Privacy Policy

Introduction:

Thank you for visiting our privacy policy notice. Our highest priority at Diplos Studios is not only to offer you a pleasant stay, but also to ensure a safe and transparent environment for your personal data.

This Privacy Policy is governed by EU Regulation 2016/679, also known as the General Data Protection Regulation (GDPR). The purpose of this notice is to inform you about how we collect, use, store and protect your personal data. If you require further information, you may contact the Data Protection Authority of your country.

Name and Address of the Controller:

Controller for the purposes of the GDPR is:

Antonia Mavri “Diplos Studios”

Legal Representative: Kleoniki Charalampous

Glafkou 4 Parikia,Paros,84400,Cyclades

Email: diplosstudios@yahoo.gr

Tel.: +30 6978676494

Definitions:

Here is a short dictionary of the most commonly used terms you will come across in this Privacy Policy Notice:

a) Personal data: any information relating to an identified or identifiable natural person (“data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

b) Data subject: any identified or identifiable natural person, whose personal data is processed by the controller responsible for the processing.

c) Processing: any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

d) Restriction of processing: the marking of stored personal data with the aim of limiting their processing in the future.

e) Controller: the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

f) Processor: a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

g) Consent: any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

h) Profiling: any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.

Your Rights:

As a data subject, you have the following rights under the GDPR:

a) The right to be informed.

b) The right of access.

c) The right to rectification.

d) The right to erasure (“right to be forgotten”).

e) The right to restriction of processing.

f) The right to data portability.

g) The right to object.

h) Rights related to automated decision making and profiling.

You may contact us at any time to:

● Confirm whether we process your personal information.

● Access and verify the accuracy of your personal information.

● Request correction or update of inaccurate data.

● Request deletion, provided no legal obligations prevent us from doing so.

Data We Collect:

We do not collect personal information unless you voluntarily provide it to us, either by contacting us directly, filling out booking forms on our website, or through third-party booking platforms we collaborate with (e.g., Booking.com, Airbnb, Expedia).

This information may include:

● Name, email address, telephone number.

● Passport or ID number.

● Other relevant contact or stay information.

Legal Basis for Collecting Passport/ID Details:

The collection of passport or ID number is required by Greek law, which obliges accommodation providers to maintain a guest registry.

Purpose and Use of Personal Data:

We process your personal data only when one of the following applies:

● You have given your consent.

● Processing is necessary for the performance of a contract (e.g., booking your stay).

● We are required to comply with legal obligations.

● Processing is necessary for our legitimate business interests (e.g., communication and guest service).

Your data is used specifically to:

● Process reservations and manage your stay.

● Communicate with you regarding your booking or stay.

● Request feedback regarding your experience.

Marketing:

We may contact you for marketing purposes only if we have your explicit consent. You may withdraw consent at any time.

No Sale or Transfer of Data:

Your data will not be sold, exchanged or transferred to third parties without your consent, except where required by law.

Children’s Data:

Our website is not directed to individuals under 18. We do not knowingly collect personal data from children. If such data is collected unintentionally, we will delete it promptly.

Data Retention:

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law. After that, the data will be securely deleted.

Security:

We take appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, misuse or alteration.

Cookies:

Our website uses cookies to improve user experience. Cookies are small files stored on your device that allow the website to remember your preferences and analyze usage patterns.

If third-party services are used (e.g., Google Analytics), these may also collect anonymous statistical data.

Links to Other Websites:

Our website may contain external links. We are not responsible for the content or privacy practices of other websites. You are advised to review their privacy policies when visiting them.

No Automated Decision Making:

We do not engage in automated decision-making or profiling.

Changes to this Privacy Policy:

This policy may be updated periodically. Effective Date: May 25th, 2018 (last reviewed: 03/11/2025)

Contact Details:

For any requests, concerns or questions regarding the processing of your personal data:

Email: diplosstudios@yahoo.gr

Address: Glafkou 4 Parikia,Paros,84400,Cyclades

Phone: +30 6978676494