Privacy policy

Who we are

The data controller is Windmill Villas, Artemonas, 840 03 Sifnos, Greece, managed by Evangelia Spitha. For anything about your personal data, email us at ailiasifnos@gmail.com or call +30 694 780 1386.

What data we use and why

Contact form: when you send us a message, we use your name, email, phone (if given), dates, number of guests and message to reply and to prepare a possible booking (GDPR Article 6(1)(b), steps taken at your request before entering into a contract). The message reaches us as an email through the Resend delivery service.

Email, phone and WhatsApp: when you contact us directly, we use the details you give us for the same purpose. WhatsApp messages pass through the WhatsApp service (Meta), under its own terms and privacy policy.

Bookings: we arrange bookings directly with you, by WhatsApp, phone or email. If you book through a booking platform (such as Booking.com), its own terms and privacy policy also apply. We use the booking details to host you (Article 6(1)(b)) and for legal obligations such as tax records (Article 6(1)(c)).

Running and securing the site: our hosting provider, Vercel Inc., records technical data (IP address, time, browser) to operate and protect the site (Article 6(1)(f), legitimate interest).

Visitor statistics: we use Vercel Web Analytics, which counts visits anonymously and in aggregate (page, country, device type) without cookies and without identifying you (Article 6(1)(f)).

Map: the map on the contact page is loaded from Google Maps only if you allow it in the cookie settings or press “Show map”. Google then receives your IP address and may set its own cookies, as an independent controller (Article 6(1)(a)).

Cookies

The site uses the cookies below. You can change your choices at any time from the “Cookie settings” link at the bottom of every page.

• wv_consent (ours, essential): remembers your cookie choices, for 6 months.
• Google cookies (only once the map is loaded): set by Google under its own policy.

Who receives the data

We do not sell your data or share it for advertising. Only the providers needed to run the site process it on our behalf: Vercel Inc. (hosting and statistics), Resend (delivery of contact form messages). Google (Maps), Meta (WhatsApp) and Booking.com act as independent controllers when you use their services.

Some of these providers are based in the United States. Transfers rely on the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.

How long we keep it

We keep messages and contact details for as long as we need them to answer your request and look after your stay, then delete them, unless the law requires us to keep them longer (for example, tax records of bookings).

Your rights

You have the right to access, correct, erase, restrict, port and object to the processing of your data, and to withdraw any consent you have given. To use these rights, email ailiasifnos@gmail.com; we will reply within one month.

If you believe we are not handling your data properly, you can complain to the Hellenic Data Protection Authority (www.dpa.gr).

Changes

If the way we use your data changes, we will update this page and the date at the top.