Privacy Policy
1. Who we are
Fonte Apartments, Livadi, Serifos, Cyclades, Greece, operates this website and is the data controller for personal data collected through it. Contact: info@fonte.gr.
2. What we collect
Directly from you: through the enquiry form or by email — your name, email address, phone number, preferred dates and your message. If you book directly with us (not through Airbnb or Booking.com), we also collect an identity document number and nationality at or before check-in, which Greek law requires us to report — see section 4. If you accept the optional cookie banner, we additionally collect anonymised analytics data about how you use the site — see section 5.
3. Why we use it, and our legal basis
We use your enquiry to reply to you and arrange your stay — necessary to take steps you request before a booking, or to perform it once confirmed. We use identity and stay details to meet our legal obligations as an accommodation provider in Greece (guest registration, tax records). We only use analytics or marketing cookies with your consent, which you can withdraw at any time. We never sell your data or use it for marketing without that consent.
4. Guest identity registration
Greek law requires accommodation providers to report every guest's identity document details to the Hellenic Police within 24 hours of check-in. If you book directly with us, we collect this at or before check-in and report it as required, and use it for no other purpose.
5. Analytics & advertising cookies
We use Google Tag Manager to optionally load Google Analytics (GA4). Meta (Facebook/Instagram) Pixel is supported by our setup but not currently active. Nothing loads and no cookie is set until you accept the cookie banner — see our Cookie Policy — and you can change your mind at any time using the "Cookie settings" link in the footer. When active, these tools are processed by Google Ireland Ltd. (and, if activated, Meta Platforms Ireland Ltd.) — see section 7 on international transfers.
6. Who we share it with
Airbnb or Booking.com, if you book through them — they process your booking under their own privacy policy, and we only receive what they share with hosts. Google, and if activated Meta, for analytics or marketing, only with your consent. The Hellenic Police and Greek tax authorities, where the law requires it. We do not sell personal data to anyone.
7. International transfers
Google and Meta's EU entities may process data on infrastructure outside the EU/EEA, including in the United States. Where this happens, it takes place under the EU-U.S. Data Privacy Framework (a European Commission adequacy decision) or equivalent safeguards such as Standard Contractual Clauses. This only ever applies to analytics/marketing data, and only if you have given consent.
8. How long we keep it
Enquiries that don't lead to a booking: up to two years. Confirmed booking and guest-registration records: as long as Greek tax and tourism law requires (generally at least five years for accounting records). Analytics data, when active, follows the retention period configured in our Google Analytics/Tag Manager account.
9. Your rights
Under the GDPR you may request access to, correction or erasure of your personal data, restrict or object to its processing, and receive a copy of it in a portable format. Where we rely on your consent (analytics/marketing), withdraw it any time via "Cookie settings" in the footer, or email info@fonte.gr for anything else. You may also lodge a complaint with the Hellenic Data Protection Authority (dpa.gr).
10. Automated decision-making
We do not carry out any automated decision-making or profiling that produces legal or similarly significant effects on you.