Privacy Policy
Last updated: 21 July 2026
Syrianos Hotel respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact us, make an enquiry or book accommodation with us.
1. Data Controller
The controller responsible for processing your personal data is:
Syrianos Hotel
Agios Georgios, Naxos Chora
843 00 Naxos, Greece
Email: info@hotelsyrianos.gr
The hotel is located in the Agios Georgios area of Naxos Chora.
2. Personal Data We May Collect
Depending on how you interact with us, we may collect:
- Your full name
- Email address
- Telephone number
- Residential or billing address
- Arrival and departure dates
- Number and age of guests
- Room preferences and special requests
- Booking and payment information
- Identification details required by applicable hospitality or public-authority regulations
- Information contained in messages, emails or contact forms
- Technical information such as IP address, browser type, device information and website activity
- Cookie preferences and consent choices
When a reservation includes children, we may process limited information such as their age when necessary for room occupancy, pricing or legal requirements. This information must be provided by a parent, guardian or responsible adult.
We do not intentionally request sensitive personal data unless it is necessary to respond to a specific request, such as accessibility, allergy or health-related accommodation requirements.
3. How We Collect Your Data
We may collect personal information:
- When you submit a contact or booking form
- When you contact us by telephone or email
- When you make a reservation directly with the hotel
- When you book through an external booking platform
- During check-in or your stay
- Through cookies, server logs and similar website technologies
- From travel agents, tour operators or booking partners acting on your instructions
4. Why We Process Your Personal Data
We may process your data for the following purposes:
Managing enquiries and reservations
We use your information to respond to questions, check availability, confirm reservations, manage changes or cancellations and provide accommodation services.
The legal basis is the performance of a contract or taking steps before entering into a contract.
Providing hotel services
We may use your information to organise check-in, assign rooms, respond to requests and provide services during your stay.
The legal basis is the performance of our accommodation agreement with you.
Payments, invoices and accounting
We process payment and billing information to collect payments, issue receipts or invoices and maintain accounting records.
The legal basis is the performance of a contract and compliance with legal obligations.
Compliance with legal requirements
We may process or disclose information when required by tax, accounting, police, tourism, immigration or other applicable legislation and public authorities.
The legal basis is compliance with a legal obligation.
Hotel administration and security
We may process information to protect our guests, employees, property, website and business, prevent fraud and handle disputes or complaints.
The legal basis is our legitimate interest in operating and protecting the hotel, provided that this interest does not override your rights.
Website improvement and analytics
Where you have provided consent, we may use analytics technologies to understand how visitors use the website and improve its performance and content.
The legal basis is your consent.
Marketing communications
We may send promotional emails only where you have consented or where otherwise permitted by applicable law. You may withdraw your consent or unsubscribe at any time.
5. Booking and Payment Services
Reservations may be handled directly by Syrianos Hotel or through an external booking engine, travel agency or accommodation platform.
When you use an external booking platform, that provider may process your personal data under its own privacy policy. We recommend reviewing the privacy terms of the platform before completing your reservation.
Online payment details may be processed directly by banks, payment providers or booking platforms. Syrianos Hotel does not necessarily receive or store your complete payment-card details.
6. Cookies and Similar Technologies
Our website may use cookies and similar technologies.
Necessary cookies
Necessary cookies support essential website functions, security, booking functions and the storage of your cookie preferences. These cookies may operate without consent where they are strictly necessary for a service requested by the visitor.
Optional cookies
Analytics, advertising, embedded media and other non-essential cookies will only be activated after you provide consent through the cookie banner.
You can accept, reject or change your cookie preferences at any time through the website’s cookie settings. You may also delete or block cookies through your browser settings.
Under Greek guidance, strictly necessary cookies do not require consent, while optional cookies and trackers should remain inactive until the visitor gives consent.
7. Google Maps and Embedded Content
The website may include Google Maps or other content provided by third parties.
These services may receive technical information such as your IP address, device information and interaction with the embedded content. Optional third-party content should only load after the required consent has been provided, where applicable.
The third-party provider processes information according to its own privacy policy and terms.
8. Who May Receive Your Data
We may share personal data only where necessary with:
- Hotel employees and authorised representatives
- Website hosting and technical-support providers
- Booking-system and channel-management providers
- Payment processors, banks and accounting providers
- Travel agencies, booking platforms and tour operators
- Email, communication and website-security providers
- Professional advisers, including accountants and legal advisers
- Police, tax, tourism, judicial or other public authorities where legally required
These recipients may act as independent controllers or as processors acting on our instructions.
We do not sell or rent your personal data.
9. International Data Transfers
Some technical, analytics, booking or communication providers may process information outside the European Economic Area.
Where such transfers occur, we will rely on a lawful transfer mechanism, such as:
- An adequacy decision issued by the European Commission
- Standard Contractual Clauses
- Other safeguards permitted under applicable data-protection legislation
10. How Long We Keep Your Data
We retain personal data only for as long as necessary for the purpose for which it was collected.
Retention periods may depend on:
- The duration of your enquiry or reservation
- The completion of your stay
- Tax, accounting and legal record-keeping requirements
- The handling of complaints, disputes or legal claims
- The duration of your consent
- Security and fraud-prevention requirements
When information is no longer required, it will be deleted, anonymised or securely destroyed.
11. Data Security
We use reasonable technical and organisational measures to protect personal information against:
- Unauthorised access
- Accidental loss
- Misuse
- Alteration
- Disclosure
- Destruction
Access to personal data is restricted to persons and service providers who require it for legitimate business or legal purposes.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
12. Your Data-Protection Rights
Subject to the conditions and limitations of applicable law, you may have the right to:
- Request access to your personal data
- Request correction of inaccurate or incomplete information
- Request deletion of your personal data
- Request restriction of processing
- Object to processing based on legitimate interests
- Receive certain information in a portable format
- Withdraw consent at any time
- Object to direct marketing
- Lodge a complaint with a supervisory authority
Withdrawing consent does not affect processing that was lawful before the withdrawal.
We may request information necessary to verify your identity before responding to a request. The GDPR recognises rights including access, rectification, erasure, restriction, objection and data portability.
To exercise your rights, contact:
13. Automated Decision-Making
Syrianos Hotel does not ordinarily make decisions based solely on automated processing that produce legal or similarly significant effects on guests.
Automated systems may be used for basic functions such as checking room availability, calculating prices or confirming reservations.
14. Third-Party Websites
Our website may contain links to booking platforms, social networks, map services or other external websites.
We are not responsible for the privacy practices, content or security of third-party websites. Visitors should review the privacy policy of each external service before submitting personal information.
15. Changes to This Privacy Policy
We may update this Privacy Policy when our website, services, service providers or legal obligations change.
The latest version will always be published on this website with the updated revision date.
16. Complaints
Please contact us first so that we can investigate and respond to your concern.
You also have the right to lodge a complaint with the:
Hellenic Data Protection Authority
Kifissias 1–3
115 23 Athens, Greece
Telephone: +30 210 6475600
Email: complaints@dpa.gr
The Authority recommends contacting the controller before submitting a complaint. Complaints can then be submitted through its official portal or by email.
17. Contact Us
For questions regarding this Privacy Policy or the processing of your personal information, contact:
Syrianos Hotel
Agios Georgios, Naxos Chora
843 00 Naxos, Greece
Email: info@hotelsyrianos.gr