Privacy Policy
Last updated: 25 September 2026
This Privacy Policy explains how Tyros Boutique Houses E.E. (“we”, “us”) processes personal data when you visit tyrosboutiquehouses.gr, contact us or stay at our villas, in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Greek Law 4624/2019.
1. Data controller
TYROS BOUTIQUE HOUSES E.E. (limited partnership)
Registered office: Olynthou 3, Agia Sofia, Piraeus, Greece
Tax ID (VAT no.): 997752165 – Tax Office: E’ Piraeus
Property: Tagmatarchou Alevra, Tyros, Arcadia, Peloponnese
Email: [email protected] – Tel.: +30 697 041 5471
2. What data we collect
- Reservation data: name, surname, email, telephone, address, nationality, number and ages of guests, arrival and departure dates, special requests, and the identity document details that Greek law requires us to record for every guest.
- Payment data: payments are processed by our booking engine provider and its payment partners; we receive only confirmation of payment and, where needed for invoicing, your billing details and tax number.
- Communications: the content of emails, contact-form messages and phone calls with us.
- Website usage data: IP address, browser and device information, pages visited and cookie identifiers, as described in our Cookie Policy.
3. Why we process your data and on what legal basis
- To handle and fulfil your reservation and provide accommodation services – performance of a contract (art. 6(1)(b) GDPR).
- To comply with legal obligations, such as guest registration, tax and accounting rules – art. 6(1)(c) GDPR.
- To answer your enquiries, manage our relationship with you and protect our rights – legitimate interests (art. 6(1)(f) GDPR).
- To measure website traffic and show you relevant advertising through analytics and marketing cookies – your consent (art. 6(1)(a) GDPR), which you can withdraw at any time via the cookie settings.
- To send you offers or news by email only if you have agreed to receive them; you can unsubscribe at any time.
4. Who receives your data
We share personal data only with providers that act on our behalf and under contract: the online booking engine (WebHotelier) and its payment partners, our website hosting and IT providers, email services, accountants and legal advisers, and, where cookies are accepted, Google (Google Tag Manager, Google Analytics, Google Ads) and Meta (Meta Pixel). We disclose data to public authorities when the law requires it (for example the guest registration required by Greek law and the tax authorities). We never sell your data.
5. Transfers outside the EEA
Some providers (for example Google and Meta) may process data outside the European Economic Area. In such cases the transfer is based on an adequacy decision of the European Commission or on the Standard Contractual Clauses and additional safeguards.
6. How long we keep your data
Reservation, invoicing and guest-registration data are kept for as long as required by tax, accounting and tourism legislation. Enquiries that do not lead to a reservation are kept for up to 12 months. Cookie data are kept for the periods stated in the Cookie Policy. Data are deleted or anonymised when they are no longer needed.
7. Your rights
You have the right to access your data, to have them corrected or erased, to restrict or object to their processing, to receive them in a portable format and to withdraw your consent at any time. To exercise your rights write to [email protected]. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (Kifissias 1-3, 115 23 Athens, www.dpa.gr).
8. Security
We use appropriate technical and organisational measures (encrypted connections, access controls, secure hosting) to protect your data against loss, misuse or unauthorised access.
9. Children
Our services are addressed to adults. We collect data about minors only as guests included in a reservation made by an adult.
10. Changes to this policy
We may update this policy from time to time. The current version is always available on this page, together with the date of the last update.