1. Introduction

Rafarko.gr is committed to protecting your personal data. This Privacy Policy explains what data we collect, how we use it and what rights you have, in accordance with the General Data Protection Regulation (GDPR) and applicable Greek legislation.

2. Data Controller

The data controller is the business rafarko.gr, based in Nikiti, Halkidiki. You can contact us via the contact form on the website.

3. What Data We Collect

3.1 Data you provide to us

When completing the booking or contact form, we may collect:

• Full name
• Email address
• Phone number
• Desired dates of stay
• Number of guests
• Any comments or special requests

3.2 Data collected automatically

When you visit the website, the following data may be collected automatically:

• IP address
• Browser type and version
• Pages visited and time spent
• Referral source

4. Cookies and Tracking Technologies

Our website uses cookies and similar technologies, including Google Analytics, to analyse traffic and improve your experience.

You can configure your browser to block cookies. However, this may affect the functionality of certain parts of the website.

Categories of cookies we use:

• Essential cookies: Required for the basic operation of the website
• Analytical cookies: Google Analytics for statistical analysis (anonymised)
• Preference cookies: To store your preferences

5. Purpose of Processing

Your data is used exclusively for:

• Managing and confirming your booking
• Communicating with you regarding your request
• Improving our services
• Complying with legal obligations

6. Legal Basis for Processing

The processing of your data is based on:

• Performance of a contract: To process your booking
• Consent: For sending promotional material (where you have requested this)
• Legitimate interest: To improve our services

7. Data Retention

We retain your data for as long as necessary for the purposes for which it was collected, and in any case no longer than 5 years from the date of our last communication, unless legislation requires otherwise.

8. Disclosure to Third Parties

We do not sell, assign or lease your personal data to third parties. Data may be shared exclusively with service providers (e.g. Google Analytics) under strict confidentiality agreements and in compliance with the GDPR.

9. Your Rights

Under the GDPR, you have the following rights:

• Right of access: To know what data we hold about you
• Right to rectification: To correct inaccurate data
• Right to erasure: To request deletion of your data
• Right to restriction: To restrict processing
• Right to data portability: To receive your data in a structured format
• Right to object: To object to processing

To exercise any of the above rights, please contact us via the website. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

10. Amendments

This Privacy Policy may be updated from time to time. Any significant changes will be announced on the website. Continued use of the website following any changes constitutes acceptance of the updated policy.