EN
Language
Privacy & GDPR
Privacy & GDPR
Galini Apartments hosts guests on Olympic Beach, in Pieria, Greece. This page explains which personal data we keep, why we keep it, and the rights you have under the EU General Data Protection Regulation (GDPR) and Greek law.
Who is responsible
The controller is Galini Apartments, Olympic Beach, Pieria, Greece. For any privacy question, write to sevatina@hotmail.com.
We do not sell personal data.
What we collect
When you request a stay we keep your name, email address, phone number if you give one, arrival and departure dates, the apartment, the number of guests, the price, and any note you write.
If you create an account we keep the name, email, and password you choose. The password is stored only as a hash.
The site keeps a session so the cart and sign-in work, and a language preference when you choose one. Server logs may include your IP address, browser, and the pages you open, so we can keep the site secure.
Why we use it
We use booking details to hold and host your stay, send the confirmation, and answer you. That processing is necessary for the reservation (GDPR Article 6(1)(b)).
We keep booking records for as long as Greek tax and accounting rules require (Article 6(1)(c)).
The session and the language cookie are necessary to run the site (Article 6(1)(f)).
If visit measurement is switched on, Google Analytics or Google Tag Manager helps us understand how the site is used. That relies on our legitimate interest in improving the site. You can block those cookies in your browser.
Cookies
A session cookie keeps your cart and sign-in for the visit.
The language cookie, named pieria_locale, remembers the language you chose for up to one year.
When a measurement ID is configured, Google may set its own cookies. Google may process that data outside the European Economic Area, under its own safeguards.
You can refuse or delete cookies in your browser. The cart and sign-in need the session cookie.
How long we keep it
A booking stays while we host you and for the period tax and accounting rules require. After that we delete it or reduce it so it no longer identifies you.
An account stays until you ask us to close it, unless a booking record must still be kept.
The language preference lasts up to one year. Session data ends when the session expires.
Who else sees it
We share data only with the services that help us host you: email delivery for the confirmation, and the company that hosts this website. They act on our instructions.
You pay on arrival or by bank transfer. We do not store card numbers.
If measurement is on, Google processes visit data as described above.
Your rights
You can ask for a copy of your data, a correction, erasure, a limit on how we use it, or a portable copy. You can object to processing that relies on legitimate interest, and you can withdraw consent where we asked for it.
Write to sevatina@hotmail.com. We reply within one month.
You can also lodge a complaint with the Hellenic Data Protection Authority at www.dpa.gr.