Privacy Policy

The purpose of this Privacy Policy (the “Policy”) is to explain how we collect, use, store and protect your personal data when you use our website available at https://www.prosforiorooms.gr (the “Website”).

The processing of personal data carried out through this Website is the responsibility of the Data Controller.

1. Data Controller and Contact Information

The Data Controller of this Website is Daskalakis Nick / Prosforio Rooms & Apartments, located in Ouranoupoli, Chalkidiki, 63075, Greece. If you have any questions regarding this Privacy Policy or the processing of your personal data, you may contact us at info@prosforiorooms.gr.

2. Scope of This Privacy Policy

As the Data Controller, we are committed to protecting your privacy whenever you visit our Website.

This Privacy Policy explains how your Personal Data and browsing information are collected, used and protected when you use our Website.

For the purposes of this Policy, the term “Personal Data” means any information relating to an identified or identifiable natural person, regardless of the device used to access the Website.

The term “Device” refers to any equipment used to access and browse the Website, including computers, tablets, smartphones and similar devices.

The term “Regulation” refers to the applicable data protection legislation, including the General Data Protection Regulation (GDPR) where applicable.

By using our Website, you acknowledge that you have read and accepted this Privacy Policy.

If you do not agree with any part of this Policy, you should discontinue using our Website.

We may update this Privacy Policy from time to time. Where significant changes are made, we will notify users through appropriate notices on the Website or by email where required by law.

The most recent version of this Privacy Policy will always be available on this page.

3. Protection of Your Personal Data

In accordance with the applicable data protection legislation, we maintain a record of processing activities documenting the processing operations carried out through this Website. This record is made available to the competent supervisory authorities whenever required by law.

All information you provide while using this Website is treated as confidential and processed solely for the purposes described in this Privacy Policy.

3.1. What Personal Data Do We Collect and Process?

Depending on how you use our Website, we may collect and process the following categories of Personal Data:

Identification and contact information, including your first name, last name, postal address, telephone number, email address, preferred language and country of residence.
Reservation information, including your check-in and check-out dates, accommodation details and reservation number.
Information required to comply with legal obligations, including your full name, date of birth, nationality, type and number of identification or travel document, country of residence, arrival and departure dates, and any additional information required under applicable legislation.
Financial and payment information, including payment card details where required to complete your reservation. Online payments are securely processed through our certified booking platform, Bookoncloud. We do not store or process payment card details on our Website’s servers. Reservation-related payment information is managed through our certified Hotelizer Cloud PMS, which is accessible only to authorised personnel for reservation management purposes.
Connection and browsing data, including technical information relating to your connection, Website usage and, where applicable, geolocation data with your consent.
User preferences, including your cookie preferences and other Website settings.

Where Personal Data are required to access a particular service or complete a reservation, certain fields will be marked as mandatory. Failure to provide this information may prevent us from delivering the requested service.

Please ensure that the Personal Data you provide are accurate, complete and kept up to date.

We do not intentionally collect or process special categories of Personal Data (sensitive personal data), such as information relating to racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health, sexual orientation or sex life, unless required by applicable law.

Your Personal Data will not be disclosed to third parties except as described in Section 3.4 of this Privacy Policy or where disclosure is required by law.

3.2. For What Purposes Do We Collect and Process Your Personal Data?

The Personal Data described above may be collected and processed for the following purposes:

Reservation Management: We process your Personal Data to manage your reservation, send booking confirmations and related communications, process payments, and provide services before, during and after your stay.
Customer Support: We process your Personal Data to respond to your enquiries, requests and messages submitted through our contact form or other available communication channels.
Fraud Prevention and Security: Your Personal Data may be processed to detect, prevent and investigate fraudulent or unlawful activities that could affect the security of our Website, payment transactions or services.
Service Improvement: With your consent, we may process browsing and reservation-related information for analytical and statistical purposes in order to improve the performance, usability and overall quality of our Website and services.
Marketing: We do not use your Personal Data to send newsletters or other direct marketing communications.

3.3. Legal Basis for Processing Your Personal Data

We process your Personal Data on one or more of the following legal bases, depending on the purpose of the processing:

Performance of a Contract: Processing is necessary to manage your reservation, provide accommodation services, process payments and communicate with you before, during and after your stay.

Legitimate Interests:

To ensure the security and proper operation of our Website and information systems.
To detect, prevent and investigate fraud or other unlawful activities.
To process payment-related information necessary for your reservation and any additional charges arising during your stay.

Consent: Where required by applicable law, we process your Personal Data based on your prior consent, particularly for analytical purposes aimed at improving our Website and services.

Legal Obligation: We process Personal Data where necessary to comply with applicable legal, tax, accounting or regulatory obligations.

3.4. Who Receives Your Personal Data?

Your Personal Data may be shared only where necessary and only with the following categories of recipients:

Certified financial institutions and trusted service providers involved in payment processing and reservation management, including Bookoncloud and Hotelizer Cloud PMS.
Competent public, judicial or regulatory authorities where disclosure is required by applicable law.
Service providers supporting fraud prevention, payment security and the protection of our Website.

Your Personal Data are primarily processed by the Data Controller and authorised personnel acting under the Data Controller’s instructions.

Any third party receiving your Personal Data is contractually required to process such data only in accordance with our instructions, implement appropriate security measures and comply with applicable data protection legislation.

Your connection and browsing data may be transferred to Google Analytics.

Our Website may also embed Google Maps to help visitors locate our property. When using this service, certain technical information may be collected by Google in accordance with Google’s own Privacy Policy.

We may also disclose Personal Data where required by a court order or any other legally binding obligation.

3.5. How Long Do We Keep Your Personal Data?

We retain your Personal Data only for as long as necessary to fulfil the purposes for which it was collected or to comply with applicable legal obligations.

Reservation-related information is retained for the period required to comply with tax, accounting and other legal obligations, as well as to manage any requests, disputes or legal claims that may arise.

Personal Data processed exclusively for statistical or research purposes are anonymised so that they can no longer be associated with an identifiable individual.

3.6. Hosting of Your Personal Data

Our Website is hosted by Bluehost. The hosting provider implements appropriate technical and organisational security measures to protect the Personal Data stored within its infrastructure.

Where Personal Data are transferred outside the European Economic Area (EEA), such transfers are carried out in accordance with applicable data protection legislation and are safeguarded by appropriate legal mechanisms where required.

3.7. What Are Your Rights?

3.7.1. Consent

Where the processing of your Personal Data is based on your consent, such consent is given freely, specifically, knowingly and through a clear affirmative action.

You are informed in advance about how your Personal Data will be used.
Where required, your consent is obtained by selecting the appropriate checkbox.
Children under the age of 16 cannot provide valid consent without the authorisation of a parent or legal guardian, where required by applicable law.

3.7.2. Your Rights

Under the General Data Protection Regulation (GDPR), you have the following rights:

Right of access to the Personal Data we hold about you.
Right to rectification of inaccurate or incomplete Personal Data.
Right to erasure (“right to be forgotten”), where the legal conditions are met.
Right to restriction of processing in the circumstances provided for by applicable law.
Right to data portability.
Right to object to processing where it is based on our legitimate interests or carried out for direct marketing purposes.
Right to withdraw your consent at any time where processing is based on consent.

You may exercise any of the above rights at any time and free of charge by contacting us at info@prosforiorooms.gr.

Alternatively, you may write to us at:

Prosforio Rooms & Apartments
Ouranoupoli, Chalkidiki 63075
Greece

We will review your request in accordance with applicable data protection legislation and respond within the time limits required by law.

If you believe that the processing of your Personal Data infringes applicable data protection legislation, you have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA).

4. Security of Internet Browsing

Protecting your Personal Data is one of our highest priorities. We implement appropriate technical and organisational security measures designed to protect your information against unauthorised access, loss, alteration, disclosure or unlawful processing.

4.1. Integrity of Your Personal Data

We implement appropriate technical and organisational security measures in accordance with industry best practices to safeguard your Personal Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

Although we make every reasonable effort to protect your Personal Data, no method of transmission over the Internet or electronic storage system can be guaranteed to be completely secure. Consequently, we cannot guarantee the absolute security of information transmitted electronically.

4.2. Protection Against Malicious Activity

We recommend using secure networks whenever you access our Website and keeping your antivirus, anti-malware software and other security applications up to date.

The security of your Personal Data also depends on your own vigilance. We recommend that you do not disclose personal or payment information through unsecured communication channels or to unauthorised third parties.

4.3. Protection Against Phishing

We will never ask you by email to provide passwords, payment card details or other sensitive personal information.

If you receive an email that appears to originate from us requesting this type of information, please do not reply. Instead, contact us immediately at info@prosforiorooms.gr so that we can investigate the incident.

Never enter personal or financial information through links contained in suspicious emails. Always access our Website by typing its address directly into your web browser.

Last updated: June 27, 2026