Privacy Policy

The data controller for this website (mareterrahotels.com) is [to be provided] (“Mareterra”, “we”, “us”), trading as Mareterra Hospitality.

• Registered office: [to be provided]
• VAT number (ΑΦΜ): [to be provided]
• GEMI number (ΓΕΜΗ): [to be provided]
• Email for privacy and data requests: [to be provided]
• Telephone: [to be provided]

This policy applies to this website only. The hotel websites we link to (Manifest Boutique Hotel, Anemolia Mountain Resort and Likoria) are operated separately and have their own privacy policies.

We collect as little personal data as possible. At present this site has no contact form, no newsletter, no analytics and no advertising or tracking technologies. The data we handle is limited to the following.

• Technical data when you visit the site (IP address, browser and device type, pages requested, date and time). Our hosting provider processes this to deliver the site and keep it secure. Legal basis: our legitimate interest in operating and securing the site (Art. 6(1)(f) GDPR). Retention: only the short periods set by our hosting provider for security and troubleshooting, normally days rather than months.
• Messages you send us by email or telephone, using the contact details shown on the site (name, contact details and the content of your message). We use them to reply to you. Legal basis: steps taken at your request before entering into a contract, or our legitimate interest in answering business enquiries (Art. 6(1)(b) and (f) GDPR). Retention: up to 24 months after our last contact with you. If we enter into a contract, we keep the records required by Greek tax and accounting law for the legally required period.
• Your cookie choice. We store your consent choice in your browser so we do not ask you again on every visit. It is not sent to us. See the Cookie Policy. Legal basis: legal obligation and our legitimate interest in being able to show that your choice was respected (Art. 6(1)(c) and (f) GDPR). Retention: up to 12 months in your browser.

If we add a contact form, newsletter, analytics or similar features in future, we will update this policy first and ask for your consent where the law requires it.

• Hosting provider: Vercel Inc. (United States), which hosts the website and acts as our processor.
• Domain and DNS provider: one.com, which resolves the domain name.
• Email and IT service providers that process our mailbox, acting on our instructions under data-processing agreements.
• Public authorities and professional advisers (lawyers, accountants) where the law requires it or where needed to establish or defend legal claims.

We do not sell your personal data.

Our hosting provider is based in the United States. Where personal data is transferred there, it relies on the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses.

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased (“right to be forgotten”) where the law allows;
• restrict how we use your data;
• receive your data in a portable format;
• object to processing based on our legitimate interests;
• withdraw consent at any time, where processing is based on consent (withdrawing does not affect earlier lawful processing).

To exercise these rights, email [to be provided]. We will reply within one month. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα), 1-3 Kifissias Avenue, 115 23 Athens, www.dpa.gr (opens in a new tab), or with the supervisory authority in your own EU country.

The whole site is served over HTTPS. We apply appropriate technical and organisational measures to protect personal data. We do not make decisions about you by automated means, and we do not profile visitors.

This site is aimed at business visitors and is not directed at children.

We will update this page if our practices change. The date at the top shows when it was last reviewed.