Privacy Policy

Who we are

This website and Panthea Residence are operated by ΠΑΝΘΕΑ Ι.Κ.Ε. (Panthea P.C.) ("we", "us"), the data controller for the personal data described in this policy. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and Greek data protection law (Law 4624/2019).

• Company: ΠΑΝΘΕΑ Ι.Κ.Ε. (Panthea P.C.)
• Registered address: Ornos, P.O. Box 108, Mykonos 84600, Greece
• Tax ID (ΑΦΜ): 801414927, Tax Office (ΔΟΥ): Mykonos
• Property: Panthea Residence, Agios Ioannis, Mykonos 84600, Greece
• E-mail: info@panthea-mykonos.com
• Phone: +30 2289 027970

What we collect and why

Contact form

When you send us a message through our contact form we receive:

• your name, e-mail address, phone number and message;
• the date and time of your message, your IP address and a record that you gave your consent.

We use this information only to reply to your enquiry and, if you ask us to, to prepare an offer or booking for you. The legal basis is your consent (Art. 6(1)(a) GDPR) and taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR). Your message is delivered to our e-mail inbox and is not used for marketing.

To protect the form against spam and fraud we use your IP address to limit how many messages can be sent in a short time, and your browser solves a small calculation before sending. This happens on our own website and does not involve any third-party "captcha" service. The legal basis is our legitimate interest in keeping our website and inbox secure (Art. 6(1)(f) GDPR).

E-mail and phone

If you contact us directly by e-mail or phone, we process the details you give us to answer you, on the same legal bases as above.

Bookings

Online bookings are made through our booking engine at pantearesidence.reserve-online.net, which is operated by a third-party provider on our behalf. We use your booking details to provide your stay (Art. 6(1)(b) GDPR) and to meet our legal obligations, for example under Greek tax and accounting law (Art. 6(1)(c) GDPR). Payment details entered in the booking engine are handled by that provider and its payment partners.

Visiting our website

When you visit our website, our hosting provider automatically processes technical data such as your IP address, browser type and the pages requested, so that the site can be delivered and kept secure (Art. 6(1)(f) GDPR). We do not use this data to identify you.

Cookies and third-party content

Our website does not set its own cookies and does not use analytics or advertising trackers. Our fonts are served from our own website. Some content comes from other providers, which receive your IP address when your browser requests it:

• Google Maps (Google Ireland Ltd.) to show our location on the contact page. The map only loads when you choose "Load map"; Google may then set its own cookies. Google Privacy Policy

Our website also links to Facebook, Instagram and Tripadvisor. These are separate websites and their own privacy policies apply once you visit them.

Who we share your data with

We do not sell your personal data. We only share it with:

• service providers who process it on our behalf, such as our website hosting, e-mail and booking engine providers, under data processing agreements;
• public authorities, when we are required to by law.

Some of these providers (for example Google) may process data outside the European Economic Area. Where this happens, the transfer is protected by an adequacy decision such as the EU-U.S. Data Privacy Framework or by the European Commission's Standard Contractual Clauses.

How long we keep your data

We keep personal data only for as long as it is needed for the purposes described in this policy, or for longer where the law requires us to (for example, Greek tax and accounting law).

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to our processing of your data;
• receive your data in a portable format;
• withdraw your consent at any time. This does not affect processing carried out before you withdrew it.

To exercise any of these rights, e-mail us at info@panthea-mykonos.com. We will reply within one month.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority, Kifisias 1-3, 115 23 Athens, Greece (www.dpa.gr).

Security

Our website is served over an encrypted (HTTPS) connection, and we take reasonable technical and organisational measures to protect your personal data against loss, misuse and unauthorised access.

Children

Our website is not intended for children under 16, and we do not knowingly collect their personal data through it.

Changes to this policy

We may update this policy from time to time. The latest version is always available on this page, with the date it was last updated shown at the top. If you have any questions, please contact us.