1. Data Controller

Olea Hill
Company: C L Properties Private Capital Company (IKE)
General Business Register (GEMI): 165422927000
Electronic Register of Tourism Enterprises (e-MITE): 1039 Κ914 Κ038 2200
Data Controller: Emmanuel Chatzakis
Address: Vrachokipou Str. 0, Vatheianos Kampos, Heraklion, Crete, 700 08
Email: c.l.properties@outlook.com
Phone: +30 2810 213 572

The Data Controller determines the purpose and means of processing all personal data collected.

2. Data We Collect

2.1 Data Provided by Users

• Full name
  
• Email address
  
• Telephone number
  
• Booking details (number of guests, dates)
  
• Optional comments or requests

2.2 Data Collected Automatically

• IP address
  
• Device and browser type
  
• Cookies (see Cookies Policy below)
  
• Visitor analytics (e.g., Google Analytics)

2.3 Data from Third-Party Booking Platforms

When booking via platforms such as:

• Airbnb
  
• Booking.com
  
• VRBO
  
• Other third-party booking engines
  we receive only the data necessary to manage your reservation.

3. Purpose of Processing

Personal data is processed for:

• Managing reservations
  
• Communicating regarding your booking
  
• Responding to guest inquiries
  
• Billing and tax compliance
  
• Improving website functionality and user experience
  
• Statistical analysis
  
• Ensuring secure operation of services

4. Legal Basis for Processing

Processing is based on:

• Contractual necessity (reservations and stays)
  
• Consent (newsletters, cookies, contact forms)
  
• Legitimate interest (security, analytics)
  
• Legal obligation (tax documentation)

4. Data Recipients

Data may be shared only with:

• Authorized Olea Hill personnel
  
• Accounting and tax authorities
  
• Website support technicians
  
• Booking platforms (e.g., Booking.com, Airbnb)
  
• Third-party providers of hosting, analytics, or email systems

We do not sell, rent, or trade personal data.

6. Data Retention

• Reservation data: up to 5 years (as required by tax law)
  
• Email communications: up to 2 years
  
• Cookies: as defined in the Cookies Policy

After the retention period expires, all data is permanently deleted.

7. Your Rights Under GDPR

You have the right to:

• Access your personal data
  
• Request correction or updates
  
• Request deletion (“right to be forgotten”)
  
• Request restriction of processing
  
• Object to processing
  
• Data portability
  
• Withdraw consent at any time

To exercise your rights, contact: c.l.properties@outlook.com

8. Data Security Measures

We apply appropriate technical and organizational measures, including:

• SSL/HTTPS encryption
  
• Secure server environment
  
• Restricted access to stored data
  
• Firewall and anti-malware protection

9. External Links

Our website may include links to third-party services (Airbnb, Booking.com, etc.).
We are not responsible for their privacy practices.

10. Changes to This Privacy Policy

We may update this Policy periodically.
The latest version is always available on oleahill.gr.