Privacy Policy

Last updated: 12 October 2026

This page explains what personal data we collect when you visit carposluxury.gr or send us a booking request, why we use it and what rights you have under the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and Greek Law 4624/2019.

1. Data controller

Eleni Tzianara
Tagmatarchou Velissariou 71, 413 34 Larisa, Greece
Email: [email protected]
Phone / WhatsApp / Viber: +30 698 188 0708

2. What data we collect

• Booking requests: name, phone, email, check-in and check-out dates, number of guests, occasion and anything else you write in your message. The form on this website does not store anything; it only prepares the message, which reaches us when you choose to send it via WhatsApp, Viber or email.
• Bookings and stays: the details needed to confirm your booking and comply with tax law — in particular name, tax ID or ID card/passport number, country, dates and rental amount, required for the short-term stay declaration to the Greek tax authority (AADE) — and the details of the bank transfer you use to pay.
• Technical data: for security and operation, our hosting provider automatically logs IP address, browser type and time of access.

3. Why we use it and on what legal basis

• To reply to your request and complete your booking: performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR).
• For invoicing and our obligations to the authorities: legal obligation (Art. 6(1)(c)).
• For the security and smooth operation of the website: legitimate interest (Art. 6(1)(f)).
• For statistics and advertising cookies, if enabled: only with your consent (Art. 6(1)(a)), which you can withdraw at any time.

We do not sell your data and we do not use it for automated decision-making.

4. Who has access

• The app or provider you choose to message us with (WhatsApp, Viber or email) and our email provider.
• Our website hosting provider (Netlify, Inc.).
• Our accountant and the competent public authorities, where required by law.

Some of these providers may process data outside the European Economic Area (e.g. in the USA). Such transfers rely on GDPR safeguards, such as an adequacy decision or the European Commission’s standard contractual clauses.

5. How long we keep it

• Requests that did not become a booking: up to 12 months.
• Booking records and receipts: for as long as tax law requires.
• Hosting provider technical logs: for the period set by the provider.

6. Cookies

This website does not use tracking cookies without your consent. Fonts, photos and video are served from our own server, not from third parties. If statistics or advertising tools (Google, Meta) are enabled, they load only after you click “Accept” in the cookie message, and you can change your choice from “Cookie settings” at the bottom of the page.

7. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent. To exercise them, write to [email protected]. We will reply within one month.

8. Complaints

If you believe the processing of your data breaches the GDPR, you can lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).