Privacy policy
Last updated: 26 October 2026
We respect your privacy. This website presents Theodoras House and sends you to Booking.com and Airbnb to book. It has no forms, user accounts or payments, so it collects very little data. Below we explain what, why, and your rights under the EU General Data Protection Regulation (GDPR) and Greek law 4624/2019.
1. Who is responsible
Data controller: Theodora Stagia, Georgiou Seferi 5, 57004 Nea Michaniona, Thessaloniki, Greece.
Email: [email protected] · Phone: +30 694 629 4594
2. What data we process
- Visitor statistics (only with your consent). If you click “Accept”, we use Google Analytics 4 to see anonymous information: which pages you view, your country and device, and whether you clicked the booking buttons. Legal basis: your consent (Art. 6(1)(a) GDPR). If you click “Reject”, Google Analytics does not load at all.
- Google Maps (only if you open it). The map loads only when you click “Interactive map”. The map picture you see before that (© OpenStreetMap) is stored on our own site and sends nothing to third parties. Once you click the button, Google receives your IP address and may set its own cookies, under Google's privacy policy.
- Technical hosting data. Our hosting provider (Cloudflare) temporarily logs technical data such as your IP address to keep the site secure and working. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
- Contact. If you email or call us, we use your details only to reply.
Fonts and all other files of this website are served from our own hosting, not from third parties.
3. Bookings
Bookings and payments happen only on Booking.com and Airbnb. The data you give there is processed by those companies under their own policies: Booking.com · Airbnb. We only receive from them what is needed for your stay.
4. Cookies
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| consent-v1, lang | Theodoras House (local storage) | Remembers your cookie choice and language | Until you delete them |
| _ga, _ga_* | Google Analytics | Visitor statistics (only with consent) | Up to 2 years |
You can change your choice at any time in .
5. Transfers outside the EU
Google and Cloudflare may also process data in the USA. Both participate in the EU–U.S. Data Privacy Framework, which provides adequate protection.
6. How long we keep data
Google Analytics statistics are kept for up to 14 months. Contact messages are kept only as long as needed to handle your request.
7. Your rights
You have the right of access, rectification, erasure, restriction, portability and objection, and you can withdraw your consent at any time. For any request, email us at [email protected]. You can also lodge a complaint with the Greek Hellenic Data Protection Authority.
8. Changes
If anything in this policy changes, we will update this page and the date at the top.