This policy covers visits to this website, stay enquiries and applications for specific vacancies submitted through our forms.
01. Data controller
The data controller is ΤΞΤΕ ΓΕΩΡΓΙΟΣ Ο ΑΜΠΕΛΙΩΤΗΣ ΑΕ (registered Greek company name), Kolymbia, postal code 85103, Rhodes, Greece.
For privacy questions, contact info@lightgray-lapwing-236895.hostingersite.com.
02. Information we collect
Stay enquiries
Property, dates, number of guests, full name, email, optional phone number and anything you choose to include in your message.
Job applications
The role you apply for, full name, email, optional phone and availability date, short note and your CV in PDF format.
The forms do not request special-category information, such as health information. In job applications, please include only information relevant to the specific vacancy.
To limit abusive submissions, we use an identifier derived from the IP address and submission timestamps. Hosting, email and security providers also process technical connection and email delivery information, such as IP address, request time, browser information and sender and recipient addresses.
03. Why we use your information
- To answer your stay enquiry and provide availability information.
- To assess your application for a specific open role and contact you.
- To secure the forms and prevent unwanted or malicious submissions.
- To handle requests to exercise data protection rights under the GDPR.
Stay enquiries and assessment of applications for a specific role are processed to take steps at your request before entering into a contract (GDPR Article 6(1)(b)). Website protection and prevention of abusive submissions rely on our legitimate interest in secure operation (Article 6(1)(f)). Handling rights requests relies on compliance with our obligations under the GDPR (Article 6(1)(c)).
Fields marked with an asterisk are necessary to handle your stay enquiry or application before a possible contract. Without them, the form cannot be submitted. Other fields are optional. Acknowledging this policy is not consent to processing.
International transfers
Hostinger and Cloudflare services involve international processing and are not limited exclusively to the European Economic Area (EEA). For transfers outside the EEA without an adequacy decision, Hostinger’s terms provide for the European Commission’s Standard Contractual Clauses (§9). Cloudflare’s terms provide for the EU–US Data Privacy Framework for covered transfers to Cloudflare in the United States under the relevant adequacy decision, and Standard Contractual Clauses for other transfers requiring them (§6).
The relevant terms and transfer safeguards are available at the links below. You may also request a copy or clarification at info@lightgray-lapwing-236895.hostingersite.com.
Hostinger data processing terms · Cloudflare data processing terms
05. How long we keep information
Ordinary stay enquiries are deleted no later than 12 months after the last communication. This period covers enquiries, not records required to fulfil a confirmed booking.
Unsuccessful applications and CVs are deleted no later than 6 months after the specific recruitment process ends. They are not kept for future vacancies. Limited retention of completed enquiries and unsuccessful applications serves our legitimate interest in handling related enquiries and establishing or defending legal claims (GDPR Article 6(1)(f)).
The temporary PDF is removed from the website server after submission processing. The copy delivered to the company mailbox is subject to the period above.
Exceptionally, strictly necessary information may be retained beyond the periods above where required by a specific legal obligation or necessary to establish, exercise or defend specific legal claims. Retention is limited to the relevant information and the necessary period.
Submission rate-limit files are deleted during daily cleanup once they have been inactive for more than 30 days.
06. Your rights
We respond without undue delay and normally within one month of receiving your request. If complexity or the number of requests requires an extension of up to two further months, we will inform you within the first month and explain why. If there are reasonable doubts about the requester’s identity, we may request only the additional information necessary to confirm it.
Depending on the circumstances, you may request access, correction, deletion, restriction or portability of your information.
You have the right to object to processing based on legitimate interests on grounds relating to your particular situation.
To exercise a right, email info@lightgray-lapwing-236895.hostingersite.com. You also have the right to lodge a complaint with the Hellenic Data Protection Authority.