Privacy policy

The data controller is ΠΕΤΑΡ ΡΑΚΙΤΣ ΚΑΙ ΣΙΑ Ε.Ε., registered at A Parodos Thrakis 6, Paralia, Pieria, Greece. Contact: info2@erato-holidays.gr, tel. +30 23510 63505.

Through the inquiry form we collect: name, e-mail, phone, preferred dates and your message. The purpose is to answer your inquiry and prepare options before any booking.

Legal basis: steps taken at your request prior to entering a contract (Art. 6(1)(b) GDPR), together with our legitimate interest in responding to interested guests (Art. 6(1)(f)).

The form offers two options. The e-mail button sends your details to our own website server (our hosting provider, located in Germany/EU), which forwards them to us by e-mail; they are not kept in a separate database. The WhatsApp button instead opens a pre-filled message that you send yourself.

If you write via WhatsApp, Meta Platforms acts as an independent controller under its own policy; transfers to the USA are covered by the EU-US Data Privacy Framework. Our inquiry e-mail is received by our e-mail provider (Google Workspace) as our processor. You can always use the phone or e-mail us directly instead.

This website sets no cookies for visitors and stores no analytics identifiers on your device. Only a technical sessionStorage entry is used, to remember that you dismissed the animated receptionist. A login cookie exists solely on our private statistics page, which only we use; it is never set for visitors.

We keep our own visit statistics, without cookies: a small script on the page sends page-view and engagement events to our own server. Per visit we record: the page viewed, the language, the time actively spent on the page, the device class (phone, tablet or desktop), the country derived from the network connection, and the address of the site you came from (the site itself, not the exact page).

To count visits, a short-lived technical identifier is derived mathematically from connection data (a keyed hash); it changes every day, the original data cannot be reconstructed from it, and the IP address itself is never stored. We cannot identify individual visitors (Art. 11 GDPR). No third party receives the data; there is no advertising and no cross-site tracking.

The legal basis for these statistics is our legitimate interest in understanding how the site is used (Art. 6(1)(f) GDPR); you may object at any time at info2@erato-holidays.gr. For these statistics nothing is stored on or read from your device and no persistent identifiers exist; no consent banner is therefore required.

We keep inquiries for as long as needed to respond and, if a booking follows, as the law requires; otherwise we delete them within a period of at most 12 months.

Raw visit-statistics events are kept for at most 12 months; aggregated statistics, which contain no identifiers, are kept indefinitely.

You have the right of access, rectification, erasure, restriction, objection and data portability. Send requests to info2@erato-holidays.gr.

You may also lodge a complaint with a supervisory authority: in Greece the Hellenic DPA (dpa.gr); in Serbia the Poverenik; in Romania ANSPDCP.

We display our guests’ public Google reviews with the name as published; we remove the display on request. Property photos may show identifiable people only on an appropriate legal basis.

We may update this policy; the version published on the site applies. For any questions: info2@erato-holidays.gr.