Privacy policy

Last updated: 20.10.2026

1. Controller

Cyberspace360 Properties ΜΟΝΟΠΡΟΣΩΠΗ Α.Ε. (Cyberspace360 Properties Single Member S.A.)
Iroon Polytechneiou 9, 72100 Agios Nikolaos, Crete, Greece
E-mail: booking@visitagios.com

This policy applies to the website visitagios.com.

2. Hosting and server log files

The website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. IONOS processes data on our behalf (Art. 28 GDPR).

When you visit the website, technical data is recorded in server log files: IP address, date and time, page requested, amount of data transferred, referrer URL, browser and operating system. This is needed to run the website securely and reliably (legal basis: Art. 6(1)(f) GDPR). The log files are kept only as long as necessary for this purpose and are not combined with other data.

The connection to the website is encrypted (SSL/TLS).

3. Fonts

The fonts are stored on our own server. No connection to Google or other font providers is made when you visit the website.

4. Request form and e-mail

If you contact us via the form or by e-mail, we process your details (name, e-mail address, travel dates, number of guests, message) only to answer your request and, if applicable, to send you an offer. The legal basis is Art. 6(1)(b) GDPR (steps prior to a contract) and your consent via the checkbox in the form (Art. 6(1)(a) GDPR), which you can withdraw at any time.

The form (WordPress plugin Contact Form 7) sends your details by e-mail to booking@visitagios.com. Requests are not stored in the website database. We delete your data when it is no longer needed to handle your request. If a booking is made, we keep the data for as long as statutory retention periods (e.g. tax law) require.

5. Payment

No payments are processed on the website itself. If you pay by card after booking, payment is handled by Stripe (Stripe Payments Europe Ltd., Dublin, Ireland). Stripe’s privacy policy also applies.

6. Cookies, analytics and tracking

We do not set cookies for visitors to the website. WordPress sets cookies only when administrators log in to the admin area. We do not use analytics or tracking tools and no marketing cookies. For this reason there is no cookie banner.

7. Instagram and Facebook

Our links to Instagram and Facebook are plain links. No content or plugins from these services are embedded. Data is only transferred when you click a link; Meta’s privacy policy then applies.

8. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR), and the right to withdraw consent at any time with effect for the future. To exercise these rights, write to booking@visitagios.com.

You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα), Kifisias 1–3, 11523 Athens, www.dpa.gr.