Privacy Policy – Acroterra Stone House
Effective date: 19 October 2026
1. Who is responsible for your data
The controller is:
Petros Kapouranis, Acroterra Stone House
2nd km Areopoli Provincial Road, 230 62 Areopoli, Mani, Laconia, Greece
Email: kapouranispetros@yahoo.com · WhatsApp & Viber
This policy explains how we handle personal data when you visit acroterrastonehouse.com, book with us or contact us, in line with the EU General Data Protection Regulation (GDPR).
2. What data we collect
- Booking details: name, email, phone number, address, number of guests, arrival and departure dates, and any notes you add.
- Payment details: payments by card are processed by Stripe and payments via PayPal by PayPal. We do not see or store your full card number. We receive only payment confirmations (e.g. amount, date, status).
- Messages: what you send us by email, WhatsApp or Viber.
- Guest registration details: ID card or passport details of all adult guests and, for Greek citizens, the Greek tax number (ΑΦΜ), which we must collect before arrival under Greek law.
- Website technical data: IP address, browser type, pages visited and cookies, collected by the platforms that run the website.
3. Why we use it and on what legal basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Handling your booking, payment, stay and communication with you | Performance of a contract (6(1)(b)) |
| Tax and accounting duties; guest registration (ID/passport details of adults, ΑΦΜ of Greek citizens) | Legal obligation (6(1)(c)) |
| Running and securing the website, answering enquiries, handling disputes | Legitimate interest (6(1)(f)) |
| Non-essential cookies (e.g. statistics) | Consent (6(1)(a)) |
We do not sell your data and we do not use it for automated decision-making.
4. Who receives your data
We share data only as far as necessary with:
- Smoobu GmbH(Germany) – property management system and booking engine of this website;
- Duda – website building and hosting platform;
- Stripe – card payments;
- PayPal – PayPal payments;
- Meta / WhatsApp – only if you choose to contact us via WhatsApp;
- Rakuten Viber – only if you choose to contact us via Viber;
- Greek public authorities(e.g. tax authorities) where the law requires it.
Bookings made on Airbnb, Booking.com or Vrbo are also covered by those platforms' own privacy policies.
5. Transfers outside the EU/EEA
Some of these providers (such as Stripe, PayPal, Duda, Meta and Rakuten Viber) may process data outside the European Economic Area, for example in the United States. In such cases, transfers rely on safeguards recognised by the GDPR, such as the European Commission's Standard Contractual Clauses or an adequacy decision.
6. Cookies
The website uses only the cookies that are essential for the site and the booking system to work. Other cookies (e.g. for statistics) are used only if you consent to them, and you can withdraw your consent at any time through your browser settings.
7. How long we keep your data
- Booking, payment and guest registration data: kept for as long as required by applicable law.
- All other data (e.g. messages): deleted once no longer needed for the booking or for any possible claims.
- Website technical data: according to the hosting platform's settings.
8. Your rights
You have the right to:
- access your data;
- have incorrect data corrected;
- have your data erased;
- restrict processing;
- receive your data in a portable format;
- object to processing based on legitimate interest;
- withdraw your consent at any time, without affecting earlier processing.
To use any of these rights, email kapouranispetros@yahoo.com. We will reply within one month.
You also have the right to complain to the Hellenic Data Protection Authority(Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα), www.dpa.gr, or to the authority in your country of residence.
9. Security
We take reasonable steps to protect your data and use reputable service providers. No method of transmission over the internet is completely secure.
10. Changes
We may update this policy. The current version is always published on this page with its effective date.
