Legal Notice 1. Data Controller
The data controller of your personal data is Studio Irene (family-run accommodation business, MHTE: 1144K132K0354700), based at Agios Petros Beach, Andros 84500, Greece.
For any matter related to the processing of your data, please contact:
- Email: info@studio-irene.gr
- Phone: +30 22820 71675
2. What data we collect
Contact form
When you submit a request via the contact form, we collect: full name, email, phone (optional), stay dates (optional), number of guests (optional), and your message.
Availability / booking form
The booking form redirects to the booking engine studioireneandros.reserve-online.net (WebHotelier). Data is transferred to the booking engine provider, which has its own Privacy Policy.
Email & phone communication
If you contact us via email or phone, we retain contact details and conversation content as long as required to serve your request.
Cookies & technical data
The website does not use tracking or advertising cookies. External resources (Google Fonts, Phosphor Icons, Tailwind CSS) are loaded for site functionality, which may log technical data (e.g. IP address) on their respective providers.
3. Purpose & legal basis
- Responding to inquiries: based on your consent (Article 6(1)(a) GDPR), given through the form submission and consent checkbox.
- Contract performance: executing your accommodation contract (Article 6(1)(b) GDPR).
- Legal obligations: tax, accommodation and law-enforcement record-keeping obligations (Article 6(1)(c) GDPR).
4. Retention period
Data is retained only for as long as necessary for the purpose of collection:
- Contact inquiries: up to 12 months after the last communication.
- Booking records: as required by tax law (up to 10 years).
- Check-in data: as required by accommodation & law-enforcement legislation.
5. Recipients
We do not transfer your data to third parties for commercial purposes. We may share data with:
- The booking engine provider (WebHotelier / reserve-online.net) when you proceed with a booking.
- The website hosting provider for storage and forwarding of contact form submissions.
- The email service provider (for sending contact form messages).
- Public authorities, where required by law.
6. Your rights
Under GDPR, you have the following rights:
- Right of access to your data (Article 15).
- Right to rectification of inaccurate data (Article 16).
- Right to erasure ("right to be forgotten", Article 17).
- Right to restriction of processing (Article 18).
- Right to data portability (Article 20).
- Right to object to processing (Article 21).
- Right to withdraw consent at any time (without retroactive effect).
To exercise your rights, please email us at info@studio-irene.gr. We will reply within 30 days.
7. Data security
We apply appropriate technical and organisational measures to protect your data. The website uses HTTPS for encrypted transfer of form submissions.
8. Complaints
If you believe that the protection of your personal data has been violated, you have the right to lodge a complaint with the Hellenic Data Protection Authority: www.dpa.gr.
9. Changes to this Policy
We may update this Policy periodically. The latest update date is shown at the top of the page.