Privacy Policy
1. Introduction
Daleki Otok (“we”, “us”, or “our”), operated by Rhiannon Rebecca Hogarth, is committed to protecting the privacy of our guests and website visitors. This policy explains how we collect, use, and protect your personal data in compliance with the EU General Data Protection Regulation (GDPR) and Greek Law.
2. Your Role & Our Role
Data Controller: The individual Property Owner of the house you book is the primary Data Controller.
Data Processor: Daleki Otok acts as a Data Processor on behalf of the Owner, managing your information to facilitate your stay and fulfill legal reporting requirements.
3. Data We Collect
We collect only the information necessary to manage your booking and comply with Greek law:
Identity Data: Full name, Passport or ID number, and Nationality (Mandatory for AADE reporting).
Contact Data: Email address and phone number.
Inquiry Data: Information submitted via SureForms on our website (e.g., your message and contact details).
Experience Data: Your email address and stay preferences collected via our Touch Stay digital guidebook.
Financial Data: We do not store credit card details. Payments are processed via Hospitable/Stripe/Bunq, which are independent GDPR-compliant controllers.
Technical Data: IP address and browser type (collected via cookies for website functionality).
4. How We Use Your Data
Inquiries: We use data submitted via SureForms to respond to your booking requests and questions.
Guest Experience: We use your contact details to provide access to our Touch Stay digital guide and “Insider” recommendations.
Contractual Necessity: To manage your booking, send check-in instructions, and provide guest support.
Legal Obligation: To report your stay to the Greek Independent Authority for Public Revenue (AADE) as required by the Short-Term Rental Registry laws.
Legitimate Interest: To improve our services and protect against fraudulent bookings.
5. Data Sharing & Sub-Processors
We share your data only with specific tools required to run our business:
The Property Owner: To finalize the rental agreement.
Greek Authorities: Specifically the AADE and the MIDA Registry for tax compliance.
Service Providers: Sub-processors such as Hospitable (For booking and calendar management), Touch Stay (To deliver your digital welcome guide), SureForms (Form data is stored locally on our secure server and is not shared with third-party form hosts), and Stripe (Payment Processing), both of which adhere to EU-U.S. Data Privacy Framework standards.
6. Data Retention
Legal Records: We retain guest ID data for the period required by Greek tax law.
Communication: General inquiries that do not lead to a booking are deleted after 12 months.
7. Your Rights
Under GDPR, you have the right to access your data, request corrections, or request deletion (where it does not conflict with our legal tax-reporting duties).
8. Security
We implement industry-standard technical and organizational measures to secure your data, including encrypted communications (SSL) and secure access controls for our management software.
9. Contact Information
For any data-related inquiries, please contact:
Rhiannon Rebecca Hogarth
AFM: 181008000 | GEMI: 192983503000
Email: info@daleki-otok.com