Privacy & cookies
Your data, with the same care.
Aestas Hospitality collects only what it needs to reply to your request. The website uses no analytics or advertising cookies.
Data controller
TO CONFIRM WITH CLIENT
The controller of your data is Dimitra Kakara (trading as Aestas Hospitality), based in Athens, Greece.
- Address: [street, number, postcode], Athens
- VAT no.: [VAT] · Tax office: [office]
- Contact email: [email]
What is collected
When you complete the contact form or write to Aestas Hospitality, it collects:
- Contact details: name, email, phone and your preferred way to be contacted.
- Property details: operating status, type, location, number of units, listing link and anything you write in your message.
- Technical data to protect the form from abuse: a one-way hash of your IP address and your browser type.
It does not ask for, and does not need, any special categories of data.
Why, and on what legal basis
- For Aestas Hospitality to reply to your request and prepare a possible partnership (steps prior to entering a contract) — Art. 6(1)(b) GDPR.
- To contact you in the way you chose, based on your consent — Art. 6(1)(a) GDPR. You can withdraw it at any time.
- To keep the website secure and free of spam, based on its legitimate interest — Art. 6(1)(f) GDPR.
Aestas Hospitality does not use your data for advertising, does not sell it and makes no automated decisions about you.
How long it is kept
TO CONFIRM WITH CLIENT
If no partnership follows, Aestas Hospitality deletes the request [X] months after the last contact. If one does, the request is kept for the duration of the partnership and as long as tax and other laws require.
Who processes data on its behalf
Aestas Hospitality uses a small number of providers, under data-processing agreements in line with Art. 28 GDPR:
- Cloudflare, Inc. — website hosting, database, file storage and delivery of notification emails. The database and files are stored on infrastructure within the European Union.
- Mux, Inc. — encoding of the site's videos. The videos are served from its own storage; Mux viewing analytics and cookies are disabled.
- TikTok — when you press play on a TikTok clip, TikTok's player loads and may set its own cookies. Nothing connects to TikTok before you press play.
Where a provider may transfer data outside the EEA, the transfer relies on the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework.
Your rights
You have the right of access, rectification, erasure, restriction of processing, portability and objection, and the right to withdraw consent without affecting the lawfulness of earlier processing.
To exercise any of these rights, write to [email]. Aestas Hospitality replies within one month.
You also have the right to lodge a complaint with the Hellenic Data Protection Authority (1-3 Kifisias Ave., 115 23 Athens, www.dpa.gr).
Security
Communication with the website is encrypted (HTTPS). Only the administrator can access requests, with a password, and failed sign-in attempts are logged.
Changes to this notice
If the way data is processed changes, Aestas Hospitality will update this page and the date at the top.