Legal
Privacy Policy
Last updated: 29 August 2026
This policy explains what personal data Studios Betty collects through this website, why we collect it, how long we keep it, and what rights you have. We have tried to keep it in plain language. If anything is unclear, call or email us and we will explain it.
1. Who is responsible for your data
The data controller is:
- Studios Betty — rooms to let, Kinira, 640 04, Thasos, Greece
- Phone: +30 2593 041310
- Mobile / WhatsApp: +30 6956 534777
- Email: studios.betty@gmail.com
- ΜΗΤΕ registration number: 0103K122K0233001
We are a small family business. There is no separate data protection officer; enquiries go directly to us at the address above.
2. What we collect, and why
If you use the contact form
The form collects your name, email address, the dates you are interested in, and your message. We use these only to answer your enquiry about staying with us.
Legal basis: your consent (Article 6(1)(a) GDPR), which you give by ticking the box on the form. You can withdraw it at any time by emailing us.
How it reaches us: the form posts to our own website hosting, which sends it on to us as an email. It is not handled by any third-party form service. Along with what you type, we record the time you gave consent and the IP address the message came from — kept only as evidence of consent and to block automated abuse.
Retention: we keep enquiry emails for up to 24 months after the last contact, then delete them. If the enquiry becomes an actual booking, the booking records are kept for as long as Greek tax and tourism law requires.
If you call or email us directly
We hold whatever you choose to tell us, for the same purposes and periods.
Legal basis: steps taken at your request before entering a contract, and performance of that contract (Article 6(1)(b) GDPR).
If you just browse the site
Nothing that identifies you runs unless you allow it. On your first visit you are asked whether to allow analytics; until you answer, no analytics cookie is written and nothing is sent to Google. Declining takes one click, exactly like accepting.
Our hosting provider keeps standard server logs (including IP addresses) for security and to keep the site running.
Legal basis: our legitimate interest in operating a secure website (Article 6(1)(f) GDPR).
If you accept analytics
We use Google Analytics 4 to count how many people visit each page and which pages are worth improving. It records things like the pages you view, roughly where in the world you are, and whether you are on a phone or a computer. IP anonymisation is switched on. We do not use it for advertising, we do not try to work out who you are, and we do not combine it with anything else we hold.
Legal basis: your consent (Article 6(1)(a) GDPR), given through the cookie banner. You can withdraw it at any time via Cookie settings in the footer of any page — that stops collection immediately.
Retention: Google Analytics data is kept for 14 months and then deleted automatically.
We also link Google Search Console to Analytics. Search Console reports on how our pages appear in Google search results and is based on Google's own data, not on cookies or anything collected from your device.
The individual cookies are listed in our Cookie Policy.
3. Who else processes your data
| Who | Role | What they handle |
|---|---|---|
| Hostinger | Processor — web hosting | Server logs, including your IP address |
| Google (Analytics 4) | Processor — website statistics | Only if you accept analytics. Pages viewed, approximate region, device type, with IP anonymisation. |
| Google (Maps) | Separate controller | Only if you press "Load the map" on our Location page. Nothing is sent to Google before you do. |
| Booking.com | Separate controller | Only if you follow a "Book Now" link. Once you leave our site, their privacy policy applies, not ours. |
| Your email provider | Separate controller | Messages you send us by email pass through your provider and ours |
We do not sell your data and we do not share it for marketing.
4. Transfers outside the EEA
Our website fonts are served from our own server in the EU, so ordinary browsing involves no transfer outside the EEA.
Three things can involve a transfer to the United States, and all three are under your control:
- Accepting analytics. Google Analytics may process data in the United States. Decline in the banner, or withdraw later, and none of it happens.
- Loading the map on the Location page sends your IP address to Google. We ask first, and the map does not load unless you press the button.
- Emailing us. Our address is a Gmail address, so email you send us is processed by Google. If you would rather not use Google, please phone us instead.
These transfers rely on the EU–US Data Privacy Framework and, where applicable, the European Commission's standard contractual clauses.
5. Your rights
Under the GDPR you have the right to:
- ask what data we hold about you, and get a copy;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to how we use it;
- receive your data in a portable format;
- withdraw consent at any time, without affecting what we did before you withdrew it.
To exercise any of these, email studios.betty@gmail.com or call +30 2593 041310 or +30 6956 534777. We will respond within one month.
6. Complaints
If you think we have handled your data badly, please tell us first — it is usually the fastest way to fix it. You also have the right to complain to the Greek Data Protection Authority:
- Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα (ΑΠΔΠΧ)
- Kifisias 1–3, 115 23 Athens, Greece
- Telephone: +30 210 6475600
- www.dpa.gr
7. Changes to this policy
If we change how we handle data, we will update this page and change the date at the top. There is no separate notification, so please check back if it matters to you.