STORKS APARTMENTS
Privacy Policy
This Privacy Policy explains how Storks Apartments collects and processes personal data when you use the website, contact us or make a direct booking.
1. Data controller
The controller of personal data collected through the website and direct bookings is Χατζημαυρουδής Αθανάσιος, owner of Storks Apartments. For privacy and personal-data matters, you can contact us at info@storksapartments.gr.
2. Personal data we collect
Depending on how you use the website, we may collect your name, email address, telephone number, booking details and dates, apartment, number and composition of guests, notes or requests, communication language, booking or payment reference and status, and your optional marketing preference. Through the contact form we may also collect the type of enquiry, booking reference, requested time and the content of your message.
3. Technical data and security
To protect the website against abuse and automated requests, technical information such as the IP address and user-agent may be processed temporarily to create a cryptographic fingerprint (hash) together with the email address. This fingerprint is used for security and abuse-prevention measures.
4. Purposes and legal bases
We process personal data to receive and manage bookings, respond to enquiries before or during a stay and perform the related agreement with you. Where required, data is processed to comply with legal, tax or accounting obligations. Where applicable, we rely on legitimate interests for security, prevention of abuse, protection of our systems and the establishment or defence of legal claims. Marketing communications are sent only where the relevant consent has been provided, and that consent may be withdrawn.
5. Payments
Online payments are processed through Stripe Checkout. Information necessary for the transaction, such as email address, amount, currency and booking or payment identifiers, is provided to Stripe. Full payment-card details are not stored by Storks Apartments through the website.
6. Service providers and recipients
The website and booking service use external technology providers, including Supabase for database infrastructure and related services, Stripe for online payment processing and email/SMTP providers for sending and receiving messages. Data may also be disclosed to competent authorities or professional advisers where required by law or necessary to protect lawful rights.
7. Transfers outside the European Economic Area
Some technology providers may process personal data outside the European Economic Area. Where required, such transfers are carried out using a lawful transfer mechanism, such as an adequacy decision or appropriate safeguards including standard contractual clauses.
8. Data retention
Personal data is retained only for as long as necessary for the purpose for which it was collected and thereafter for any period required by applicable tax, accounting or other legal obligations or for the establishment, exercise or defence of legal claims. Marketing data is retained according to the status of your consent and the need to keep a record of your preference.
9. Your rights
Depending on the circumstances, the GDPR provides rights of information, access, rectification, erasure, restriction of processing, data portability and objection. Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To exercise a privacy right, contact info@storksapartments.gr.
10. Complaint to a supervisory authority
If you believe that the processing of your personal data infringes data-protection law, you have the right to lodge a complaint with the Hellenic Data Protection Authority. You may also contact us so that we can review your concern, without limiting your right to lodge a complaint with the supervisory authority.
11. Cookies
The website uses strictly necessary cookies or equivalent mechanisms where required for functions such as secure session management. We currently do not use Google Analytics or advertising cookies. Further information is provided in our Cookie Policy.
12. Changes to this Privacy Policy
This policy may be updated when website functionality, service providers or legal requirements change. The current version will be made available on this page.