Privacy Policy
Last updated: August 2026
AFOI MAVRIKAKI – XENODOCHEIAKES EMPORIKES KAI TOURISTIKES EPICHEIRISEIS ANONYMI ETAIREIA (trading as Hotel Palladion), located at ST. PROIOU & KOSMA 5, Syros, Greece (hereinafter “we”, “us” or “the Company”), acting as data controller, is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Greek law.
1. Who We Are
Company name: AFOI MAVRIKAKI – XENODOCHEIAKES EMPORIKES KAI TOURISTIKES EPICHEIRISEIS ANONYMI ETAIREIA
Trading as: Hotel Palladion
Address: ST. PROIOU & KOSMA 5, Syros, Greece
Email: paladionhotel@gmail.com
Phone: +30 22810 86400
Website: https://palladion-hotel.com
2. What Data We Collect
We collect the following personal data:
• Through the contact form: full name, email address, and message content.
• Through the booking system (BookOnCloud): data you enter on the booking platform. BookOnCloud operates as an independent data controller — please refer to their privacy policy.
• Automatically collected data: cookies, IP address, browser type, pages visited, via Google Analytics and other tracking technologies.
3. Purposes of Processing
We use your data for the following purposes:
• Responding to your enquiries submitted via the contact form (legal basis: legitimate interest / consent).
• Website traffic analysis and improvement via Google Analytics (legal basis: consent).
• Website accessibility via UserWay (legal basis: legitimate interest).
• Spam protection via Google reCAPTCHA (legal basis: legitimate interest).
4. Who We Share Your Data With
We do not sell your personal data. We may share it with third parties solely for the purposes listed above:
• Google LLC (Google Analytics, reCAPTCHA, Google Site Kit) — USA, subject to appropriate safeguards (Standard Contractual Clauses).
• UserWay Inc. (accessibility widget) — USA.
• BookOnCloud (booking system) — as an independent data controller.
• Wordfence / Defiant Inc. (website security).
5. How Long We Keep Your Data
• Contact form data: for as long as necessary to respond to your enquiry and up to 2 years.
• Google Analytics data: 26 months (GA4 default).
• Cookies: as described in our Cookie Policy.
6. Your Rights
Under the GDPR, you have the following rights:
• Right of access to your data.
• Right to rectification of inaccurate data.
• Right to erasure (“right to be forgotten”).
• Right to restriction of processing.
• Right to data portability.
• Right to object to processing.
• Right to withdraw consent at any time (without retroactive effect).
To exercise your rights, please contact us at paladionhotel@gmail.com. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).
7. Cookies
Our website uses cookies. For details, please refer to our Cookie Policy.
8. Security
We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss or destruction.
9. Changes to This Privacy Policy
We reserve the right to update this policy. Any changes will be published on this page with an updated date.