Privacy Policy

Last updated: 2/3/2026

Tinos ecolodge (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Greek data protection laws.

This Privacy Policy explains how we collect, use, and protect your personal data when you visit www.tinosecolodge.gr.

1. Data Controller

Tinos ecolodge
Address: Potamia, Akeratos, Tinos, Greece
Email: info@tinosecolodge.gr
Tel: +30 6974467611

For any questions regarding this Privacy Policy or your personal data, you may contact us using the details above.

2. What Personal Data We Collect

We may collect and process the following personal data:

A. Booking Request Form

When you submit a booking request, we collect:

• Check-in and check-out dates
• Number of guests
• First name
• Last name
• Email address
• Phone number
• Country
• Comments (if provided voluntarily)

B. Automatically Collected Data

When you visit our website, certain technical information may be collected automatically, such as:

• IP address
• Browser type and version
• Device information
• Pages visited
• Date and time of access

This data may be collected via cookies and analytics tools.

C. Embedded Third-Party Content

Our website may occasionally include:

• Google Maps (to display our location)
• YouTube videos

When such content is loaded, these third-party providers may collect data such as your IP address and usage behavior, according to their own privacy policies.

We encourage you to review:

• Google Privacy Policy: https://policies.google.com/privacy
• YouTube Privacy Policy: https://policies.google.com/privacy

3. Purpose of Processing

We process your personal data for the following purposes:

• To respond to booking requests
• To communicate with you regarding your stay
• To manage reservations
• To improve our website and services
• To comply with legal obligations

4. Legal Basis for Processing

We process your data based on:

• Contractual necessity (to respond to booking requests and manage reservations)
• Legitimate interest (website functionality and improvement)
• Consent (where required, such as for certain cookies)
• Legal obligation (e.g., tax and hospitality regulations)

5. Data Retention

We retain personal data only for as long as necessary:

• Booking-related data: for the duration required by tax and legal obligations under Greek law
• Communication data: as long as necessary to respond to inquiries
• Technical data: according to cookie retention periods

After this period, data is securely deleted or anonymized.

6. Data Sharing

We do not sell or rent your personal data.

We may share data only when necessary with:

• IT and hosting service providers
• Booking or property management systems (if applicable)
• Legal or tax authorities (when required by law)
• Embedded content providers (Google, YouTube) when content is accessed

All service providers process data in compliance with GDPR.

7. International Data Transfers

Some third-party services (such as Google or YouTube) may transfer data outside the European Economic Area (EEA). In such cases, appropriate safeguards are applied in accordance with GDPR requirements.

8. Your Rights Under GDPR

You have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure (“right to be forgotten”)
• Restrict processing
• Object to processing
• Data portability
• Withdraw consent at any time (where processing is based on consent)
• Lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr)

To exercise your rights, please contact us at: info@tinosecolodge.gr

9. Cookies

Our website may use cookies to:

• Ensure proper website functionality
• Analyze website traffic
• Improve user experience

Where required, we request your consent before placing non-essential cookies on your device.

You may manage your cookie preferences on the cookie consent modal popup window, or by clicking “cookie settings” on the lower right corner.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

12. Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).

Google Analytics uses cookies and similar technologies to collect information about how visitors use our website. This information may include:

• IP address (anonymized, if IP anonymization is enabled)
• Device and browser information
• Pages visited
• Time spent on pages
• Referring website

The purpose of using Google Analytics is to analyze website traffic and improve our services and user experience.

Legal Basis

Google Analytics cookies are used only after you provide your consent via our cookie banner, in accordance with Article 6(1)(a) GDPR.

You may withdraw your consent at any time by adjusting your cookie preferences.

Data Transfers Outside the EU

Google may transfer data to servers located outside the European Economic Area (EEA). Such transfers are carried out in accordance with applicable data protection laws and appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission.

For more information, please review Google’s Privacy Policy:
https://policies.google.com/privacy