Privacy Policy / GDPR
This Privacy Policy explains how we collect, use, store, and protect personal data when visitors use this website, contact us, or make a reservation through our online booking system.
1. Data Controller
The data controller responsible for the processing of personal data is:
Company Name: ΚΟΥΣΚΟΣ ΑΝΑΠΤΥΞΙΑΚΗ ΣΥΜΒΟΥΛΕΥΤΙΚΩΝ ΜΕΛΕΤΩΝ ΚΑΙ ΠΑΡΟΧΗΣ ΟΛΟΚΛΗΡΩΜΕΝΩΝ ΛΥΣΕΩΝ ΤΟΥΡΙΣΤΙΚΩΝ ΥΠΗΡΕΣΙΩΝ ΕΤΑΙΡΕΙΑ ΠΕΡΙΟΡΙΣΜΕΝΗΣ ΕΥΘΥΝΗΣ
Registered Address: 41 Mesogeion Avenue, P.C. 15126, Marousi, Greece
VAT Number: 998588696
G.E.MI. Registration Number: 7777801000
For any matter regarding personal data, users may contact the company through the contact details listed on this website.
2. Personal Data We Collect
We may collect and process the following categories of personal data:
- name and surname,
- email address,
- phone number,
- country of residence,
- booking details,
- arrival and departure dates,
- number of guests,
- selected room or suite,
- payment-related information,
- invoice or billing details, where required,
- messages or requests submitted through contact forms,
- technical data such as IP address, browser type, device information, and website usage data.
We do not intentionally collect special categories of personal data unless such information is voluntarily provided by the guest and is necessary for the management of the reservation or the provision of the requested service.
3. Purpose of Processing
Personal data is processed for the following purposes:
- to manage accommodation reservations,
- to communicate with guests before, during, and after their stay,
- to process payments and deposits,
- to issue invoices, receipts, or other legal documents,
- to respond to requests submitted through the website,
- to provide customer support,
- to comply with legal, tax, accounting, and regulatory obligations,
- to improve the website and user experience,
- to protect the security and proper operation of the website,
- to send marketing communications, only where the user has given consent or where permitted by law.
4. Legal Basis for Processing
The processing of personal data is based on one or more of the following legal bases:
- the performance of a contract or steps taken before entering into a contract, such as the management of a reservation,
- compliance with legal obligations, including tax and accounting obligations,
- the legitimate interests of the company, such as website security, customer service, and business operation,
- the user’s consent, where required, such as for certain marketing communications or non-essential cookies.
5. Reservations and Payments
Online reservations may be processed through WebHotelier or another cooperating booking system.
When a guest makes a reservation, the information submitted during the booking process may be processed by the booking engine and relevant service providers for the purpose of completing and managing the reservation.
Online payments may be processed by third-party payment providers or banks. The company does not store full card details on its website. Payment information is processed through the secure environment of the cooperating payment provider.
6. Recipients of Personal Data
Personal data may be shared, where necessary, with:
- booking engine providers,
- payment providers and banks,
- accounting and tax advisors,
- IT and website support providers,
- email and hosting service providers,
- public authorities, where required by law,
- legal advisors, where necessary for the protection of the company’s rights.
We do not sell personal data to third parties.
7. International Transfers
Personal data may be processed by service providers located within or outside the European Economic Area.
Where personal data is transferred outside the European Economic Area, appropriate safeguards are applied in accordance with applicable data protection legislation.
8. Data Retention
Personal data is kept only for as long as necessary for the purposes for which it was collected.
Booking, payment, invoice, and tax-related data may be kept for the period required by applicable tax, accounting, and legal obligations.
Contact form messages and communication data are kept for as long as necessary to respond to the request and manage any related matter.
Marketing data is kept until the user withdraws consent or unsubscribes from communications.
9. User Rights
Under applicable data protection legislation, users have the right to:
- request access to their personal data,
- request correction of inaccurate or incomplete data,
- request deletion of their data, where permitted by law,
- request restriction of processing,
- object to processing,
- request data portability,
- withdraw consent at any time, where processing is based on consent,
- lodge a complaint with the competent data protection authority.
To exercise any of the above rights, users may contact the company through the contact details listed on this website.
10. Complaint to the Supervisory Authority
If a user believes that their personal data has been processed in violation of applicable data protection legislation, they have the right to lodge a complaint with the competent supervisory authority.
In Greece, the competent authority is the Hellenic Data Protection Authority.
11. Cookies
This website may use cookies and similar technologies for its proper operation, performance, analytics, and, where applicable, advertising or marketing purposes.
Necessary cookies are used for the basic operation of the website. Non-essential cookies are used only where permitted by law and, where required, after the user’s consent.
For more information, users may refer to the website’s Cookies Policy.
12. Data Security
We take appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.
However, no method of transmission over the internet or electronic storage is completely secure. For this reason, we cannot guarantee absolute security.
13. Third-Party Links
The website may contain links to third-party websites or services. The company is not responsible for the privacy practices, content, or security of third-party websites.
Users are advised to read the privacy policies of any third-party websites they visit.
14. Updates to this Privacy Policy
The company may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.
Continued use of the website after any update constitutes acceptance of the revised Privacy Policy.
Last updated: August 4, 2026
