Πολιτική Απορρήτου

1. Who We Are

Aroma Suites is a boutique hotel located at Agiou Mina, Fira, Santorini 84700, Greece. We are the data controller for personal information collected through this website (aromasuites.com) and during the course of providing our hospitality services. You can contact us at info@aromasuites.com or by phone at +30 22860 24112.

2. Information We Collect

We collect information that you provide directly to us:

• Contact form submissions: name, email address, phone number, and your message
• Booking inquiries: dates, room preferences, and guest details
• Email correspondence: content of emails you send to us

We do not process payments on this website. All booking transactions are handled through our secure third-party reservation system (reserve-online.net), which has its own privacy policy.

3. Cookies

This website uses only essential cookies that are necessary for the website to function properly. We do not use advertising cookies, tracking pixels, or analytics cookies that identify individual users.

Essential cookies include session cookies for the contact form's CAPTCHA verification (Cloudflare Turnstile) to prevent spam. These expire when you close your browser.

4. How We Use Your Information

• To respond to your inquiries and contact form submissions
• To process booking requests and provide our hospitality services
• To communicate with you about your reservation
• To comply with legal obligations

5. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on:

• Contractual necessity: to fulfill booking requests and provide our services
• Legitimate interest: to respond to your inquiries
• Legal obligation: to comply with Greek and EU law

6. Data Sharing

We do not sell your personal information. We may share your data with:

• Email service provider: to deliver contact form submissions (Hostinger SMTP)
• Security service: Cloudflare Turnstile for spam prevention
• Hosting provider: Vercel for website hosting
• Legal authorities: when required by Greek or EU law

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Contact form submissions are retained for the duration needed to respond to your inquiry and for a reasonable period afterward for follow-up purposes.

8. Your Rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Data portability
• Lodge a complaint with the Hellenic Data Protection Authority (HDPA)

To exercise any of these rights, contact us at info@aromasuites.com.

9. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Our website is served over HTTPS, and contact form submissions are protected by CAPTCHA verification.

10. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.