Last updated: 10 November 2026
1. Who we are
The controller of the personal data collected through the website casasivota.gr is CASASIVOTA E.E., VAT No. 997298695, Tax Office of Igoumenitsa, G.E.MI. No. 132011128000, registered in Sivota, Thesprotia, 46100, Greece.
Contact for personal data matters: [email protected], tel. +30 697 305 5704.
2. What data we collect
- Contact form: first name, last name, email, phone and the content of your message (e.g. dates, number of guests, special requests).
- Contact by email, phone, WhatsApp or Viber: your contact details and whatever you write or tell us.
- Bookings and stays: the details required for the booking, for issuing receipts and invoices and for the legal obligations of a tourist accommodation.
- Browsing data: IP address, device and browser type, pages visited. These are collected through cookies and server log files (see section 6).
3. Why we process data and on what legal basis
- Replying to enquiries and quotes for your stay: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).
- Performing your booking and stay: performance of a contract (Article 6(1)(b) GDPR).
- Tax, accounting and other legal obligations of the accommodation (Article 6(1)(c) GDPR).
- Website security and prevention of misuse: legitimate interest (Article 6(1)(f) GDPR).
- Visitor statistics: only with your consent through the cookie banner (Article 6(1)(a) GDPR).
4. Who we share data with
We do not sell or rent personal data. Data may only be shared:
- with our website hosting provider and technical support providers, acting on our behalf,
- with Google (Google Analytics / Site Kit), provided you have accepted the relevant cookies,
- with our accountant and public authorities, where required by law.
If you book through Booking.com or contact us through WhatsApp, Viber, Facebook or Instagram, these platforms process your data as independent controllers, in accordance with their own privacy policies.
Some providers (e.g. Google) may process data outside the European Economic Area, with the safeguards provided by the GDPR (adequacy decision or standard contractual clauses).
5. How long we keep data
- Enquiries without a booking: up to 2 years from the last contact.
- Booking details and receipts/invoices: for as long as required by tax and accounting law.
- Cookies: for the duration stated in the cookie banner and your browser settings.
6. Cookies
The website uses:
- Necessary cookies for the operation and security of the website and for storing your choice in the cookie banner.
- Preference cookies, e.g. for the language you selected.
- Statistics cookies (Google Analytics), only if you accept them.
You can change your choice at any time by deleting the cookies from your browser. The cookie banner will then appear again.
7. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal. To exercise your rights, write to us at [email protected]. We will reply within one month.
You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr) or with the supervisory authority of your country of residence.
8. Security
The website uses an encrypted connection (HTTPS) and we apply technical and organisational measures to protect data from unauthorised access, loss or alteration.
9. Changes
We may update this policy. The version in force is always the one published on this page, with the date of the last update at the top.
This is a translation of the Greek original. In case of discrepancy, the Greek version prevails.