1. Introduction
   Welcome to Villa Mare Halkidiki (“we”, “us”, or “our”). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, make a reservation, or stay at our guest house.
2. Personal Data We Collect
   We may collect and process the following categories of personal data:

• Identity Data: name, date of birth, gender
• Contact Data: email address, telephone number, postal address
• Booking Data: reservation dates, room preferences, number of guests, special requests
• Payment Data: credit/debit card numbers, billing address (processed securely by our payment processor)
• Communication Data: correspondence with us via email, phone, or chat
• Technical Data: IP address, browser type and version, time zone, cookie identifiers, browsing history on our website
• Special Categories: any medical or dietary requirements you voluntarily provide to ensure a comfortable stay

3. How We Collect Your Data

• Directly from you: when you make a booking, register on our website, subscribe to our newsletter, or communicate with us.
• Automatically: via cookies and similar tracking technologies when you use our website.
• Third parties: booking platforms (e.g., Booking.com, Airbnb), payment processors, marketing partners.

4. Purposes of Processing & Legal Basis

5. Cookies and Tracking Technologies
   We use cookies to enhance your experience. You may choose to disable cookies via your browser settings; however, some features may not function properly.

• Essential Cookies: required for basic website functionality.
• Performance & Analytics Cookies: help us understand how you interact with our site.
• Marketing Cookies: used to deliver relevant advertisements if you have consented.

6. Data Sharing and Disclosure
   We may share your personal data with:

• Service providers: payment processors, IT and hosting providers, marketing agencies.
• Booking platforms: to confirm and manage your reservation.
• Legal authorities: when required to comply with a legal obligation or to protect our rights.

All third parties are contractually bound to maintain the confidentiality and security of your data.

7. Data Retention
   We retain your personal data only as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Generally, we keep booking and transaction records for up to 10 years for tax and accounting compliance.
8. Your Rights
   Subject to local law, you have the right to:

• Access and obtain a copy of your personal data.
• Rectify inaccurate or incomplete data.
• Request erasure of your data (“right to be forgotten”).
• Restrict or object to processing.
• Data portability.
• Withdraw consent at any time (for processing based on consent).

To exercise these rights, please contact us at halkidiki@villamare.bg

9. Security Measures
   We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction, including SSL encryption for data in transit and secure access controls.
10. International Transfers
    If we transfer personal data outside the European Economic Area (EEA), we will ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
11. Changes to This Policy
    We may update this Privacy Policy from time to time. The revised version will be effective on the “Last Updated” date below. We encourage you to review this page periodically.
12. Contact Us
    If you have any questions or concerns about this Privacy Policy or our data practices, please contact:
    Email: halkidiki@villamare.bg

Last Updated: June 7, 2025