Privacy policy

Data controller

CASA PLAYA ΟΕ, VAT number 801773715, Vasilikos, 29100 Zakynthos, Greece. For data protection matters: bananacasaplaya@gmail.com, +30 26950 35160.

What we collect

What you enter in the booking form: first name, last name, email, phone and any comments you add.

The booking itself: product, date, time, number of people, amount and payment status.

We never collect or see card details. The number, expiry date and security code are entered only on the bank's page. From the payment we keep only the transaction reference codes and the card type.

Why we process it

To carry out your booking and to contact you about it. The legal basis is performance of a contract, Article 6(1)(b) of the Regulation.

To keep transactions secure and deal with fraud, on the basis of our legitimate interest.

To meet tax and accounting obligations where the law requires it.

We do not send you marketing messages and we do not sell your data to anyone.

Who else sees it

Euronet Merchant Services, in order to process the card payment.

The providers hosting the website, the database and the email service, acting solely on our behalf under a data processing agreement.

Our infrastructure is located within the European Union.

How long we keep it

Booking data is kept for as long as needed to carry out the booking and to document the transaction in case of a dispute. Data tied to tax obligations is kept for the period the law requires.

Cookies

We use only the cookies strictly necessary for booking to work: one for the language you chose and a temporary one that carries your booking reference to the payment page.

We use no tracking, analytics or advertising cookies.

Your rights

You have the right to access your data, and to have it corrected, erased, restricted, ported, or to object to its processing. Write to the contact address above.

If you believe your data is being processed unlawfully, you may complain to the Hellenic Data Protection Authority, www.dpa.gr.