Privacy Policy
Last updated: September 29, 2026
Who we are
This website is operated by Flemotomos Touristic Enterprises S.A., trading as Vanessa Hotel ("we", "us", "our"). We are the data controller for the personal information described in this policy.
- Address: 136 Kalamaki Road, Kalamaki, Zakynthos 29100, Greece
- Email: vanessahotel@gmail.com
- Telephone: +30 26950 26713
If you have any question about how we handle your information, email us at the address above.
What information we collect
When you book a room, we collect your name, email address, telephone number, postal address, country, arrival and departure dates, the names and number of guests staying with you, the ages of any children, and any special requests you make (for example a cot, a ground-floor room, or dietary preferences).
When you pay a deposit, we collect your card details through our online booking system. See "Payments and your card details" below.
When you check in, Greek law requires us to record guest details from your passport or identity card.
When you contact us by email, telephone or through the contact form, we keep your message and our reply.
When you visit this website, we collect anonymous statistics about your visit if you consent to analytics cookies — see "Cookies" below.
We do not ask for, and you should not send us, sensitive information such as health or medical details, except where it is directly relevant to your stay (for example an accessibility requirement). If you do send us something like that, we use it only to arrange your stay.
Why we use it, and our legal basis
| What we use it for |
Legal basis under GDPR |
| Taking and managing your reservation, and contacting you about your stay |
Performance of a contract with you |
| Taking the 30% deposit and the balance of your bill |
Performance of a contract with you |
| Recording guest details at check-in |
Legal obligation under Greek law |
| Keeping accounting and tax records |
Legal obligation |
| Answering your enquiries |
Our legitimate interest in responding to people who contact us |
| Keeping our website secure and working |
Our legitimate interest in running a safe website |
| Sending you offers and news by email |
Your consent — you can withdraw it at any time |
| Website analytics cookies |
Your consent |
We only send marketing emails to people who have ticked a box asking for them. Every such email has an unsubscribe link, and unsubscribing takes effect immediately. We never sell or rent your details to anyone.
Payments and your card details
Payment for your stay is made at the hotel. When you book, we take a card as a guarantee, and we charge a 30% deposit approximately two weeks before your arrival date.
Your card details are handled by our online booking system provider, [name of provider], and are held on their secure systems. We do not store your full card number on this website or on our own computers. The balance of your bill is paid at the hotel's reception on arrival or departure.
Who we share your information with
We share your information only where it is necessary, and only with:
- Our online booking system provider, Hotelogix, which processes reservations and card payments on our behalf.
- Our bank and card payment provider, to process the deposit and your payment at the hotel.
- Our web hosting provider, which stores the website and any messages sent through it.
- Google, if you consent to analytics cookies (see below).
- Our accountant and tax advisers, for invoicing and bookkeeping.
- Greek public authorities, where the law requires it — for example guest registration and tax reporting.
If you booked through Booking.com, Expedia or another travel website, that company collected your details first and passed them to us. Their own privacy policy covers what they do with your information, and we suggest you read it on their site.
Sending information outside Europe
We keep your information within the European Economic Area wherever possible. Google Analytics may transfer some data to the United States; Google does this under the European Commission's Standard Contractual Clauses and the EU–US Data Privacy Framework. If you do not consent to analytics cookies, no such transfer happens.
How long we keep it
- Reservation and guest records: as long as needed for your stay, then for the period Greek tax and hotel law requires.
- Accounting and invoice records: for the period required by Greek tax law.
- Email enquiries that do not lead to a booking: up to two years.
- Marketing consent records: until you unsubscribe, and then a short record that you did so.
- Website analytics: as set out in the Cookies section below.
Cookies
Cookies are small files stored by your browser. We use two kinds:
Essential cookies, which make the site work — for example remembering which language you are viewing. These cannot be switched off.
Analytics cookies (Google Analytics), which tell us how many people visit the site and which pages they read. This information is anonymous and we use it only to improve the website. These cookies are set only if you agree when the cookie banner appears.
You can accept or refuse non-essential cookies when you first visit, and change your mind at any time using the "Cookie settings" link in the footer. You can also delete cookies through your browser settings, though some parts of the site may then work less well.
Your rights
Under GDPR you have the right to:
- ask for a copy of the information we hold about you;
- have inaccurate information corrected;
- ask us to delete your information, where we are not legally required to keep it;
- ask us to restrict how we use it;
- object to us using it on the basis of our legitimate interests;
- receive your information in a portable format;
- withdraw your consent to marketing emails or analytics cookies at any time.
To exercise any of these, email us at vanessahotel@gmail.com. We will reply within one month.
If you are unhappy with our response, you can complain to the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα), whose contact details are at www.dpa.gr.
Children
This website is intended for adults making travel bookings. We do not knowingly collect information from children through the website. Details of children staying with you are collected from you as the person making the booking.
Changes to this policy
If we change this policy we will post the new version on this page and update the date at the top.
