Who is responsible

The data controller is [COMPANY LEGAL NAME], trading as Duende Hospitality, [REGISTERED ADDRESS], Limenaria, Thassos 640 02, Greece, company number (ΓΕΜΗ) [NUMBER], tourism registration numbers (ΜΗΤΕ) [NUMBERS FOR EACH PROPERTY].

For anything about your data, write to info@duendehospitality.gr or call +30 2593 053465.

What we collect, and why

When you send a note through the contact form: your name, your email address, which property you are asking about, and the message itself. We use these only to reply. The form is delivered to our mailbox by an email service provider acting on our instructions; the note is kept in our mailbox for as long as the conversation needs, and no longer than two years.

When you join the newsletter: your email address, used only to send occasional news and offers from the three properties. Every message carries an unsubscribe link, and unsubscribing deletes the address.

When you book: booking is handled by our reservation system provider, WebHotelier / Book-OnlineNow, on its own pages (book-onlinenow.net). What you enter there is governed by their privacy notice and by the booking terms shown at the time; this website itself does not receive your card details.

When you visit: our web host records standard server logs (IP address, time, page, browser) for security and to keep the site running. They are kept for a short period and not used to profile anyone.

Anonymous statistics

If you accept them, we count page views with Plausible Analytics, a privacy-first service that uses no cookies and stores no personal data: no IP addresses, no fingerprints, no cross-site tracking. It tells us which pages are read and from which country, and nothing about you. If you decline, nothing is loaded and the site works exactly the same.

We do not use advertising pixels, remarketing tags or social-media trackers on this site.

Cookies and local storage

This site sets very little. The full list:

Services we rely on

Vercel hosts the site (servers in the EU region; Vercel Inc. is a US company bound by EU standard contractual clauses). Google Fonts are served from Google’s servers when a page loads the display typeface. The virtual tour opens on Matterport; the map links open Google Maps; booking opens WebHotelier / Book-OnlineNow. Each of these has its own privacy notice, which applies once you are on their pages.

Your rights

Under the General Data Protection Regulation you can ask us what we hold about you, ask for it to be corrected or deleted, object to how we use it, ask for it in a portable form, and withdraw consent at any time. Write to the address above; we answer within a month. If you are not satisfied, you may complain to the Hellenic Data Protection Authority (dpa.gr).

Changes

If this page changes, the date at the top changes with it. Anything material will also be announced on the site.