The website kalymnosescape.com is operated by The Escape Property Management & Vacation Rentals™. This Privacy Policy explains how personal data may be collected, used, stored, and otherwise processed when you visit the website, contact the operator, use the website’s services, or make a reservation through the website.
The website is committed to processing personal data in accordance with applicable data protection law, including Regulation (EU) 2016/679 (GDPR) and applicable Greek legislation.
Personal Data We May Collect
While browsing or using kalymnosescape.com, you may be asked to provide certain personal data, including, where applicable:
- first name and last name
- telephone number
- email address
- billing or payment-related information
- reservation details
- communication content submitted through forms, emails, or other contact methods
- technical data such as IP address, browser type, device information, and website usage data
Depending on the service requested, additional information may be required where necessary for reservation management, customer communication, legal compliance, fraud prevention, or the proper operation of the website.
Purposes of Processing
Personal data may be processed only to the extent necessary for legitimate and clearly defined purposes, including:
- providing information requested by visitors
- responding to contact requests or inquiries
- managing accommodation reservations and related services
- communicating with guests and website users
- sending service-related updates or necessary notifications
- maintaining the secure and proper functioning of the website
- improving website content, performance, and user experience
- complying with legal, tax, accounting, and regulatory obligations
preventing fraud, abuse, unauthorized transactions, or unlawful activity
Where permitted by law, personal data may also be used to inform users about new services or relevant updates, provided that the applicable legal basis for such communication exists.
Legal Bases for Processing
Personal data is processed on one or more lawful bases, depending on the circumstances, including:
- where processing is necessary to take steps at your request before entering into a contract or to perform a contract
- where processing is necessary to comply with a legal obligation
- where processing is necessary for the legitimate interests pursued by the website operator, provided those interests are not overridden by your rights and freedoms
- where you have given consent, where consent is required by law
The lawful basis may differ depending on the type of data and the purpose for which it is processed.
Disclosure of Personal Data
Personal data is not sold or made public.
Personal data may be disclosed only where necessary and lawful, including in the following cases:
- to service providers, partners, or technical processors who support the operation of the website or the provision of services, strictly to the extent necessary for those purposes
- to payment service providers, booking-related service providers, hosting providers, IT support providers, analytics providers, or other processors acting on behalf of the operator
- where disclosure is required by law, court order, or request from a competent administrative, judicial, police, or regulatory authority
- where the data subject has expressly consented to such disclosure
- where disclosure is necessary for the establishment, exercise, or defense of legal claims
Under GDPR, a controller determines the purposes and means of processing, while processors act on the controller’s behalf under its instructions.
Data Retention
Personal data is retained only for as long as necessary for the purposes for which it was collected, including for the provision of services, reservation administration, legal compliance, accounting obligations, dispute handling, fraud prevention, and enforcement of legal rights.
Retention periods may vary depending on the category of data and the purpose of processing. When data is no longer necessary, it will be deleted, anonymized, or otherwise securely disposed of, unless continued retention is required or permitted by law.
Your Rights
Subject to applicable law and the conditions set by the GDPR, you may have the right to:
- request access to your personal data
- request correction of inaccurate or incomplete personal data
- request deletion of your personal data
- request restriction of processing
- object to certain processing activities
- request data portability where applicable
- withdraw consent at any time, where processing is based on consent
lodge a complaint with the competent supervisory authority
The GDPR requires controllers to facilitate the exercise of data subject rights. In Greece, complaints may be submitted to the Hellenic Data Protection Authority (HDPA).
How to Exercise Your Rights
You may exercise your rights by contacting the website operator through the contact details made available on the website.
Requests will be handled in accordance with applicable law. The website operator may ask for reasonable proof of identity before acting on a request, where necessary to protect personal data and prevent unauthorized disclosure or deletion.
IP Addresses and Technical Data
An IP address is assigned by the internet service provider through which your device accesses the internet. The website may collect and process IP addresses and related technical data for purposes such as:
- maintaining website and server security
- preventing abuse, unauthorized access, or malicious activity
- troubleshooting technical issues
- generating aggregated statistical information about website traffic and usage
Such information is used only to the extent necessary for technical, security, operational, or analytical purposes.
IP address information may be disclosed to competent authorities where required by law or lawful order.
Cookies
This website uses cookies and similar technologies to ensure proper website operation, improve user experience, measure performance, and, where applicable, analyze usage or support third-party features.
Some cookies are strictly necessary for the website to function and do not require consent. Other cookies, including analytics, functional, performance, or advertising cookies, may be used only with your consent where required by law.
You can manage your cookie preferences through the website’s cookie consent mechanism and, in many cases, through your browser settings.
What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They help websites function properly, improve security, remember preferences, measure performance, and, where permitted, better understand how visitors interact with the website.
How We Use Cookies
The website may use:
- Strictly necessary cookies, which are essential for core website functions and consent management
- Functional cookies, which help remember user preferences or enable enhanced features
- Analytics cookies, which help understand how visitors use the website and improve performance
- Performance cookies, which help evaluate technical efficiency and user experience
- Advertising or third-party cookies, where applicable, to provide relevant content or measure campaign effectiveness
The specific cookies used by the website may change over time depending on the services, plugins, tools, and integrations used on the website.
The table below provides further details regarding cookies used on the website:
Managing Cookie Preferences
You may change your cookie preferences at any time by clicking Change Cookie Preferences.
You may also block or delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality, availability, or performance of parts of the website.
Data Security
Reasonable technical and organizational measures are taken to protect personal data against unauthorized access, alteration, disclosure, loss, misuse, or destruction.
However, no method of internet transmission or electronic storage can be guaranteed to be completely secure, and therefore absolute security cannot be guaranteed.
Third-Party Services and Links
The website may contain links to third-party websites, tools, booking-related systems, payment services, maps, social media features, or embedded content. Where such third-party services are used, personal data may be processed under the privacy policies and terms of those third parties.
The website operator is not responsible for the privacy practices of third-party websites or services that are not under its control.
Changes to This Privacy Policy
This Privacy Policy may be updated from time to time in order to reflect legal, technical, or operational changes.
Any updated version becomes effective upon publication on the website, unless otherwise stated. Visitors are encouraged to review this Privacy Policy regularly.
Contact
For questions, clarifications, or requests regarding this Privacy Policy or the processing of personal data, you may contact the website operator using the contact details provided on kalymnosescape.com.
If you believe that your data protection rights have been violated, you also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA).
