Privacy Policy

1. WHO WE ARE

Azure Mare Studios provides tourist accommodation in Agios Georgios Pagon, North Corfu, Greece.

For the purposes of applicable data-protection legislation, the operator of Azure Mare Studios is the Data Controller responsible for determining how and why your personal information is processed.

For any questions concerning this Privacy Policy or the processing of your personal information, please contact us using the details above.

2. WHAT PERSONAL INFORMATION WE MAY COLLECT

Depending on how you interact with us, we may collect information including:

• Full name
• Email address
• Telephone number
• Home or billing address
• Country of residence
• Arrival and departure dates
• Number and names of guests
• Number and ages of children where relevant
• Accommodation preferences
• Special requests
• Reservation and booking information
• Payment and transaction information
• Billing or invoicing information
• Identification information for guest registration
• Communications you send to us
• Feedback and correspondence
• Technical information from website usage
• Cookie and analytics information

We only collect personal information that is reasonably necessary for the relevant purpose.

3. HOW WE COLLECT YOUR INFORMATION

We may receive your personal information when you:

4. WHY WE USE YOUR PERSONAL INFORMATION

We may process your personal information in order to:

• Manage and confirm reservations
• Process payments and refunds
• Provide accommodation and guest services
• Communicate with you before, during and after your stay
• Manage check-in and check-out
• Respond to enquiries and special requests
• Arrange requested services
• Issue invoices and accounting records
• Comply with tourism, tax, accounting and other legal obligations
• Maintain the security of our guests and property
• Resolve complaints or disputes
• Improve our website and services
• Understand how visitors use our website
• Prevent fraud and misuse
• Send marketing communications where you have provided the required consent or where otherwise legally permitted

We do not use your personal information for purposes incompatible with those for which it was originally collected unless permitted by law.

5. LEGAL BASIS FOR PROCESSING

Under GDPR, we must have a lawful basis for processing personal data. Depending on the circumstances, we may rely on:

6. RESERVATION INFORMATION

When you make a reservation, we require certain information to process and manage your booking. This may include your name, contact information, dates of stay, accommodation selected, number of guests, payment information and any relevant requests.

Without certain required information, we may not be able to process or fulfil your reservation.

7. PAYMENT INFORMATION

Payments may be processed directly by us or through authorised banks, payment processors, booking engines or third-party reservation platforms.

Where payment processing is handled by an independent payment provider, your payment-card information may be transmitted directly to that provider rather than stored by Azure Mare Studios. We only process or retain payment-related information where necessary and in accordance with applicable legal and security requirements.

8. THIRD-PARTY BOOKING PLATFORMS

If you make a reservation through a third-party platform such as Booking.com, Expedia or Airbnb, that provider will process certain personal information according to its own privacy policy.

The platform may provide Azure Mare Studios with the information necessary to manage your reservation. We recommend reviewing the privacy policy of the booking platform you use to understand how that company processes your personal information.

9. THIRD-PARTY SERVICE PROVIDERS

We may work with trusted third parties that provide services necessary for the operation of our business and website. These may include:

• Website hosting providers
• Booking-engine providers
• Payment processors and banks
• IT and technical service providers
• Email and communication providers
• Accountants and professional advisers
• Analytics providers
• Website security providers
• Transfer or transportation providers

We only share information reasonably necessary for the relevant service. Where required by GDPR, appropriate contractual and data-protection safeguards are used.

10. INTERNATIONAL DATA TRANSFERS

Some technology or service providers may process information outside Greece or the European Economic Area (EEA).

Where personal data is transferred outside the EEA, appropriate legal safeguards will be used where required by applicable data-protection law. These safeguards may include adequacy decisions, Standard Contractual Clauses or other legally recognised mechanisms.

11. COOKIES

Our website may use cookies and similar technologies. Cookies are small files placed on your device that help websites operate correctly, remember preferences, improve performance and understand how visitors interact with a website.

Where required by law, non-essential cookies will only be activated after you provide your consent. You can manage your cookie preferences through the website's cookie consent settings.

12. GOOGLE ANALYTICS & ANALYTICS SERVICES

Where enabled and subject to applicable consent requirements, our website may use analytics technologies such as Google Analytics to understand website traffic and visitor behaviour. These services may process information such as:

• Pages visited
• Approximate location
• Device type
• Browser information
• Referral source
• Website interactions

Analytics technologies operate in accordance with applicable consent and data-protection requirements.

13. GOOGLE MAPS & EXTERNAL CONTENT

Our website may include services or embedded content from third parties, including maps, videos, social media features or other interactive services.

These third-party services may collect technical information or use cookies according to their respective privacy policies. Where legally required, such technologies will only be activated after appropriate consent has been obtained.

14. MARKETING COMMUNICATIONS

We will only send direct marketing communications where we have an appropriate legal basis to do so. Where your consent is required, we will ask for it before sending marketing communications.

You may unsubscribe from marketing communications at any time by using the unsubscribe option provided in the communication or by contacting us at:

Withdrawing marketing consent will not affect essential communications relating to an existing reservation.

15. HOW LONG WE KEEP YOUR INFORMATION

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected or where retention is required by law.

Different categories of information may therefore be retained for different periods. Certain booking, invoice and transaction records may need to be retained for the period required under Greek tax, accounting or tourism legislation. Once personal information is no longer required, it will be securely deleted, anonymised or otherwise handled in accordance with applicable legal requirements.

16. HOW WE PROTECT YOUR INFORMATION

We take reasonable technical and organisational measures to protect personal information against:

• Unauthorised access
• Accidental loss
• Misuse
• Alteration
• Unauthorised disclosure
• Destruction

Access to personal information is limited to persons and service providers who reasonably require access for legitimate operational purposes. However, no method of internet transmission or electronic storage can be guaranteed to be completely secure.

17. YOUR GDPR RIGHTS

Subject to applicable law, you may have the following rights regarding your personal information:

18. HOW TO EXERCISE YOUR RIGHTS

To exercise any of your data-protection rights or ask a question regarding your personal information, please contact:

We may need to verify your identity before processing certain requests in order to protect your personal information against unauthorised disclosure. Valid requests will be handled within the time limits required by applicable data-protection legislation.

19. RIGHT TO LODGE A COMPLAINT

If you believe that your personal information has not been processed in accordance with applicable data-protection legislation, you have the right to lodge a complaint with the competent supervisory authority.

For Greece, the competent supervisory authority is the Hellenic Data Protection Authority (HDPA). You are also welcome to contact us directly first so that we have the opportunity to investigate and address your concern.

20. CHILDREN'S PERSONAL INFORMATION

Azure Mare Studios welcomes families, and reservation information may therefore include information concerning children travelling as part of a family group.

We only process children's information where reasonably necessary for the reservation, accommodation service, guest safety or compliance with legal obligations. We do not knowingly use children's personal information for direct marketing purposes.

21. LINKS TO OTHER WEBSITES

Our website may contain links to external websites, booking platforms, social media services or local service providers.

Azure Mare Studios is not responsible for the privacy practices or content of independent third-party websites. We recommend reviewing the privacy policy of any external website before providing personal information.

22. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy periodically to reflect changes to our website, services, technology or applicable legal requirements. The latest version will be published on this page together with the date of the most recent update.

We encourage visitors to review this Privacy Policy periodically.