Privacy policy

Last updated: 16 October 2026

Who is responsible

The data controller is [full name or company name], Omogenon Amerikis 5, Kalavryta 250 01, Greece, email info@kalavrytamoments.gr, phone +30 694 435 3786.

What we collect and why

• Bookings: name, email, phone, dates, number of guests and notes, to carry out your booking (GDPR Art. 6(1)(b)) and meet tax obligations (Art. 6(1)(c)).
• Payments: card details are handled directly by the payment provider (Stripe or Viva Wallet). We never see or store card numbers.
• Contact form: name, email, phone and message, to reply to you.
• Analytics: we count visits anonymously with Cloudflare Web Analytics, which uses no cookies and does not identify visitors (legitimate interest, GDPR Art. 6(1)(f)). If you agree, we also use Google Analytics 4.
• Spam protection: our forms are protected by Cloudflare Turnstile, which checks that a person is submitting them, without tracking cookies.

Who we share it with

Cloudflare (website hosting, database and email delivery), Stripe or Viva Wallet (payments), Google (analytics and map, only with your consent). These providers act on our behalf under appropriate contracts, including standard contractual clauses where data leaves the EEA.

How long we keep it

Booking records are kept for as long as tax law requires. Contact messages are deleted when no longer needed.

Your rights

You have the right to access, correct, delete, restrict and port your data, to object, and to withdraw consent at any time. Write to info@kalavrytamoments.gr. You can also complain to the Hellenic Data Protection Authority (www.dpa.gr).