PRIVACY POLICY

THERRA Suites & Sunset Terrace

Operated by ELLENIDA E.E.

Version: 1.0

Effective Date: 22 July 2026

Last Updated: 22 July 2026

1. Introduction

At THERRA Suites & Sunset Terrace, privacy is part of hospitality.

We believe that welcoming our guests also means respecting their personal information with the same care, discretion and transparency that we dedicate to every stay. This Privacy Policy explains how we collect, use and protect your personal data whenever you interact with us or visit our Website.

This Privacy Policy explains how ELLENIDA E.E. (“we”, “our”, “us”), the company operating THERRA Suites & Sunset Terrace, collects, uses, stores, shares and protects your personal information whenever you:

• visit our website;
• submit an availability request;
• communicate with us;
• make a reservation;
• complete an online payment;
• stay at THERRA Suites & Sunset Terrace.

This Privacy Policy has been prepared in accordance with:

• Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR);
• Greek Law 4624/2019;
• applicable Greek legislation governing accommodation providers;
• other applicable European data protection legislation.

2. Data Controller

The Data Controller responsible for processing your personal data is:

ELLENIDA E.E.

Commercial Name:

THERRA Suites & Sunset Terrace

Registered Office:

Oia, 0 – 84702 Oia Santorini Greece

G.E.MI.:

189179938000

VAT Number (A.F.M.):

803090520

Email:

ellenidaee@gmail.com

Telephone:

+30 697 417 7561

3. Personal Data We Collect

Depending on your interaction with our Website and services, we may collect the following categories of personal information.

3.1 Identification Data

• Full name
• Nationality (where required for legal obligations)
• Identity document information (only where required by Greek law upon check-in)

3.2 Contact Information

• Email address
• Telephone number
• Country of residence

3.3 Reservation Information

• Arrival and departure dates
• Number of guests
• Accommodation selected
• Special requests
• Dietary preferences voluntarily provided
• Transportation requests
• Event-related requests (where applicable)

3.4 Payment Information

Payments may be completed through:

• Viva.com
• Bank Transfer

THERRA Suites & Sunset Terrace never stores complete payment card details.

Payment card information is processed exclusively by certified Payment Service Providers (PSPs).

3.5 Technical Information

When you browse our Website we may automatically collect:

• IP address
• Browser type
• Device information
• Operating system
• Screen resolution
• Language preferences
• Referring website
• Date and time of access
• Cookie identifiers

To help protect our Website against unsolicited submissions, Contact Form 7 may use technical anti-spam mechanisms, including honeypot fields. These mechanisms operate without transmitting personal data to third-party anti-spam providers. 

3.6 Communications

We may retain communications exchanged through:

• email;
• telephone;
• availability requests;
• reservation correspondence.

4. How We Collect Your Data

We collect personal information only when necessary.

Data may be collected when you:

• browse our Website;
• submit an availability request;
• contact us by email;
• contact us by telephone;
• make a reservation;
• complete a payment;
• stay at THERRA Suites & Sunset Terrace.

We do not require users to create an account.

5. Purpose of Processing

We process personal data exclusively for legitimate purposes related to the operation of our accommodation business.

These include:

• responding to enquiries;
• checking availability;
• preparing quotations;
• confirming reservations;
• communicating before arrival;
• arranging accommodation services;
• providing guest assistance;
• processing payments;
• complying with accounting and tax obligations;
• complying with hospitality regulations;
• ensuring property security;
• preventing fraud;
• improving our services.

We do not sell, rent or commercially exploit personal data.

6. Legal Basis for Processing

Personal data are processed under one or more of the following legal bases established by Article 6 GDPR:

• performance of a contract;
• compliance with legal obligations;
• legitimate interests;
• consent, where required.

7. GDPR Processing Principles

ELLENIDA E.E. processes personal data according to the principles established by Article 5 GDPR:

• lawfulness, fairness and transparency;
• purpose limitation;
• data minimisation;
• accuracy;
• storage limitation;
• integrity and confidentiality;
• accountability.

8. Sharing of Personal Data

Your personal data may be shared only where necessary with:

• payment service providers;
• accountants;
• tax consultants;
• IT service providers;
• website hosting providers;
• legal advisors;
• public authorities where legally required.

All third parties are required to maintain appropriate confidentiality and security standards.

9. International Data Transfers

Personal data are generally processed within the European Economic Area (EEA).

Should an international transfer become necessary, we will ensure that appropriate safeguards under Chapter V GDPR are implemented.

10. Data Retention

Personal data are retained only for as long as necessary.

Generally:

Availability requests

Up to 12 months, unless a reservation follows.

Reservation records

For the period required by applicable Greek tax, accounting and hospitality legislation.

Communications

Only for the period reasonably necessary to manage the guest relationship.

Payment records

According to applicable accounting and financial legislation.

When retention is no longer necessary, personal data are securely deleted or anonymised.

11. Security Measures

Our Website is protected through a combination of technical and organisational measures, including:

• SSL/TLS encrypted connections;
• secure European hosting infrastructure;
• server-level backups;
• restricted administrative access;
• malware monitoring;
• firewall protection;
• software updates;
• anti-spam protection for contact forms.

Although no online service can guarantee absolute security, we continuously monitor and improve our systems.

12. Payment Security

Online payments are processed exclusively through Viva.com, an authorised European Payment Service Provider, or via bank transfer.

THERRA Suites & Sunset Terrace does not collect or store complete payment card details.

Card payments are processed using encrypted communication channels and security procedures compliant with the Payment Card Industry Data Security Standard (PCI DSS).

13. Cookies

Our Website uses cookies and similar technologies.

These may include:

• essential cookies;
• analytical cookies;
• Google Analytics;
• Google Maps.

Detailed information is available in our Cookie Policy.

14. Your Rights

Under the GDPR you have the right to:

• request access to your personal data;
• request rectification;
• request erasure (“right to be forgotten”);
• request restriction of processing;
• object to processing;
• receive your data in a portable format;
• withdraw consent where consent is the legal basis;
• lodge a complaint with the competent supervisory authority.

15. Supervisory Authority

If you believe that your personal data have been processed unlawfully, you may lodge a complaint with:

Hellenic Data Protection Authority (HDPA)

1-3 Kifissias Avenue

11523 Athens

Greece

Website:

https://www.dpa.gr

16. Children’s Privacy

Our Website and accommodation services are intended for adults.

Reservations may only be made by persons aged 18 years or older.

We do not knowingly collect personal information from children.

17. Third-Party Websites

Our Website may contain links to third-party websites.

We are not responsible for their privacy practices or content.

Users should review the privacy policies of those websites independently.

18. Automated Decision-Making

THERRA Suites & Sunset Terrace does not carry out automated decision-making or profiling within the meaning of Article 22 GDPR.

19. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy whenever necessary to reflect:

• legal changes;
• operational changes;
• technological developments;
• improvements to our services.

The latest version will always be published on this Website together with its version number and effective date.

20. Contact

If you have any questions regarding this Privacy Policy or wish to exercise any of your rights, please contact:

ELLENIDA E.E.

THERRA Suites & Sunset Terrace

Oia, 84702

Santorini

Greece

info@therrasuites.com

+30 697 417 7561