On this page
1. Who we are
For the purposes of the EU General Data Protection Regulation (GDPR), the data controller responsible for this website is:
Doukas Hotels Single Member IKE
Paralia Ofriniou, Moustheni, Greece
VAT number (ΑΦΜ): 802709045
Email: reservations@doukashotels.com
2. What data this website collects
This website itself does not include a booking form and does not directly collect payment or reservation details — see Section 3 for how that works. Directly, through doukashotels.com, we (or our hosting infrastructure) may collect:
- Technical data automatically generated by your visit, such as your IP address, browser and device type, and pages viewed. This is standard web server behaviour used for security and keeping the site running, not something we actively review to identify individuals.
- Cookie data, only for the categories you've consented to — see Section 8 and our Cookie Policy.
- Information you send us directly, for example if you email reservations@doukashotels.com with a question. This typically includes your name, email address, and whatever you choose to tell us in your message.
3. Data handled by our booking partner
When you choose to book a stay, this website hands you off to our booking partner's own secure booking engine (Little Hotelier, a SiteMinder product, currently at direct-book.com). From that point, your name, contact details, payment information, and stay details are collected and processed directly by Little Hotelier/SiteMinder, under their own privacy policy, which is shown to you at the time of booking. We receive your reservation details from them in order to prepare for and provide your stay, but the booking engine itself — not this website — is where that data is first collected and where payment is handled.
4. Why we process your data
We rely on the following legal bases, depending on the situation:
- Consent — for non-essential cookies (Functional and Analytics), which are only set if you actively agree via our cookie banner or preference centre.
- Legitimate interest — for basic technical/security data needed to operate the website reliably, and for responding to enquiries you send us.
- Contractual necessity — for data processed by our booking partner in order to create and fulfil your reservation.
5. Who we share data with
We don't sell personal data. Depending on how you use the website, data may be shared with:
- Little Hotelier / SiteMinder — our booking engine and property management system provider, for handling reservations.
- Google — for the Maps embed on our location section (Functional cookies), and, once enabled, Google Analytics (Analytics cookies). Both only load after you've given consent.
- Our website hosting provider — for the basic technical operation of the site.
6. International transfers
Some of the services above (notably Google) may process data outside the European Economic Area. Where this happens, it's covered by the safeguards those providers put in place — such as the European Commission's Standard Contractual Clauses — as described in their own privacy documentation.
7. How long we keep data
We keep data only as long as needed for the purpose it was collected for. Email correspondence is kept for as long as reasonably necessary to handle your enquiry and any follow-up. Cookie consent choices are stored in your browser until you change them or clear your browser data. Data held by our booking partner is retained according to their own policy and applicable record-keeping obligations (for example, invoicing requirements under Greek law).
8. Cookies
This site uses a small number of cookies and similar technologies, split into Necessary, Functional, and Analytics categories. Non-essential categories are off until you say otherwise, and you can change your choice at any time via the "Cookie Settings" link in the footer of every page. Full details, including what each category actually does, are in our Cookie Policy.
9. Your rights under GDPR
If you're in the EU/EEA, you have the right to:
- Access the personal data we hold about you;
- Ask us to correct inaccurate data;
- Ask us to delete your data, in certain circumstances;
- Ask us to restrict how we use your data;
- Receive your data in a portable format, where technically feasible;
- Object to processing based on legitimate interest;
- Withdraw consent at any time, for anything based on consent (this won't affect processing that already happened before you withdrew it);
- Lodge a complaint with a supervisory authority — in Greece, this is the Hellenic Data Protection Authority (HDPA).
To exercise any of these rights regarding data held directly by us, contact reservations@doukashotels.com. For data held by our booking partner as part of processing your reservation, you may also need to contact them directly — details are in the privacy policy shown at the time of booking.
10. Children's privacy
This website is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we'll remove it.
11. Security
We take reasonable technical and organisational measures to protect the data we handle directly. No method of transmission over the internet is completely secure, so while we work to protect your data, we can't guarantee absolute security — this is also why payment and sensitive booking details are handled by our specialised booking partner rather than this website directly.
12. Changes to this policy
We may update this policy from time to time, for example as our use of cookies or third-party services changes. The "Last updated" date at the top shows when it was last revised.
13. Contact & complaints
Questions about this policy, or want to exercise any of your rights? Contact us at reservations@doukashotels.com or write to us at Paralia Ofriniou, Moustheni, Greece. If you're not satisfied with our response, you have the right to lodge a complaint with the Hellenic Data Protection Authority.