Privacy Policy

Last updated: 10 March 2026
Website: https://www.omiroshotels.gr 

Data Controller: OMIROS IKE
Registered Address: Heraklion, Crete, Greece
Email: omiros@omiroshotels.com 
Phone: +30 22860 31982

OMIROS IKE respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website or services.

By using our website, you agree to this Privacy Policy.

1. Who we are

OMIROS IKE operates the website https://www.omiroshotels.gr and acts as the data controller for personal data collected through the website unless otherwise stated.

2. Personal data we collect

We may collect the following personal data:

- First name and surname
- Email address
- Phone number
- Billing address
- Country of residence
- Passport or ID details when required by law
- Reservation and accommodation details
- Payment-related information
- IP address
- Cookie data
- Messages submitted through forms
- Newsletter subscription details
- Social media communication information
- Job applications and CVs

3. How we collect data

We collect personal data when you:

- Make a reservation through our booking engine
- Fill out a contact form
- Subscribe to our newsletter
- Contact us by email or phone
- Interact with our website cookies or analytics tools
- Contact us through social media
- Submit a job application

4. Why we process your data

We use personal data to:

- Manage reservations
- Communicate with guests before and during their stay
- Send booking confirmations
- Process payments
- Provide customer service
- Send marketing or promotional emails when permitted
- Improve our website and services
- Comply with legal and tax obligations
- Protect against fraud or misuse

5. Legal basis for processing

Under GDPR we rely on the following legal bases:

- Contract performance (hotel reservations and services)
- Legal obligations (tax, tourism, regulatory requirements)
- Legitimate interests (business operations and security)
- Consent (newsletter subscriptions and optional cookies)

You may withdraw consent at any time.

6. Payments

Reservations and payments may be processed through WebHotelier and related payment providers.

We do not store full credit card details ourselves. Payment information is handled through secure third-party systems and used only for the completion and verification of transactions.

7. Cookies and tracking technologies

Our website uses cookies including:

- Necessary cookies
- Analytics cookies
- Advertising and remarketing cookies

Technologies used may include:

- Google Analytics
- Meta/Facebook Pixel
- Google Ads conversion tracking
- Google Maps
- Embedded content from third parties

Non-essential cookies are used only with your consent through our cookie banner.

More details are provided in the Cookie Policy.

8. Third-party service providers

We may share personal data with trusted providers necessary to operate our services, including:

- WebHotelier (booking engine and channel manager)
- Hotelizer PMS
- Google Analytics
- Meta/Facebook Pixel
- Newsletter services such as Mailchimp or Brevo
- Google Maps
- Google reCAPTCHA
- Cloudflare
- Website hosting provider
- Website developer or IT providers

We may also share data with public authorities when required by law.

9. International data transfers

Some service providers may process data outside the European Economic Area. When this occurs, appropriate safeguards are applied according to applicable data protection laws.

10. Data retention

Personal data is retained only as long as necessary for legal and operational purposes.

Typical retention periods include:

- Contact form messages: up to one month after checkout where relevant
- Reservation data: for operational, accounting, and legal requirements
- Invoices and tax records: for the period required by law
- Newsletter subscriptions: until the user unsubscribes
- Analytics data: according to the analytics platform retention settings
- CVs and job applications: as long as necessary for recruitment evaluation

11. Your GDPR rights

You may have the right to:

- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Restrict processing
- Object to processing
- Request data portability
- Withdraw consent

Requests can be sent to:

omiros@omiroshotels.com

You may also contact the Hellenic Data Protection Authority if you believe your rights have been violated.

12. Data security

We apply appropriate technical and organizational measures to protect personal data including the use of SSL/HTTPS encryption.

However, no internet transmission is completely secure.

13. Children

Our website and services may be used by adults making reservations that include children. Bookings and legal responsibility must always be handled by an adult or guardian.

We do not knowingly collect personal data directly from children without parental involvement where required.

14. Marketing communications

We may send promotional emails to users who subscribe or lawfully receive communications from us.

You may unsubscribe at any time through the link included in emails or by contacting us.

15. Social media

If you interact with us through social media platforms, your data may also be processed according to the policies of those platforms.

16. Changes to this policy

We may update this Privacy Policy periodically. The updated version will always be published on this page.

17. Contact

OMIROS IKE
Heraklion, Crete, Greece

Email: omiros@omiroshotels.com
Phone: +30 22860 31982