PRIVACY POLICY
Last updated: 24 August 2026
At Parys Apartments, we respect your privacy and are committed to protecting your personal information.
This Privacy Policy explains what personal data we may collect when you visit our website, contact us, make a reservation or stay at Parys Apartments, how and why we process that information, how long it may be retained and what rights you have regarding your personal data.
We process personal data in accordance with applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679 (GDPR).
1. WHO IS RESPONSIBLE FOR YOUR PERSONAL DATA?
For the purposes of applicable data protection law, personal data collected through the Parys Apartments website and direct booking process is managed by:
Parys Apartments
Agia Paraskevi, Adele 741 50
Crete, Greece
Email: parys@parysapartments.eu
Phone / WhatsApp: +41 762 742 692
If you have any questions regarding your personal information or this Privacy Policy, please contact us using the details above.
2. WHAT PERSONAL DATA MAY WE COLLECT?
Depending on how you interact with Parys Apartments and our website, we may collect information including:
• First and last name
• Email address
• Telephone number
• Country or address information where necessary
• Arrival and departure dates
• Number of guests
• Reservation and accommodation details
• Information voluntarily provided through contact or booking forms
• Messages and communications sent to us
• Information relating to payments and payment status
• Information necessary to arrange additional services requested by you
• IP address and basic technical information about your device or browser
• Cookie preferences and information generated through cookies or similar technologies where applicable
We aim to collect only information that is reasonably necessary for the relevant purpose.
3. HOW DO WE COLLECT YOUR INFORMATION?
We may receive personal information when you:
• Make a reservation through our website
• Send us an enquiry
• Complete a contact or booking form
• Contact us by email, telephone or WhatsApp
• Request an additional service, such as an airport transfer
• Communicate with us before, during or after your stay
• Use certain features of our website
Certain technical information may also be collected automatically by the website, hosting infrastructure or necessary security technologies.
4. WHY DO WE USE YOUR PERSONAL DATA?
We may process your personal information to:
• Respond to questions and enquiries
• Check availability
• Create and manage reservations
• Confirm your booking
• Communicate with you regarding your stay
• Process or facilitate payments
• Arrange services requested by you
• Assist with airport transfers where requested
• Provide customer support
• Manage changes, cancellations and refunds
• Maintain the security and functionality of our website
• Prevent fraud and misuse
• Comply with accounting, tax, tourism and other legal requirements
• Establish, exercise or defend legal claims
We will not use your personal information for purposes that are incompatible with the purposes for which it was collected unless permitted or required by law.
5. LEGAL BASIS FOR PROCESSING
Under the GDPR, personal data must be processed on an appropriate legal basis.
Depending on the circumstances, we may process your information because:
• It is necessary to take steps at your request before entering into a contract
• It is necessary to perform our accommodation contract with you
• We are required to process the information to comply with a legal obligation
• Processing is necessary for our legitimate interests, provided those interests do not override your rights and freedoms
• You have provided your consent where consent is required
Where processing is based on consent, you may withdraw your consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
6. RESERVATIONS
When you make or request a reservation, we process information necessary to manage your stay.
This may include your name, contact information, arrival and departure dates, number of guests, selected accommodation options, payment status and communications relating to your reservation.
Some information may need to be retained after your stay to comply with applicable legal, accounting or tax obligations.
7. PAYMENTS
Payments made through our website may be processed by an independent payment service provider.
Where payment processing is handled by an external provider, Parys Apartments does not normally receive or store your complete payment card details.
The payment provider may process your information according to its own privacy policy and legal obligations.
We recommend reviewing the privacy information provided by the relevant payment service before completing a transaction.
8. WHATSAPP AND OTHER COMMUNICATION SERVICES
Our website may allow you to contact Parys Apartments through WhatsApp or other external communication services.
If you choose to contact us through such a service, the provider of that service may process information in accordance with its own privacy policy.
We will use information received through these communications primarily to respond to your enquiry, manage your reservation or assist you during your stay.
9. AIRPORT TRANSFERS AND OTHER THIRD-PARTY SERVICES
If you ask us to help arrange an airport transfer or another service provided by an independent third party, it may be necessary to share limited information with the provider.
For example, this may include:
• Your name
• Number of passengers
• Pick-up location
• Destination
• Flight number
• Arrival or departure time
• Contact information where necessary
We will only share information reasonably necessary to arrange the requested service.
10. GOOGLE MAPS AND EXTERNAL CONTENT
Our website may use Google Maps or other external services to provide maps, directions or other functionality.
When third-party content is loaded, the provider may receive technical information such as your IP address, browser information or device information.
Third-party providers process information according to their own privacy policies.
Where legally required, optional external services should only be activated after the appropriate consent has been provided.
11. COOKIES
Our website may use cookies and similar technologies necessary for website functionality and, where enabled, optional features.
For detailed information regarding cookies and how you can manage your preferences, please read our Cookie Policy.
Where consent is legally required for optional cookies, they should not be activated until the appropriate consent has been provided.
12. WHO MAY RECEIVE YOUR PERSONAL DATA?
Where necessary, personal information may be shared with trusted service providers involved in operating our website or providing your requested services.
Depending on the circumstances, these may include:
• Website hosting providers
• Payment service providers
• Booking technology providers
• IT and technical service providers
• Airport transfer or transportation providers requested by you
• Professional advisers such as accountants where necessary
• Public authorities where disclosure is required by law
We do not share personal information with third parties simply for them to use for their own unrelated marketing purposes.
13. INTERNATIONAL DATA TRANSFERS
Some technology or service providers may process information outside Greece or the European Economic Area.
Where personal data is transferred internationally, appropriate safeguards should be used where required by applicable data protection law.
These may include an adequacy decision, approved contractual safeguards or another lawful transfer mechanism.
14. HOW LONG DO WE KEEP YOUR INFORMATION?
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to comply with applicable legal, accounting, tax and regulatory requirements.
Different types of information may therefore be retained for different periods.
When information is no longer required and there is no legal reason to retain it, it should be deleted or securely anonymised where appropriate.
15. DATA SECURITY
We take reasonable organisational and technical measures to protect personal information against unauthorised access, loss, alteration, disclosure or misuse.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
Guests should also take appropriate precautions when communicating sensitive information online.
16. YOUR RIGHTS UNDER THE GDPR
Where the GDPR applies, you may have rights regarding your personal data, including the right to:
• Request access to your personal data
• Request correction of inaccurate or incomplete information
• Request deletion of your personal data in certain circumstances
• Request restriction of processing in certain circumstances
• Object to certain processing
• Request data portability where applicable
• Withdraw consent where processing is based on consent
• Lodge a complaint with a competent data protection supervisory authority
These rights are subject to the conditions and limitations provided by applicable law.
17. REQUESTING ACCESS, CORRECTION OR DELETION
If you wish to exercise your data protection rights, please contact us at:
Please provide sufficient information for us to understand your request.
We may need to verify your identity before processing certain requests to protect personal information against unauthorised disclosure.
18. CHILDREN'S PERSONAL DATA
Our accommodation welcomes families; however, our website and booking services are intended to be used by adults.
Where information relating to children is necessary for a reservation or legal requirement, it should be provided by their parent, guardian or another authorised adult.
We do not knowingly use children's personal information for independent marketing purposes.
19. MARKETING COMMUNICATIONS
If Parys Apartments introduces email or other direct marketing communications, we will process personal information for those purposes only where we have an appropriate legal basis.
Where consent is required, marketing communications will only be sent after appropriate consent has been obtained.
You may withdraw marketing consent or unsubscribe from such communications at any time.
20. THIRD-PARTY WEBSITES
Our website may contain links to independent websites or services.
Parys Apartments is not responsible for the privacy practices or content of independent third-party websites.
We recommend reviewing the privacy policy of any external service before providing personal information.
21. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes to our website, services, technology or applicable legal requirements.
The latest version will be made available on our website.
The date shown at the beginning of this Privacy Policy indicates when it was last updated.
22. YOUR RIGHT TO COMPLAIN
If you believe that your personal data has been processed in violation of applicable data protection law, you may contact us so that we can try to resolve your concerns.
You may also have the right to lodge a complaint with the competent data protection supervisory authority.
For processing subject to Greek data protection law, the relevant supervisory authority is the Hellenic Data Protection Authority (HDPA).
23. CONTACT US
If you have questions about this Privacy Policy, how your personal information is processed or wish to exercise your privacy rights, please contact:
Parys Apartments
Agia Paraskevi, Adele 741 50
Crete, Greece
Email: parys@parysapartments.eu
Phone / WhatsApp: +41 762 742 692
We will make reasonable efforts to respond to privacy-related requests in accordance with applicable law.