Privacy policy

This privacy policy explains how Revello Villas (“we”, “us”) collects and processes personal data when you use revellovillas.gr or make a booking enquiry. We process data in line with the EU General Data Protection Regulation (GDPR) and Greek Law 4624/2019.

Who we are

Data controller: [Legal entity name — to be completed], [registered address], Lefkada, Greece. Tax number (ΑΦΜ): [to be completed]. GEMI registry number: [to be completed]. For any privacy request, contact us through the form on our contact page.

What we collect

• Details you submit in an enquiry: name, email, mobile number, chosen villa, dates, number of guests, and your message.
• Technical data: IP address and basic device information, used for security and spam prevention.
• Cookieless, aggregated usage statistics via Vercel Analytics (no cookies, no cross-site tracking).

Why we use it and our lawful basis

• To respond to your enquiry and manage your booking — performance of a contract and pre-contract steps (Art. 6(1)(b)).
• To prevent spam and secure the website — our legitimate interests (Art. 6(1)(f)).
• To meet legal and accounting obligations — legal obligation (Art. 6(1)(c)).

Who we share it with (processors)

We use trusted service providers who process data on our behalf:

• Smoobu — booking and availability management.
• Resend — delivery of enquiry notification emails.
• Vercel — website hosting and cookieless analytics.
• Google Maps — displaying villa locations.

International transfers

Some providers process data outside the European Economic Area (for example in the United States). Where this happens, transfers are covered by appropriate safeguards such as the EU Standard Contractual Clauses.

How long we keep it

Enquiry data is kept only as long as needed to handle your request and any resulting booking, and to meet legal retention requirements, after which it is deleted or anonymised.

Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, or object to the processing of your data, and the right to data portability. To exercise any of these, contact us via the contact page. You may also lodge a complaint with the Hellenic Data Protection Authority (HDPA, dpa.gr).

Cookies

This website uses only essential functionality and cookieless analytics, so no consent banner is required. If we add any tracking or advertising cookies in future, we will request your prior, opt-in consent.