Villa Daphne Kefalonia (“we”, “us”, “our”) is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website, submit an enquiry, make a booking enquiry, or otherwise communicate with us.

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Greek data protection laws.

2. Data Controller

Villa Daphne
Lourdata, Argostoli 28100, Kefalonia, Greece

Email: info@villadaphnekefalonia.com
Telephone: 694 646 4095

3. Personal Data We Collect

Depending on how you interact with our website, we may collect:

Information You Provide

• Full name
• Email address
• Telephone number
• Country of residence
• Booking and travel dates
• Number of guests
• Information included in enquiries or messages

Information Collected Automatically

• IP address
• Browser type and version
• Device information
• Pages visited
• Time spent on pages
• Referring websites

4. How We Use Your Information

We use your personal data to:

• Respond to booking and availability enquiries
• Communicate regarding your stay
• Improve website performance and user experience
• Monitor website traffic and usage
• Comply with legal obligations
• Protect against fraudulent or malicious activity

We do not sell or rent your personal information to third parties.

5. Legal Basis for Processing

We process personal data under one or more of the following legal bases:

Legitimate Interests

To operate, maintain and improve our website and services.

Contract

To respond to booking requests and provide accommodation services.

Consent

For non-essential cookies and optional marketing communications where applicable.

Legal Obligation

Where we must comply with tax, accounting or other legal requirements.

6. Website Analytics and Tracking

Our website may use:

Google Analytics

Google Analytics helps us understand how visitors use our website. Google may collect information such as pages visited, device information and approximate location based on IP address.

Google Tag Manager

Google Tag Manager is used to manage website tags and tracking technologies. It does not itself collect personal data but facilitates the deployment of analytics and marketing tools.

Analytics cookies are only activated where visitors have given the required consent.

7. Contact Forms and Enquiries

When you submit an enquiry through our website contact form or email us directly, we collect the information necessary to respond to your request.

We use this information solely for communication regarding your enquiry, booking or stay.

8. Data Sharing

We may share personal information with trusted service providers that assist us in operating the website, including:

• Website hosting providers
• Technical support providers
• Analytics providers
• Legal and accounting advisers
• Government authorities where legally required

All third parties are required to safeguard personal data appropriately.

9. International Transfers

Some service providers, including Google, may process personal information outside the European Economic Area (EEA).

Where such transfers occur, appropriate safeguards, including Standard Contractual Clauses approved by the European Commission, are implemented.

10. Data Retention

We retain personal information only for as long as necessary:

• Enquiries: up to 24 months
• Booking-related communications: up to 7 years where required for accounting or legal obligations
• Analytics data: according to the settings of the analytics platform

11. Your Rights

Under GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of personal data
• Restrict processing
• Object to processing
• Data portability
• Withdraw consent at any time

To exercise any of these rights, please contact us using the contact details above.

12. Security

We implement appropriate technical and organisational measures to protect personal information against accidental loss, unauthorised access, disclosure or misuse.

13. Complaints

If you believe your privacy rights have been violated, you may contact:

Hellenic Data Protection Authority (HDPA)

Website: https://www.dpa.gr

14. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated revision date.