Privacy Policy
At Blue Lemon Hideaway, your privacy is treated with the same care as your stay. This policy explains what data we collect, why we collect it, and how we protect it.
1. Data Controller
The data controller responsible for your personal data is:
Giorgos Karlaginis
Email: georgekarlaginis@gmail.com
2. What Data We Collect
We may collect and process the following personal data:
- Full name
- Email address
- Phone number (if provided)
- Preferred stay dates
- Message content submitted through contact forms
- Technical data (IP address, browser type, device, pages visited)
3. How We Collect Data
We collect data when you:
- Submit a contact or inquiry form
- Communicate with us via email
- Browse our website (via cookies and analytics tools)
4. Purpose of Processing
Your data is used for:
- Responding to inquiries and booking requests
- Providing customer support
- Improving website performance and user experience
- Monitoring website traffic (via Google Analytics)
We do not send unsolicited marketing emails.
5. Legal Basis (GDPR)
We process your data based on:
- Consent (when you submit a form or accept cookies)
- Legitimate interest (to improve our services and website performance)
- Pre-contractual necessity (to respond to booking inquiries)
6. Third-Party Services
We use trusted third-party services that may process your data:
- Google Analytics (website traffic analysis)
- Hostinger (website hosting infrastructure)
- WordPress Plugins (site functionality)
These providers act as data processors and comply with GDPR.
7. Data Retention
We retain personal data only for as long as necessary:
- Inquiry data: up to 12 months
- Analytics data: according to Google’s retention settings
8. Data Security
We implement appropriate technical and organizational measures to protect your data, including:
- Secure hosting environment
- SSL encryption
- Restricted access to personal data
9. Your Rights
Under GDPR, you have the right to:
- Access your personal data
- Request correction or deletion
- Withdraw consent at any time
- Object to processing
- File a complaint with a supervisory authority
To exercise your rights, contact us at:
georgekarlaginis@gmail.com
10. International Transfers
Some services (e.g. Google Analytics) may process data outside the EU.
These transfers are protected through appropriate safeguards (e.g. Standard Contractual Clauses).
11. Updates
We may update this policy when necessary.
Please review this page periodically.