At Strovilla Gaia Luxury Private Beachfront Villas ("we", "us", "our"), operating through the website https://strovilla-gaia.gr, we are committed to respecting and protecting the personal data and privacy of our guests, website visitors, and customers.
This Privacy Policy explains how we collect, process, store, and safeguard your personal information in full compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation - GDPR), Greek Law 4624/2019, and the applicable national and European legal framework regarding data protection and electronic communications.
The Data Controller responsible for the processing of your personal data on this website is:
We process personal data necessary for providing hospitality services, processing online room bookings, handling inquiries, and completing transactions:
All electronic credit and debit card payments conducted through strovilla-gaia.gr are processed through the secure electronic payment platform "NBG Pay / i-Bank E-Commerce" provided by the National Bank of Greece (NBG).
When you choose to pay via credit or debit card, you are automatically redirected to the secure, encrypted payment page of National Bank of Greece. All payment data (including card number, CVV/CVC, expiration date, and cardholder name) are encrypted using 128-bit / 256-bit SSL/TLS protocol and transmitted directly to NBG's banking infrastructure.
Important Notice: Strovilla Gaia does NOT collect, store, view, or process full credit/debit card numbers or security codes on its servers. Cardholder authentication is enforced through 3D-Secure protocols (Verified by Visa, Mastercard Identity Check) ensured entirely by the bank.
| Purpose of Processing | Categories of Personal Data | Legal Basis (GDPR Art. 6) |
|---|---|---|
| Reservation management, guest accommodation, and service delivery | Name, contact info, booking dates, special requests | Performance of Contract — Art. 6(1)(b) |
| Payment processing, billing, tax invoicing, and accounting compliance | Name, billing address, transaction record, VAT number (if applicable) | Legal Obligation — Art. 6(1)(c) & Contract — Art. 6(1)(b) |
| Responding to guest inquiries and customer support communications | Name, email, phone, message details | Legitimate Interest — Art. 6(1)(f) / Consent — Art. 6(1)(a) |
| Website operational security, fraud prevention, and system maintenance | IP address, access logs, technical device parameters | Legitimate Interest — Art. 6(1)(f) |
Your personal data is handled strictly on a need-to-know basis and is not sold, rented, or commercialized. Access to your data is strictly granted to:
Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected:
Under Chapter III of the GDPR, you have the following rights regarding your personal data:
To exercise any of your rights, please email us at info@strovilla-gaia.gr. We will respond within 30 days. You also have the right to lodge a complaint with the supervisory authority:
Our website strovilla-gaia.gr uses technical and essential cookies required for the proper functioning and security of the site and reservation workflow. Non-essential cookies (such as analytical or marketing cookies) are loaded only with your prior explicit consent via our Cookie Banner. You can manage or modify your cookie preferences through your web browser settings at any time.
We implement appropriate technical and organizational measures (TOMs) to safeguard personal data against unauthorized access, loss, misuse, alteration, or destruction. These measures include SSL/TLS encryption for all website communications, firewall protection, secure access controls, regular data backups, and PCI-DSS compliance integrated through National Bank of Greece payment processing.
We reserve the right to update or amend this Privacy Policy periodically to reflect changes in legal, operational, or technical requirements. The "Effective Date" at the top of this document indicates when the latest revision took effect.
