfilling the said purpose. We may also disclose your personal information for the following: (1) to comply with applicable law, regulation, court order or other legal process; (2) to enforce your agreements with us, including this Privacy Policy; or (3) to respond to claims that your use of the Service violates any third-party rights. If the Service or our company is merged or acquired with another company, your information will be one of the assets that is transferred to the new owner.

How long we keep your data:

We will retain your personal information with us for as long as we need it to fulfill the purposes for which it was collected, as detailed in this Privacy Policy. We may need to retain certain information for longer periods, such as record-keeping / reporting in accordance with applicable law or for other legitimate reasons like enforcement of legal rights, fraud prevention, etc. Residual anonymous information and aggregate information, neither of which identifies you (directly or indirectly), may be stored indefinitely.

The data you submit in the contact form is kept indefinitely. In particular, the retention period of the Data is determined by the retention obligation imposed by the applicable legal framework, as well as the legal framework governing our tax obligations. It is possible to extend the duration of the retention of the Data for the purposes of proving before the courts the fulfillment of contractual obligations by us or in case it requires a rule of law or compliance with instructions of Public or Independent Authorities.

What rights do you have to your data:
  • You have the right to access your personal data. This means that you have the right to be informed by us if we are processing your Data. If we process your Data, you can ask to be informed about the purpose of the processing, the type of your Data that we keep, to whom we give it, how long we store it, whether automated decision-making takes place, but also about your other rights, such as correction, deletion of data, restriction of processing and filing a complaint with the Personal Data Protection Authority.
  • You have the right to correct inaccurate personal data. If you find that there is an error in your Data, you can submit a request to us to correct it (e.g. correct a name or update a change of address).
  • You have the right to erasure/right to be forgotten. You can ask us to delete your data if it is no longer necessary for the aforementioned processing purposes.
  • Furthermore, you have the right to portability of your Data. You can ask us to receive the Data you have provided in readable form or ask us to pass it on to another controller.
  • You have the right to restrict processing You may ask us to restrict the processing of your Data pending consideration of your objections to the processing.
  • Not only that, but you have the right to object to the processing of your Data. You can object to the processing of your Data or withdraw your consent, and we will stop processing your Data, unless there are other compelling and legitimate reasons that override your right.

In the event that you wish us to correct or delete data we have recorded, you can request this from us at, and we will accordingly correct or delete your data stored on the website.

How you can exercise your rights:

To exercise your rights you can send us a relevant request, describing the right you want to exercise to the e-mail address with a description of your request, and we will take care to consider it and answer you as soon as possible.

How we protect your data:

The security of your information is important to us and we will use reasonable security measures to prevent the loss, misuse or unauthorized alteration of your information under our control. However, given the inherent risks, we cannot guarantee absolute security and consequently, we cannot ensure or warrant the security of any information you transmit to us and you do so at your own risk.

We use a range of technical, organizational and administrative security measures and best practice techniques depending on the type of data processed. For example, the computer systems we use to store your data have access restrictions and cloud-based servers that use high-level disk encryption. Our website has an SSL encryption protocol. We use TLS and HTTPS encryption to protect your personal data when we transfer it over the internet.

We are committed to safeguarding your Personal Data. Furthermore, we have taken appropriate organizational and technical measures for the security and protection of Data from any form of accidental or unlawful processing. Security measures are reviewed and modified whenever deemed necessary. The processing of your Data in any way is permitted only to persons authorized by us, our employees and partners exclusively for the above-mentioned purposes. We carry out regular audits and inspections to ascertain data security and the implementation of the Policy.

If you wish to contact for any issue related to the processing of your Data and the exercise of your rights, you can contact the email address

Grievance / Data Protection Officer:

If you have any queries or concerns about the processing of your information that is available with us, you may email our Grievance Officer at Kyziridi House, Epar.Od. Astrous – Leonidiou, email: We will address your concerns in accordance with applicable law.

Cookie Policy:

To learn more about how we use these and your choices in relation to these tracking technologies, please refer to our Cookie Policy.