Privacy Policy

Privacy Policy

At Blue Lemon Hideaway, your privacy is treated with the same care as your stay. This policy explains what data we collect, why we collect it, and how we protect it.


1. Data Controller

The data controller responsible for your personal data is:

Giorgos Karlaginis
Email: georgekarlaginis@gmail.com


2. What Data We Collect

We may collect and process the following personal data:

  • Full name
  • Email address
  • Phone number (if provided)
  • Preferred stay dates
  • Message content submitted through contact forms
  • Technical data (IP address, browser type, device, pages visited)

3. How We Collect Data

We collect data when you:

  • Submit a contact or inquiry form
  • Communicate with us via email
  • Browse our website (via cookies and analytics tools)

4. Purpose of Processing

Your data is used for:

  • Responding to inquiries and booking requests
  • Providing customer support
  • Improving website performance and user experience
  • Monitoring website traffic (via Google Analytics)

We do not send unsolicited marketing emails.


5. Legal Basis (GDPR)

We process your data based on:

  • Consent (when you submit a form or accept cookies)
  • Legitimate interest (to improve our services and website performance)
  • Pre-contractual necessity (to respond to booking inquiries)

6. Third-Party Services

We use trusted third-party services that may process your data:

  • Google Analytics (website traffic analysis)
  • Hostinger (website hosting infrastructure)
  • WordPress Plugins (site functionality)

These providers act as data processors and comply with GDPR.


7. Data Retention

We retain personal data only for as long as necessary:

  • Inquiry data: up to 12 months
  • Analytics data: according to Google’s retention settings

8. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

  • Secure hosting environment
  • SSL encryption
  • Restricted access to personal data

9. Your Rights

Under GDPR, you have the right to:

  • Access your personal data
  • Request correction or deletion
  • Withdraw consent at any time
  • Object to processing
  • File a complaint with a supervisory authority

To exercise your rights, contact us at:
georgekarlaginis@gmail.com


10. International Transfers

Some services (e.g. Google Analytics) may process data outside the EU.
These transfers are protected through appropriate safeguards (e.g. Standard Contractual Clauses).


11. Updates

We may update this policy when necessary.
Please review this page periodically.

en_US