Privacy Policy

1. Who we are

This website is owned and operated by Topakas House, a traditional mansion offering rooms to let in Kampos, Chios.

• Address: Dimarchou Kalvokoresi 24, Chios 821 00, Greece
• Phone: +30 22710 29979
• Email: topakas.forms@gmail.com

We are the data controller for your personal data, in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and Greek Law 4624/2019.

2. What data we collect

Our website is static and does not include a booking system. The only point where we collect personal data is the contact (“Enquire”) form, through which you send us:

• Full name
• Email address
• Subject
• Message content
• Preferred time of year to visit (optional field)

We do not collect any other data through the website. We do not use analytics tools (e.g. Google Analytics), advertising pixels, or any form of visitor tracking.

3. How we use your data

We use the information you send us solely to:

• respond to your enquiry or request,
• communicate with you about a possible stay at Topakas House.

We do not use your data for marketing purposes without your explicit consent, and we do not share it with third parties for advertising purposes.

4. Legal basis for processing

• Article 6(1)(b) GDPR — where your message relates to steps taken prior to entering into a booking/accommodation contract.
• Article 6(1)(f) GDPR (legitimate interest) — for the general handling of, and response to, enquiries.

5. Where your data is stored

Messages from the contact form are sent to, and remain stored in, a Gmail account (topakas.forms@gmail.com), a service provided by Google LLC. Google may process data on servers located outside the European Economic Area, under the safeguards of the EU-U.S. Data Privacy Framework or Standard Contractual Clauses. We do not currently use any other third-party data processors.

The website is hosted on the Lovable platform, which may process technical server data (e.g. IP address, browsing information) as part of providing hosting services.

6. Retention period

We retain your contact details for as long as necessary to respond to your enquiry. If a booking results from your enquiry, your details are retained for as long as necessary to manage your stay and to meet any tax/accounting obligations. General enquiries that do not lead to a booking are deleted within a reasonable period (up to 24 months), unless you ask us to delete them sooner.

7. Your rights

You have the right to:

• access your data,
• rectify inaccurate data,
• request erasure (“right to be forgotten”),
• restrict processing,
• object to processing,
• data portability.

To exercise any of these rights, contact us at topakas.forms@gmail.com. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr) if you believe the processing of your data infringes the GDPR.

8. Data security

We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, leakage, or misuse.

9. Children

This website is not directed at children under 16, and we do not knowingly collect data from minors without parental/guardian consent.

10. Changes to this policy

We may update this privacy policy from time to time, particularly if we add new tools (e.g. analytics) to the website. The date of the last update is shown at the top of this document.