PRIMA VISTA

Privacy

Policy

Last updated: April 2026

1. Data Controller

Prima Vista Boutique Hotel & Spa
Agia Paraskevi, Perdika, Sivota
Thesprotia, Greece
MHTE: 1034846
Email: [email protected]
Phone: +30 26650 97057

Prima Vista Boutique Hotel & Spa (“we”, “us”, “our”) is the data controller responsible for the processing of your personal data. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Greek data protection legislation (Law 4624/2019).

2. What Personal Data We Collect

We may collect the following categories of personal data:

Identity data: Name, surname, nationality, date of birth, passport/ID number (as required by Greek law for hotel registration)
Contact data: Email address, phone number, postal address
Booking data: Check-in/check-out dates, room preferences, special requests, number of guests
Payment data: Credit/debit card details (processed securely via our payment provider)
Technical data: IP address, browser type, device information, cookies (see our Cookie Policy)
Communication data: Correspondence via email, contact forms, or phone

3. Legal Basis for Processing

We process your personal data based on the following legal grounds under Article 6 of the GDPR:

Contract performance: To fulfill your reservation and provide accommodation services
Legal obligation: To comply with Greek hospitality law requiring guest registration (Police Decree 1/1956, as amended)
Legitimate interest: To improve our services, respond to inquiries, and ensure security
Consent: For marketing communications and non-essential cookies (you may withdraw consent at any time)

4. How We Use Your Data

Processing and managing your reservation
Providing accommodation, dining, spa, and concierge services
Communicating about your stay (confirmations, pre-arrival information)
Complying with legal obligations (guest registry, tax records)
Sending promotional offers and newsletters (only with your consent)
Improving our website and services
Ensuring the safety and security of our guests and property

We may share your data with:

Greek authorities: Police/immigration authorities as required by law for guest registration
Payment processors: For secure payment transactions
Booking platforms: If your reservation was made through a third-party platform (Booking.com, etc.)
IT service providers: Website hosting and maintenance partners (within the EU/EEA)

We do not sell your personal data to third parties. Any data sharing is governed by appropriate data processing agreements in compliance with GDPR.

6. Data Retention

We retain your personal data for the following periods:

Guest registration records: 5 years (as required by Greek law)
Financial/tax records: 10 years (Greek tax legislation)
Marketing data: Until you withdraw consent
Website analytics: 26 months

Under the GDPR and Greek Law 4624/2019, you have the following rights:

Right of access: Request a copy of the personal data we hold about you
Right to rectification: Request correction of inaccurate data
Right to erasure: Request deletion of your data (subject to legal retention obligations)
Right to restriction: Request limitation of processing
Right to data portability: Receive your data in a structured, commonly used format
Right to object: Object to processing based on legitimate interest or for direct marketing
Right to withdraw consent: Where processing is based on consent

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA) at www.dpa.gr.

8. Cookies

Our website uses cookies to ensure functionality and improve your browsing experience. Essential cookies are necessary for the website to operate. Analytics and marketing cookies are only placed with your consent. You can manage your cookie preferences through your browser settings or our cookie consent banner.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our website uses SSL/TLS encryption for all data transmissions.

10. Contact

For any questions or concerns regarding this Privacy Policy or the processing of your personal data, please contact us at:

Prima Vista Boutique Hotel & Spa
Email: [email protected]
Phone: +30 26650 97057