Hotelia360 ("we", "us") respects your privacy. This policy explains what personal data we collect on hotelia360.com and on our demo environment at demo.hotelia360.gr, why, on what legal basis, how long we keep it and the rights you have under the General Data Protection Regulation (EU) 2016/679 (GDPR) and Greek law 4624/2019.
Who we are
Hotelia360, Geronimaki 27, 71306 Heraklion, Crete, Greece. Email: info@hotelia360.com. Phone: +30 2811 216 000. We are the data controller for the processing described here.
What we collect and why
Contact and strategy-call requests
When you submit the form on our contact page we collect the details you enter: name, work email, hotel or company, phone (optional), role, property size, country, topics of interest and your message. We also record the time of submission, your IP address and browser user agent for security and abuse prevention.
Purpose: to respond to your request, prepare for and hold the call, and send you the follow-up plan you asked for. Legal basis: your consent (Art. 6(1)(a) GDPR), given by ticking the consent box, and our legitimate interest in responding to business enquiries (Art. 6(1)(f)). Retention: 24 months from our last contact, or until you ask us to delete it, unless we enter into a contract, in which case the data becomes part of the client file.
Demo access
Our demo environment at demo.hotelia360.gr asks for an email address before it opens. We collect the work email and the hotel or company name you enter, the time you submitted them, the fact and time that you accepted this policy, your IP address, browser user agent and the page you arrived from, and a count of how many times you have opened the demo.
Purpose: to give you access to the demo, to recognise you on a return visit so you are not asked again, to prevent automated abuse of the form, and to follow up with you about the demo. Legal basis: your consent (Art. 6(1)(a) GDPR), given by ticking the box on the access form, and our legitimate interest in keeping the service secure (Art. 6(1)(f)) for the IP address and user agent. Retention: 24 months from our last contact with you, or until you ask us to delete it; the IP address is discarded after 30 days.
The demo contains illustrative data generated for presentation. It holds no real figures from any hotel, and nothing you do inside it is recorded.
Server logs
Our hosting provider records standard access logs (IP address, requested page, timestamp, referrer, user agent) to operate and secure the site. Legal basis: legitimate interest (Art. 6(1)(f)). Retention: up to 30 days.
Website analytics
If you allow statistics cookies in the cookie banner, we use Google Analytics 4 to understand which pages are read, how visitors arrive at the site and where they leave. It is configured with IP anonymisation and without advertising or cross-site features, and it does not run at all until you have given consent. The data consists of a random visitor identifier stored in a cookie, the pages viewed, the referring site, approximate location derived from a truncated IP address, and device and browser type. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time through "Cookie settings" in the footer. Retention: 14 months in Google Analytics; the cookies themselves last up to 13 months.
Cookies and local storage
This site sets one cookie of its own, which remembers your choice in the cookie banner. Google Analytics cookies are set only after you allow them. We set no marketing or social tracking cookies. Fonts and all other assets are served from our own domain. The demo sets no cookies at all.
The demo does use your browser's local storage to remember four things: that you have been given access, that you are signed in, which filters you last chose, and whether you have already seen the guided tour. These are needed for the demo to work at all and are readable only by your own browser; under the ePrivacy Directive and Greek law 3471/2006, strictly necessary storage of this kind does not require consent. Clearing your browser data removes all of it. Our cookie policy lists every cookie and explains how consent works.
The contact form is protected by Google reCAPTCHA, which tells genuine requests apart from automated spam. It loads only once you start filling in the form, and it may then set a cookie on Google's own domain and send Google your IP address and basic browser signals for that purpose. Legal basis: legitimate interest in keeping the form usable and our mailbox free of spam (Art. 6(1)(f)). Google's privacy policy applies to that processing.
Who receives your data
- Hostinger, our web hosting provider, which stores this site, the demo and its lead database, and processes form submissions on our behalf under a data-processing agreement, within the European Union.
- Hostinger's mail service, which delivers contact requests and demo notifications to our mailbox.
- Google Ireland Limited, which provides Google Analytics (only with your consent) and the reCAPTCHA spam protection on the contact form, and receives your IP address and browser signals for those purposes.
- No data is sold or shared with third parties for their own marketing.
Apart from the Google services above, we do not transfer personal data outside the European Economic Area for the processing described here. Google may process Analytics and reCAPTCHA data in the United States; those transfers rest on the EU–US Data Privacy Framework and the European Commission's standard contractual clauses.
Your rights
You have the right to access, rectify or erase your personal data, to restrict or object to its processing, to data portability, and to withdraw consent at any time without affecting the lawfulness of processing before withdrawal. To exercise any right, email info@hotelia360.com. We respond within one month.
You also have the right to lodge a complaint with the Hellenic Data Protection Authority (dpa.gr), Kifissias 1-3, 115 23 Athens, or with the supervisory authority of your country of residence.
Security
The site is served over HTTPS. Form submissions are validated, rate-limited and transmitted encrypted. Access to the mailbox that receives requests is restricted to the people who handle them.
Links to other sites
Our site links to third-party sites such as LinkedIn and Instagram. Their privacy policies apply once you leave hotelia360.com.
Changes
We may update this policy as the site evolves. The date at the top shows the latest revision. Material changes will be highlighted on this page.