Privacy Policy (GDPR)

Lithos Suites

This Privacy Policy explains how Lithos Suites collects, uses, stores, and protects the personal data of its visitors and guests, in accordance with the General Data Protection Regulation (GDPR) and applicable Greek legislation.

1. Data Controller

Lithos Suites
Address: Kamares, Sifnos, 84003, Greece
Phone: +30 694 591 7235
Email: info@lithossuites.com

2. Data We Collect

We collect only the data necessary for providing our services:

Contact details: name, email address, phone number
Booking details: stay dates, preferences, payment-related information when required by the payment provider
Technical/usage data: IP address, browser information, cookies
Optional data you provide (e.g., newsletter subscription, contact form messages)

3. Legal Basis for Processing

We process personal data under one or more of the following lawful bases:

Consent, e.g., newsletter subscription or marketing communications
Performance of a contract, e.g., completing a booking or reservation
Legal obligation, such as maintaining accounting records
Legitimate interests, provided that your rights and freedoms do not override those interests

4. How We Use Your Data

We use your personal data for the following purposes:

Managing and completing reservations
Communicating with you regarding your stay or inquiries
Sending newsletters or promotional content (with your consent)
Analyzing website traffic and improving our services

5. Third-Party Recipients

To provide our services, we may share your data with:

Reservation/booking system provider
Website hosting provider
Email and communication service providers
Payment service providers (where applicable)

All third parties act as “processors” under GDPR and are contractually bound to protect your data.

6. Cookies & Similar Technologies

Our website uses cookies for:

Essential/functional purposes
Analytics and performance
Marketing (only with your consent)

You may manage your cookie preferences through the cookie banner or your browser settings.

7. Data Retention

Your data is retained only for as long as necessary for the purpose of processing:

Booking data: until the reservation and legal obligations are fulfilled
Communication data: up to 12 months after the last contact
Newsletter data: until you withdraw your consent

8. Data Security

Lithos Suites implements appropriate technical and organizational measures to safeguard your data, including encryption, controlled access, and secure data management systems.

9. Your Rights Under GDPR

You have the following rights:

Right of access
Right to rectification
Right to erasure (“right to be forgotten”)
Right to restriction or objection to processing
Right to data portability
Right to lodge a complaint with the Hellenic Data Protection Authority

10. Data Breaches

In the event of a data breach that may affect your rights and freedoms, we will notify the competent authorities and, where required, inform you directly.

11. Changes to This Policy

This Privacy Policy may be updated periodically. Any changes will be posted on this page.

12. Contact

For any questions or requests regarding your personal data, or to exercise your GDPR rights, please contact:

Email: info@lithossuites.com
Phone: +30 694 591 7235