Privacy Policy

1. Data Controller

Althea Resorts (“we”, “us”, “our”) is the data controller responsible for your personal data. Our contact details are:

2. Personal Data We Collect

We collect and process the following categories of personal data:

• —Contact and enquiry data: name, email address, phone number, and message content submitted via our contact form.
• —Booking data: reservation details processed by our third-party booking system (Reserve Online). Please refer to their privacy policy for data processed through that platform.
• —Technical data: IP address, browser type, pages visited, and time spent on our website, collected via Google Analytics (GA4).
• —Cookie data: as described in our Cookie Policy below.

3. Legal Basis for Processing

We process your personal data on the following legal bases under GDPR (Article 6):

• —Contractual necessity: to fulfil a reservation or respond to a pre-contractual enquiry.
• —Legitimate interests: to improve our website and services through analytics, and to protect our business against fraud.
• —Consent: for non-essential cookies and any direct marketing communications. You may withdraw consent at any time.
• —Legal obligation: where we are required to retain records by law (e.g. tax and accounting obligations).

4. How We Use Your Data

We use your personal data to:

• —Respond to enquiries submitted via our contact form.
• —Process and manage accommodation reservations.
• —Improve our website through aggregated analytics.
• —Comply with legal and regulatory obligations.

We do not sell your personal data to third parties.

5. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes set out in this policy, unless a longer retention period is required by law. Contact form submissions are retained for [X months/years]. Analytics data is retained in accordance with Google Analytics default settings.

6. Third-Party Services

We use the following third-party services that may process your data:

• —Google Analytics (GA4): website analytics. Data may be transferred to the United States under Standard Contractual Clauses.
• —Reserve Online: our booking engine. Please review their privacy policy at their platform.
• —Vercel: website hosting. Servers are located within the European Union or covered by appropriate data transfer mechanisms.

7. Your Rights

Under GDPR, you have the following rights regarding your personal data:

• —Right of access: to receive a copy of the data we hold about you.
• —Right to rectification: to request correction of inaccurate data.
• —Right to erasure: to request deletion of your data (“right to be forgotten”).
• —Right to restriction: to request that we limit processing of your data.
• —Right to data portability: to receive your data in a structured, machine-readable format.
• —Right to object: to object to processing based on legitimate interests.
• —Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at reservations@althearesorts.com. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA) at www.dpa.gr.

8. Cookies

We use cookies to improve your browsing experience and analyse site traffic. When you first visit our website, you will be asked to consent to non-essential cookies. You may change your cookie preferences at any time by clearing your browser cookies and revisiting our site.

We use the following types of cookies:

• —Strictly necessary cookies: required for the website to function. These cannot be disabled.
• —Analytics cookies: Google Analytics cookies that help us understand how visitors interact with our site (only set with your consent).

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our website is served over HTTPS. However, no method of transmission over the internet is 100% secure.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The most recent version will always be available at https://althearesorts.com/privacy-policy. We encourage you to review this policy periodically.

11. Contact

For any questions about this Privacy Policy or how we handle your data, please contact us: