We collect personal data only when you send us the form on the contact page. You do not have to use it: you can also phone or email us. Without your name and email address we cannot reply.
Booking request
Data
Name, email address, phone number (optional), number of guests, room type, check-in and check-out dates, your message (optional), your tick confirming that this is a request and not a confirmed booking, and the language of the page.
Why
To answer your request and prepare a possible reservation.
Legal basis
Steps taken at your request before a contract is concluded (Article 6(1)(b) GDPR).
General question
Data
Name, email address, phone number (optional), your message and the language of the page.
Why
To answer your question.
Legal basis
Our legitimate interest in answering enquiries (Article 6(1)(f) GDPR).
Spam protection
Data
A hidden form field that people leave empty (it holds no personal data) and the spam filter of our form system (Netlify, which uses Akismet), which checks submissions.
Why
To keep the form usable and the hotel's mailbox free of spam.
Legal basis
Our legitimate interest in protecting the form and the mailbox (Article 6(1)(f) GDPR).
Running the website
Data
Technical data that any web server handles when a page is requested, such as IP address, browser type and time of the request.
Why
To deliver the website and keep it secure. We do not use this data for analytics, advertising or profiling.
Legal basis
Our legitimate interest in a secure, working website (Article 6(1)(f) GDPR).
We do not send an automatic reply to guests. The hotel answers personally, by email or phone as you prefer.
3. Who receives your data
The hotel. The staff who handle requests receive each submission by email at info@arktos-hotel.gr.
Netlify hosts this website, stores the form submissions and sends the notification email to the hotel. The website was built and is run for the hotel by Arc Digital, which processes the data on the hotel's behalf; Netlify is its service provider (sub-processor).
Akismet, a spam-detection service used by Netlify. Netlify passes each form submission to Akismet for a spam check, so that spam does not reach the hotel. Akismet works as Netlify's service provider.
The email provider of the hotel mailbox: emails are delivered to the hotel's mailbox at info@arktos-hotel.gr through its email provider, which stores the emails that the hotel receives and sends.
Google Maps, only if you click “Show map”. Until then nothing is requested from Google. After the click your browser connects to Google, which receives your IP address and may set cookies; Google processes this under its own privacy policy.
Authorities, only where the law requires it.
We do not use analytics, advertising, reCAPTCHA or similar third-party tools, and we do not sell your data.
4. Transfers outside the EU/EEA
Netlify, the spam-filter service, the mailbox provider and Google may process data outside the EU/EEA. Where that happens, the transfer relies on a safeguard recognised by the GDPR — for example the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses — as set out in each provider's own privacy terms.
5. How long we keep your data
Form submissions in our website system (Netlify): deleted after 90 days. We delete older submissions every month.
Emails in the hotel mailbox: the hotel deletes request emails once your request has been answered. If your request leads to a booking, the related details are kept only as long as needed for the booking and the hotel's legal obligations.
Technical data of the hosting provider: kept according to the provider's own retention periods.
6. Cookies and similar storage
This website sets no cookies and stores nothing in your browser (no cookies, no local storage). It has no analytics, advertising or tracking tools, and its fonts and images come from our own server.
The only exception is Google Maps: if you click “Show map”, Google loads and may set its own cookies. Because nothing non-essential runs before you act, this website shows no cookie banner.
7. Your rights
Under the GDPR you have the right to:
access the personal data we hold about you;
have inaccurate data corrected;
have your data erased;
restrict how we use your data;
receive your data in a portable format;
object to processing that is based on our legitimate interest.
To use any of these rights, write to info@arktos-hotel.gr. We may ask you to confirm your identity. We answer without undue delay and at the latest within one month, as the GDPR requires. Using your rights is free of charge.
8. The right to complain
If you think we are handling your data unlawfully, you can complain to the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα, HDPA): www.dpa.gr. You may also complain to the data protection authority of the EU country where you live or work. We would be glad if you contacted us first, so that we can try to put things right.
9. Security
This website is served only over an encrypted HTTPS connection. Access to the stored submissions is limited to the hotel and its website provider, behind a login, and only as far as their work requires. We do not sell your data and we do not use it for advertising.
10. Changes to this policy
We update this policy whenever the way we handle personal data changes. The date of the last update is at the top of this page.
