Privacy Policy

Hotel Aliki Symi — GDPR Compliant

Last updated: November, 2025

At Hotel Aliki in Symi, we are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and safeguard your information when you visit our website or make a reservation.

By using our website, you agree to the practices described in this policy.

1. Data Controller

Hotel Aliki
Akti Gennimata, Symi, Dodecanese, 85600, Greece
Phone: +30 22460 71665
Email: [email protected]

We are responsible for determining the purpose and means of processing your personal data.

2. Information We Collect

We collect only the information necessary to provide our services.

2.1. Information you provide directly

When making a booking request, filling out our contact form, or communicating with us, you may provide:

  • Full name
  • Email address
  • Phone number
  • Address (optional)
  • Check-in and check-out dates
  • Number of guests
  • Special requests or preferences
  • Payment details (for offline payment confirmation only)

2.2. Automatically collected data

When you browse our website, we may collect:

  • IP address
  • Browser type
  • Device type
  • Pages visited
  • Cookies (see our Cookies Policy)

This information helps us improve website performance and security.

3. How We Use Your Information

We use your personal data for:

  • Processing booking requests and confirming reservations
  • Responding to inquiries or customer support
  • Communicating important updates about your stay
  • Complying with legal obligations
  • Improving our website’s functionality and performance
  • Security and fraud prevention

We do not share or sell your personal data for advertising purposes.

4. Legal Basis for Processing

We process your personal data under the following lawful bases:

  • Contract performance (to manage your reservation)
  • Legitimate interest (security, customer support)
  • Consent (when you submit forms or accept cookies)
  • Legal obligation (tax and accounting records)

5. How We Store and Protect Your Data

We take appropriate technical and organizational measures to secure your information, including:

  • Encrypted website connection (HTTPS)
  • Secure servers
  • Access limited to authorized hotel staff
  • Regular backups
  • GDPR-compliant data handling practices

Payment card details submitted for offline reservation purposes are not stored on our website and are processed securely.

6. How Long We Keep Your Data

We retain personal data only for as long as necessary:

  • Booking records: up to 10 years (legal requirement)
  • Contact form messages: up to 2 years
  • Analytics & cookies data: according to cookie duration
  • Email correspondence: up to 3 years

You may request deletion sooner, unless retention is required by law.

7. Sharing Your Information

We may share your data only with:

  • Hospitality management staff of Aliki Hotel
  • Payment or banking partners (for offline payments)
  • IT, hosting, or website support providers
  • Legal or government authorities when required by law

We never sell or rent your data to third parties.

8. Your Rights Under GDPR

You have the right to:

  • Access your personal data
  • Rectify inaccurate information
  • Request deletion (“right to be forgotten”)
  • Restrict processing
  • Object to processing
  • Data portability
  • Withdraw consent at any time

To exercise your rights, contact: [email protected]

9. Children’s Privacy

Our website and booking system are not intended for children under 16.
We do not knowingly collect data from minors without parental consent.

10. External Links

Our website may contain links to external sites.
We are not responsible for their privacy practices or content.

11. Policy Updates

We may update this Privacy Policy occasionally.
Changes will be posted on this page with an updated revision date.

12. Contact Us

For questions about this policy or your data rights, contact:

Aliki Hotel Symi
Email: [email protected]
Phone: +30 22460 71665