Privacylast updated October 2026
Your data, briefly.
What we collect, why, and what you can ask of us.
Who we are
This website is run by AVYSSOS MANAGEMENT Ι.Κ.Ε., Sougia, Chania, Crete, Greece, trading as AVYSSOS. We decide how your personal data is used (we are the “controller”). Contact us at info@avyssos.gr. Full company details: Legal notice.
What we collect and why
- Register your interest. Your name, email address and, if you give them, your country, preferred dates, number of guests, what interests you and your message. We use them only to tell you about the opening and the start of reservations, and to send you now and then a short letter from the village. Legal basis: your consent (Art. 6(1)(a) GDPR).
- When you write to us. Your contact details and what you tell us, so that we can answer. Legal basis: steps before a possible booking and our legitimate interest in replying (Art. 6(1)(b) and (f) GDPR).
- Cookies. See our Cookie policy.
We do not sell your data, and we do not use it for anything else.
You do not have to give us your details. Without them we cannot register your interest or answer you.
Who processes it for us
Our website runs on Odoo, operated by Odoo S.A., Belgium, which processes the data on our behalf under a data processing agreement. Your data is stored in the European Union. Emails to info@avyssos.gr are handled by our email provider. Nobody else receives it, unless the law requires it.
How long we keep it
Until you unsubscribe or ask us to delete it, and at the latest 12 months after AVYSSOS opens. Messages you send us are kept for 2 years, unless they lead to a booking.
Your rights
You can ask us at any time to see, correct or delete your data, to restrict or object to its use, or to receive it in a portable form. You can withdraw your consent whenever you like, by replying to any of our emails or by writing to info@avyssos.gr.
Complaints
If you think we have not handled your data properly, you can complain to the Hellenic Data Protection Authority, Kifisias 1–3, 115 23 Athens, www.dpa.gr.
This policy follows the General Data Protection Regulation (EU) 2016/679 and Greek Law 4624/2019.