Privacy Policy

Effective Date: February 24, 2026

Santorini Holidays (“we”, “our”, “us”) respects your privacy and is committed to protecting the personal data you provide when using our website and services. This Privacy Policy explains how we collect, use, and protect your information in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and other applicable EU privacy laws.

1. Data Controller

The data controller responsible for your personal data is:

Santorini Holidays
Ep. odos Firon – Ormou Perissis
Perissa – Santorini 847 03, Greece
Phone: +30 22860 85421
Email: [email protected]

2. Personal Data We Collect

We may collect the following types of personal data:

  • Identification information: full name, email address, phone number
  • Booking information: service details, dates, number of persons, preferences
  • Payment information: collected securely by our service providers
  • Technical information: IP address, device type, browser, operating system
  • Usage data: pages visited, time spent on site, clicks, interactions
  • Marketing preferences and consent for newsletters or promotional communications

3. How We Use Your Personal Data

We process your personal data for the following purposes:

  • To provide, manage, and fulfill tourism services and bookings
  • To communicate with you about your bookings, inquiries, or service updates
  • To send newsletters, offers, and marketing communications (if consented)
  • To improve website performance, user experience, and service quality
  • To comply with legal obligations and regulatory requirements

4. Legal Basis for Processing

We process personal data based on the following legal grounds:

  • Consent: where you have given clear permission for processing
  • Contractual necessity: to provide the services you requested
  • Legitimate interests: for business operations, website optimization, and marketing
  • Legal obligations: to comply with applicable laws

5. Third-Party Service Providers

We use third-party providers to enhance our services. These include:

  • Google Ads, Google Analytics, Google Tag Manager
  • Hotjar for website behavior analysis
  • Meta Pixel for advertising and audience insights
  • Mailchimp for newsletter distribution

These providers may process data on our behalf under strict contracts ensuring GDPR compliance. We do not sell your personal data.

6. Cookies and Tracking

Our website uses cookies and similar technologies to improve user experience, analyze website performance, and provide personalized advertising. You can manage cookie preferences through your browser settings. By using our website, you consent to the use of these technologies.

7. Data Retention

We retain personal data only as long as necessary to provide services, meet legal obligations, resolve disputes, or enforce agreements. Retention periods vary depending on the type of data and processing purpose.

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Right to access your data
  • Right to rectification of inaccurate or incomplete data
  • Right to erasure (right to be forgotten)
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent at any time
  • Right to lodge a complaint with a supervisory authority

To exercise your rights, contact us at [email protected].

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, alteration, or disclosure.

10. International Data Transfers

Your data may be transferred to service providers outside the EU where necessary. We ensure such transfers comply with GDPR requirements through adequate safeguards.

11. Updates to This Privacy Policy

We may update this Privacy Policy periodically. The updated version will be published on our website with the revised effective date.