Skip to main content

Privacy Policy

Ampelia Hotel Kassandra
Last updated: March 2026

1. Introduction

Ampelia Hotel Kassandra ("we", "us", "our") is committed to protecting your privacy.

This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website, make a reservation, contact us, or use our services.

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Greek data protection laws.

2. Data Controller

The data controller responsible for your personal data is:

Ampelia Hotel Kassandra
Hanioti, Halkidiki, Greece
Email: info@hotel-ampelia.gr
Reservations: reservations@hotel-ampelia.gr

3. Personal Data We Collect

A) Information You Provide to Us

  • Name and title
  • Email address
  • Telephone number
  • Postal address
  • Payment details (processed securely through third-party providers)
  • Reservation and booking information
  • Special requests
  • Identification details where required by law
  • Information submitted via forms, email, or telephone

B) Information Collected Automatically

  • IP address
  • Browser type and version
  • Device type and operating system
  • Pages visited and time spent
  • Referral source
  • Cookies and similar technologies

Further details are provided in our Cookie Policy.

4. Source of Personal Data

We collect personal data directly from you and may also receive it from third-party booking platforms, travel agents, or other distribution partners.

5. How We Use Your Personal Data

  • Manage reservations and hotel services
  • Communicate with guests before, during, and after their stay
  • Provide customer support
  • Process payments and prevent fraud
  • Comply with legal obligations
  • Improve our website and services
  • Send marketing communications (with consent)
  • Create marketing audiences and improve advertising relevance (with consent)

6. Legal Bases for Processing

We process your personal data on the following legal bases:

  • Contract performance – to manage your reservation and stay
  • Legal obligation – to comply with applicable laws
  • Legitimate interests – to operate and improve our services
  • Consent – for marketing communications and non-essential cookies

You may withdraw your consent at any time.

7. Provision of Personal Data

Providing certain data is necessary for making a reservation. Without it, we may not be able to confirm your booking or provide services.

8. Marketing Communications

We may send marketing communications where you have opted in — for example, via email or messaging services.

Emails may include engagement tracking (such as opens and clicks) to improve content and relevance.

You may unsubscribe at any time or object to direct marketing at any point.

9. Cookies

We use cookies and similar technologies on our website. See our Cookie Policy for full details.

10. Sharing Your Data

We may share your personal data with the following categories of recipients where necessary:

  • Booking and channel management service providers
  • Property management service providers
  • Payment processing providers
  • Website and IT service providers
  • CRM and email marketing service providers
  • Messaging and communication service providers
  • Advertising platforms (where consent is given)
  • Competent authorities where required by law

We do not sell your personal data to third parties.

11. International Data Transfers

Some of our third-party service providers may process personal data outside the European Economic Area (EEA).

Where this occurs, appropriate safeguards are implemented in accordance with GDPR, including Standard Contractual Clauses (SCCs) or adequacy decisions.

12. Data Security

We implement appropriate security measures including access controls, encryption, and secure storage to protect your personal data.

Payment data is processed securely via third-party providers and is not stored directly by the Hotel.

Data breaches are handled in accordance with legal requirements.

13. Data Retention

We retain personal data only for as long as necessary, based on legal obligations and operational requirements.

14. Children's Data

Children's data may be processed as part of family bookings, provided by a parent or legal guardian.

15. Automated Decision-Making

We do not carry out automated decision-making with legal or significant effects on individuals.

16. Your Rights

Under GDPR, you have the following rights:

  • Right of access to your personal data
  • Right to correction of inaccurate data
  • Right to deletion ("right to be forgotten")
  • Right to restrict processing
  • Right to object to processing
  • Right to data portability
  • Right to withdraw consent at any time

To exercise any of these rights, please contact us at info@hotel-ampelia.gr.

17. Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA): www.dpa.gr.

18. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page with a revised "Last updated" date.