1. Introduction
Nisea Hotel Samos respects your privacy and is committed to protecting your personal data in accordance with the General Data Protection Regulation (EU 2016/679 – GDPR) and applicable Greek law.

2. What data we collect
Depending on how you use the website, we may collect:

• Contact data (e.g., full name, email, phone number) when you complete a contact form.
• Content data (e.g., message/request) when you send us an enquiry.
• Technical data (e.g., IP address, device/browser type) via cookies and similar technologies, where permitted.
• Booking data, if you proceed with a booking via the online booking provider (e.g., WebHotelier). In this case, the provider may act as an independent controller and/or a processor, in accordance with its own terms and policies.

3. Purposes and legal bases of processing
We process data for:

• Responding to enquiries/communication (pre-contractual measures or legitimate interest).
• Managing bookings and providing hospitality services (performance of a contract).
• Compliance with legal obligations (e.g., tax/accounting).
• Website operation and security (legitimate interest).
• Analytics/marketing only where you have provided consent via cookies.

4. Data recipients
We may share data with:

• Providers of technical support/hosting and IT services, under appropriate safeguards.
• An online booking provider (e.g., WebHotelier) in the context of a booking.
• Public authorities where required by law.

5. Retention period
We retain data only for as long as required for the purpose for which it was collected and/or to meet legal obligations. Contact data is retained for a reasonable period in order to handle your request and maintain a communication record.

6. Your rights
You have the right to:

• access, rectification, erasure,
• restriction of processing or objection,
• data portability, where applicable,
• withdraw consent (where processing is based on consent),
• lodge a complaint with the Hellenic Data Protection Authority (HDPA).

7. Security
We take appropriate technical and organizational measures to protect your data.

8. Contact
To exercise your rights or for questions regarding this Privacy Policy, please contact us via the “Contact” page.