Privacy Policy
Privacy Policy
1. Introduction
Welcome to the official website of Thira’s Dolphin, located in Akrotiri, Santorini, Greece.
At Thira’s Dolphin, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact us, request information about our accommodation or make a reservation.
We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), applicable Greek data-protection legislation and other relevant legal requirements.
By using this website, you acknowledge that you have read this Privacy Policy. Where consent is required for a particular processing activity, we will request it separately.
2. Who We Are
The website is operated by the business trading as Thira’s Dolphin.
Contact details:
Address: Akrotiri, Santorini, 84700, Greece
Email: info@thiras-dolphin.gr
Reservations: reservations@thiras-dolphin.gr
Telephone: +30 22860 82129
Winter telephone: +30 210 4007566
Business Registration Number (G.E.MI.): 149134838000
Accommodation Notification Number: 1093799 (version 3)
For privacy-related enquiries, please contact us using the email address above.
The full legal name of the data controller can be provided in the final published version once verified.
3. Personal Data We Collect
Depending on how you interact with our website and services, we may collect the following categories of personal data.
3.1 Information You Provide
When you contact us through our website, by email or by telephone, we may collect:
Your name and surname.
Your email address.
Your telephone number, if provided.
The subject and content of your message.
Your preferred travel dates and accommodation requirements.
Any additional information you voluntarily provide in your communication.
3.2 Reservation Information
When you enquire about or make a reservation, we may process information necessary to manage your booking, such as:
Check-in and check-out dates.
Number of guests and rooms requested.
Reservation details and booking references.
Contact details and communications relating to your stay.
Payment or transaction information, where applicable and to the extent necessary.
Where reservations or payments are processed by an external booking platform or payment provider, that provider may collect and process personal data under its own privacy notice and applicable contractual arrangements.
3.3 Technical and Usage Information
When you visit our website, certain technical information may be collected automatically, depending on the website’s configuration. This may include:
IP address.
Browser type and version.
Device and operating system information.
Pages visited and basic website usage data.
Date and time of access.
Cookie identifiers and similar online identifiers, where applicable.
Some of this information may be collected through server logs, security tools, analytics services or cookies.
3.4 Information Required by Law
Where legally required in connection with accommodation services, we may process identification, guest-registration, invoicing or other information necessary to comply with our legal obligations.
We will only request or process information that is necessary for the relevant purpose.
4. How We Use Your Personal Data
We may use your personal data for the following purposes:
To respond to enquiries and requests for information.
To provide information about our rooms, facilities and accommodation services.
To manage, confirm and administer reservations.
To communicate with you before, during and after your stay, where necessary.
To process payments, refunds and invoices where applicable.
To comply with legal, tax, accounting and accommodation-related obligations.
To protect our website, prevent fraud and address security incidents.
To maintain, troubleshoot and improve our website and services.
To measure website performance, where permitted by applicable law and your cookie preferences.
We will not use your personal data for unrelated purposes without an appropriate legal basis.
5. Legal Basis for Processing
Under the GDPR, we rely on one or more of the following legal bases, depending on the circumstances:
Performance of a contract or pre-contractual measures: When processing is necessary to respond to a booking enquiry, make arrangements at your request or fulfil a reservation.
Legal obligation: When processing is required by applicable tax, accounting, accommodation or other legislation.
Legitimate interests: When processing is necessary for legitimate business purposes, such as responding to general enquiries, protecting our website, preventing fraud or establishing and defending legal claims, provided that your rights and interests do not override those interests.
Consent: When you have given valid consent, for example for non-essential cookies or optional marketing communications where consent is required. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
6. Cookies and Similar Technologies
Our website may use cookies and similar technologies to ensure its proper operation and, where applicable, to support functionality, analyse website usage or provide embedded third-party services.
Cookies may include:
Strictly necessary cookies: Required for essential website functions, security or services explicitly requested by you.
Functional cookies: Used to remember preferences or support additional website features.
Analytics cookies: Used to understand how visitors interact with the website.
Third-party cookies: Potentially placed by external services, such as embedded maps, booking tools or other integrations.
Non-essential cookies and similar technologies will be used only where the necessary consent has been obtained, in accordance with applicable law.
You can manage your cookie preferences through the website’s cookie settings, where available, and through your browser settings. Blocking certain cookies may affect some website features.
For more information, please consult our Cookie Policy, if published separately.
7. Sharing Personal Data with Third Parties
We do not sell your personal data.
We may share personal data with third parties when necessary for the purposes described in this Policy, including:
Website hosting and technical support providers.
Reservation and booking-management platforms.
Payment service providers, where applicable.
Email and communication service providers.
Website security, maintenance and analytics providers, where applicable.
Accountants, professional advisers and legal representatives.
Public authorities, regulators or law-enforcement bodies where legally required.
Such recipients may process personal data on our behalf as processors or act as independent controllers, depending on the services they provide and the applicable arrangements.
Where a service provider processes personal data on our behalf, we will take appropriate steps to ensure that the processing is governed by the required contractual and data-protection safeguards.
8. International Data Transfers
Some of our service providers may process or store personal data outside the European Economic Area (EEA).
Where personal data is transferred outside the EEA, we will ensure that the transfer complies with applicable data-protection law, using an appropriate mechanism where required, such as an adequacy decision or suitable safeguards under the GDPR.
Further information about relevant safeguards may be requested using the contact details provided in this Policy.
9. Data Retention
We retain personal data only for as long as necessary for the purpose for which it was collected, subject to applicable legal requirements.
Retention periods depend on the type of information and the relevant purpose. For example:
Enquiry information is retained for the time necessary to respond and manage any resulting follow-up.
Reservation and guest records are retained for the period necessary to administer the stay and comply with applicable legal obligations.
Accounting and transaction records are retained for the periods required by tax and accounting legislation.
Technical and security logs are retained for the period necessary for security, troubleshooting and legitimate operational purposes.
Information processed on the basis of consent is retained until consent is withdrawn or the relevant purpose ends, subject to any applicable legal obligations.
When personal data is no longer required, it will be securely deleted or anonymised, where appropriate.
10. Data Security
We take appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
These measures may include access controls, security updates, secure communications and appropriate safeguards imposed on service providers.
However, no method of transmission or electronic storage can be guaranteed to be completely secure. We therefore cannot guarantee absolute security of information transmitted over the internet.
11. Your Rights Under the GDPR
Subject to the conditions and limitations established by applicable law, you may have the right to:
Access: Request confirmation of whether we process your personal data and obtain a copy.
Rectification: Request correction of inaccurate or incomplete information.
Erasure: Request deletion of personal data where the legal requirements are met.
Restriction: Request restriction of processing in certain circumstances.
Data portability: Receive certain personal data in a structured, commonly used and machine-readable format, where applicable.
Object: Object to processing based on legitimate interests, on grounds relating to your particular situation.
Withdraw consent: Withdraw consent at any time where processing is based on consent.
Lodge a complaint: Submit a complaint to the competent data-protection supervisory authority.
To exercise your rights, please email info@thiras-dolphin.gr with sufficient information for us to identify your request. We may need to verify your identity before responding.
We will respond within the period required by applicable law. Some rights are subject to exceptions, including situations where we must retain information to comply with legal obligations or establish, exercise or defend legal claims.
12. Right to Lodge a Complaint
If you believe that your personal data has been processed in violation of applicable data-protection law, you have the right to lodge a complaint with the Hellenic Data Protection Authority or another competent supervisory authority, as applicable.
Website: https://www.dpa.gr/
We encourage you to contact us first so that we can review and address your concerns, without limiting your statutory rights.
13. Children’s Privacy
Our website is intended for individuals seeking information about accommodation and related services. We do not knowingly collect personal data directly from children through the website for independent marketing purposes.
Where information about children is necessary for a family reservation or a legal accommodation requirement, it should be provided by a parent, guardian or other person legally authorised to provide it, as applicable.
14. Third-Party Websites and Embedded Services
Our website may contain links to external websites or embed third-party content and services, including maps, booking platforms or social media features.
We do not control the privacy practices, security or content of external websites. When you follow an external link or interact with an embedded service, the relevant third party’s privacy policy and terms may apply.
Please review the applicable third-party policies before providing personal information to those services.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, website functionality, legal obligations or data-processing practices.
The latest version will be published on this page, together with its updated revision date.
16. Contact Us
For questions, requests or concerns relating to this Privacy Policy or the processing of your personal data, please contact:
Thira’s Dolphin
Akrotiri, Santorini 84700, Greece
Email: info@thiras-dolphin.gr
Reservations: reservations@thiras-dolphin.gr
Telephone: +30 22860 82129
G.E.MI.: 149134838000