Privacy policy
Last updated: 27 October 2026
We respect your privacy. This website presents Theodoras House. To book, you can call us, message us on WhatsApp or Viber, or book through Booking.com and Airbnb. The website has no forms, user accounts or payments, so it collects very little data. Below we explain what, why, and your rights under the EU General Data Protection Regulation (GDPR) and Greek law 4624/2019.
1. Who is responsible
Data controller: Theodora Stagia, Georgiou Seferi 5, 57004 Nea Michaniona, Thessaloniki, Greece.
Email: dosta255@gmail.com · Phone: +30 694 629 4594 (Theodora) · +30 694 808 4350 (Stelios)
2. What data we process
- Visitor statistics (only with your consent). If you click “Accept”, we use Google Analytics 4 to see anonymous information: which pages you view, your country and device, and whether you clicked the contact buttons (call, WhatsApp, Viber) or the links to Booking.com and Airbnb. We cannot see who you are or your phone number. Legal basis: your consent (Art. 6(1)(a) GDPR). If you click “Reject”, Google Analytics does not load at all.
- Google Maps (only if you open it). The map loads only when you click “Interactive map”. The map picture you see before that (© OpenStreetMap contributors) is stored on our own site and sends nothing to third parties. Once you click the button, Google receives your IP address and may set its own cookies, under Google's privacy policy.
- Technical hosting data. Our hosting provider (Cloudflare) temporarily logs technical data such as your IP address to keep the site secure and working. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
- Contact by phone, WhatsApp, Viber or email. If you call or message us, we see your number or email and what you send us, and we use it only to reply. Legal basis: your request before a booking (Art. 6(1)(b) GDPR). The WhatsApp and Viber buttons simply open that app on your device. Messages there are handled by those companies under their own policies: WhatsApp · Viber.
Fonts and all other files of this website are served from our own hosting, not from third parties.
3. Bookings
Direct booking (phone, WhatsApp, Viber, email). To book your stay we keep your name, contact details, dates, number of guests and the payment details you give us (for example the sender's name on a bank transfer). We use them to arrange your stay (Art. 6(1)(b) GDPR) and for our legal obligations, such as registering the stay with the Greek tax authority (AADE) and tax law (Art. 6(1)(c) GDPR). We do not share them with anyone else unless the law requires it.
Booking through Booking.com or Airbnb. The data you give there is processed by those companies under their own policies: Booking.com · Airbnb. We only receive from them what is needed for your stay.
4. Cookies
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| consent-v1, lang | Theodoras House (local storage) | Remembers your cookie choice and language | Until you delete them |
| _ga, _ga_* | Google Analytics | Visitor statistics (only with consent) | Up to 2 years |
You can change your choice at any time in .
5. Transfers outside the EU
Google and Cloudflare may also process data in the USA. Both participate in the EU-U.S. Data Privacy Framework, which provides adequate protection.
6. How long we keep data
Google Analytics statistics are kept for up to 14 months. Messages that do not lead to a booking are deleted once they are no longer needed. Booking details are kept for as long as Greek tax law requires and then deleted.
7. Your rights
You have the right of access, rectification, erasure, restriction, portability and objection, and you can withdraw your consent at any time. For any request, email us at dosta255@gmail.com. You can also lodge a complaint with the Hellenic Data Protection Authority.
8. Changes
If anything in this policy changes, we will update this page and the date at the top.