Legal
Last updated: 2 November 2026
This policy explains what personal data Amazing Villas in Crete collects when you visit this website, contact us or book a stay, why we use it, and the rights you have under the EU General Data Protection Regulation (GDPR).
1. Who is responsible for your data
Argyris Skordilis (registered name: ΣΚΟΡΔΙΛΗΣ ΑΡΓΥΡΗΣ, sole proprietorship), trading as Amazing Villas in Crete
Asteri, 74150 Rethymno, Crete, Greece
VAT number: EL064196183 · Tax office: Rethymno (ΔΟΥ Ρεθύμνου) · GEMI: 154400450000
Email: info@amazingvillasincrete.com · Phone: +30 698 085 5085
For any question about your data, write to the email above. We do not have a Data Protection Officer; the owner, Argyris Skordilis, handles these requests personally.
2. What we collect and why
| When | What | Why (legal basis) |
|---|---|---|
| You send an enquiry (email, WhatsApp, phone, the forms on this site) | Name, contact details, dates, number of guests, your message | To answer you and prepare an offer (steps before a contract, Art. 6(1)(b) GDPR) |
| You send the MAZI enquiry form | Name, email, phone if you give it, dates, group size and the details you choose to add | To answer you and prepare a proposal (Art. 6(1)(b)). The form is sent by email to info@amazingvillasincrete.com and is not stored on the website; to stop spam, a scrambled (hashed) form of your IP address is kept for one hour |
| You create or join a group list and share its link | The trip details of the list (villas, dates, number of guests), and for each person who votes: the first name they type, their votes and their note | To let your group choose together (Art. 6(1)(b)). Anyone with the link can see the list, so share it only with your group |
| You use a planner on this site and ask for the result by email (day-trip finder, MAZI group planner) | Your email address and the choices you made | To send you what you asked for (Art. 6(1)(b)) |
| You book a villa | Guest names, contact details, dates, payment details, special requests | To carry out your booking (Art. 6(1)(b)) and to meet our tax and accommodation obligations under Greek law (Art. 6(1)(c)) |
| You visit the website | Technical data your browser sends (IP address, browser, pages visited) | To run the website securely (Art. 6(1)(f), our legitimate interest) |
| You agree to statistics or marketing cookies | How the site is used, measured with Google Analytics (pseudonymous statistics); which visits come from our Facebook and Instagram pages and ads, measured with the Meta Pixel (marketing cookies) | Only with your consent (Art. 6(1)(a)); you can withdraw it at any time |
| You load a map | Your IP address is sent to Google (Maps). Our videos are hosted on our own server and send nothing to a video provider | Only with your consent or when you click to load it (Art. 6(1)(a)) |
We do not sell personal data, and we do not use it for automated decisions about you.
3. Who else receives your data
- WebHotelier (booking engine at amazingvillasincrete.reserve-online.net): your booking and payment are handled there. Card payments are processed by the payment provider shown in the booking engine; we do not see or store full card numbers.
- Website hosting and maintenance: our hosting provider and our web agency, Tourix, only as far as needed to run the site.
- Email and messaging: our email provider; WhatsApp (Meta) if you choose to message us there.
- Google: Google Analytics and Google Maps, only after your consent or click.
- Spam protection: Cloudflare (Turnstile), only when you send the Group Stay Planner by email, to check that the request comes from a person. It processes technical data such as your IP address and browser details (legitimate interest, Art. 6(1)(f)).
- Accountant and public authorities, where Greek law requires it (for example tax records).
- Booking platforms (such as Airbnb or Booking.com), only if you booked through them; their own privacy policies apply.
Some of these providers (Google, Meta) may process data outside the EU. Where they do, they rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.
4. How long we keep it
- Enquiries that do not lead to a booking: up to 24 months, so we can answer follow-up questions, then deleted.
- Booking and invoice records: for as long as Greek tax and accommodation law requires.
- Statistics data in Google Analytics: 14 months.
- Group lists: deleted automatically after 12 months without changes.
- MAZI enquiries: kept in our email like any other enquiry (see above).
- Your cookie choice: 6 months, then we ask again.
5. Your rights
You can ask us to show you the data we hold about you, correct it, delete it, limit its use, give it to you in a portable format, or stop using it where we rely on our legitimate interest. Where you gave consent, you can withdraw it at any time, for cookies with the cookie settings. Write to info@amazingvillasincrete.com; we answer within one month.
If you believe we have not handled your data correctly, you can complain to the Hellenic Data Protection Authority (www.dpa.gr) or to the authority in your own EU country.
6. Security
The website uses an encrypted connection (HTTPS). Access to enquiries and bookings is limited to the owner and the people who need it to prepare your stay.
7. Changes
We will update this page if the way we use data changes. The date at the top shows the latest version.
See also: Cookie Policy · Terms