This Privacy Policy describes how Casa Kalamata collects, stores, uses, and protects the personal data of visitors and users of the website casakalamata.gr, as well as those who make reservations through it.

By using the website and our services, you explicitly accept the terms of this Privacy Policy.

The Privacy Policy is closely linked to the Terms of Use, the Reservation/Cancellation Policy, and the Residence Rules. Acceptance of this policy implies acceptance of the related pages as well.

Data Controller

The data controller for your personal data is Casa Kalamata, located in Kalamata, Greece. You can contact us regarding any matter related to your personal data at: 📧 info@casakalamata.gr

What Data We Collect

During your browsing of the website and/or your booking through it, we may collect:

  • Full name
  • Email
  • Telephone
  • Number of guests
  • Country of residence
  • VAT number (only for Greek citizens)
  • ID number or passport number (only for non-Greek guests)
  • IP address
  • Browsing Cookies
  • Data through Google Analytics (e.g., device type, browser, geographical location)
  • Bank deposit details are only collected for payment confirmation (we do not store IBAN or other banking details).

Legal Basis for Processing

The processing of personal data is based on the following legal grounds:

  • Execution of a Contractual Relationship (e.g., accommodation booking)
  • Legal Obligation (e.g., submission of information to tax authorities)
  • Consent (e.g., for sending informational emails)
  • Legitimate Interest (e.g., for website and transaction security)

Where the Data are used

Your personal data is used exclusively for the following purposes:

  • The execution of the reservation and stay
  • Compliance with tax and legal obligations
  • The management of communication and customer service
  • Improving the user experience of the website
  • For statistical purposes via Google Analytics

Data Retention Period

Your personal data is retained:

  • For as long as there is an active reservation or a related legal obligation.
  • Up to 90 days after the completion of the reservation.
  • In any case, the data will be deleted upon the user’s request, unless there is a legal or contractual obligation to retain them.

Sharing of Data with Third Parties

Your data is not shared with third parties, except for the following cases:

  • Competent Authorities in Case of Legal Requirement

No Sale or Rental of Personal Data to Third Parties

User Rights (According to GDPR)

You have the right:

  • Access to Your Data
  • Correction or Deletion
  • Restriction of Processing
  • Withdrawal of Consent
  • Submitting a Complaint to the Personal Data Protection Authority (www.dpa.gr)

You can exercise the above rights by sending an email to info@casakalamata.gr.

Cookies and Tracking Technologies

The website uses cookies for:

  • Traffic Analysis
  • Storing preferences
  • Ensuring technical functionality
  • Connection to third-party services (Google Analytics)

You can change the cookie settings from your browser at any time.

Data Security

Your personal data is protected by:

  • SSL encryption
  • Limited access only to authorized individuals.
  • Systematic backup creation.
  • Physical and electronic protection from unauthorized access.

Modifications of the Policy

This policy may be modified at any time without prior notice. The latest version is always available on this page.