Privacy Policy
This Privacy Policy explains how we process personal data when you visit stylishvillacorfu.com or contact us about a stay at Stylish Private Poolside Villa, in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and Greek law 4624/2019.
1. Who we are (data controller)
- ΚΟΥΛΟΥΡΗΣ-ΜΗΝΑ ΙΔΙΩΤΙΚΗ ΚΕΦΑΛΑΙΟΥΧΙΚΗ ΕΤΑΙΡΕΙΑ
- Registered seat: Ethniki Odos Palaiokastritsas 0, 49100 Corfu, Greece
- Branch address: Lantzes, Korission, Argyrades 0, 49100 Corfu, Greece
- Tax ID (ΑΦΜ): 801510189
- Business registry (ΓΕΜΗ) no.: 158223833000
- Branch registry (ΓΕΜΗ) no.: 158223833003
- Company owner: Menelaos Koulouris, tel. +30 698 882 8285
- Contact email: anastasiakoul30@gmail.com
- Contact phone: +30 698 084 1834
2. What data we collect
We only collect the data you choose to give us, plus the minimum technical data needed to deliver the website:
- Contact form: your name, email address, phone number (optional) and message.
- Booking request: the above, plus your chosen dates, the number of adults and children and the children’s ages.
- Direct contact: if you call us, email us or message us on WhatsApp, we receive the details you share in that communication.
- Technical data: when you visit the website, our hosting provider processes your IP address, browser type and the pages requested, in order to deliver the site and protect it against abuse.
- Visit statistics: we use Cloudflare Web Analytics to see, in aggregate, how many people visit the website, which pages they view and which website referred them. It works without cookies and does not identify or follow individual visitors.
The availability calendar does not collect any data about you. It only shows which dates are already booked, based on calendar feeds from Airbnb and Booking.com that contain dates only.
3. Why we use your data and on what legal basis
- To answer your questions and booking requests — steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) or our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).
- To arrange and carry out your stay if you book directly with us — performance of a contract (Art. 6(1)(b) GDPR).
- To comply with legal obligations, for example tax and accounting rules that apply to bookings (Art. 6(1)(c) GDPR).
- To operate the website securely — our legitimate interest in a reliable and secure website (Art. 6(1)(f) GDPR).
- To understand how the website is used and improve it, using aggregate statistics only — our legitimate interest (Art. 6(1)(f) GDPR).
We do not use your data for marketing or advertising, we do not sell it, and we do not use automated decision-making or profiling.
4. Who receives your data
We use the following service providers, who process data on our behalf and only as needed for their service:
- Cloudflare, Inc. — website hosting, security and aggregate visit statistics.
- Formspree, Inc. — delivery of the contact and booking request forms to our email.
- Google (Gmail), our email provider — receipt and storage of the emails you send us.
- OpenStreetMap Foundation — the map images in the location map are loaded from its servers, which receive your IP address. No cookies are set.
If you choose to contact us on WhatsApp, or follow a link to Airbnb, Booking.com or Google Maps, those services process your data under their own privacy policies.
5. Transfers outside the European Union
Some of the providers above are based in the United States. Where data is transferred outside the European Economic Area, this is done on the basis of the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.
6. How long we keep your data
- Enquiries and booking requests that do not lead to a stay: 12 months after our last communication.
- Bookings: 5 years from the end of the year in which the stay took place, as required by Greek tax legislation.
- Copies of the messages sent through our forms, held by Formspree: 30 days.
- Aggregate visit statistics, held by Cloudflare: 6 months.
- We do not store technical data such as IP addresses ourselves.
7. Your rights
You have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing and to data portability. To exercise these rights, contact us at anastasiakoul30@gmail.com. We will reply within one week.
You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).
8. Children
Our forms are intended for adults making a booking. When you tell us the ages of children travelling with you, we use this only to arrange your stay.
9. Security
The website is served exclusively over an encrypted (HTTPS) connection, and we take appropriate measures to protect the data you send us.
10. Changes to this policy
We may update this policy when our services or the law change. The date of the latest version is shown at the top of this page.