Privacy Policy & GDPR Compliance
Last updated: June 2026
Katerina Studios & Apartments respects your privacy and is committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679, also known as GDPR, and the applicable Greek data protection legislation.
This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website, contact us, make a booking enquiry or use our online services.
1. Data Controller
The data controller responsible for this website is:
Katerina Studios & Apartments
Sidari, Corfu, Greece, 49081
Website: https://katerinastudio.com
Email: [email protected]
Phone: +30 6985851882
For any privacy-related request, you may contact us at: [email protected]
2. Personal Data We May Collect
Depending on how you use our website, we may collect the following personal data:
- Full name
- Email address
- Phone number
- Booking details, such as dates of stay, number of guests and room type
- Payment-related information, when payment is made through a secure third-party provider
- IP address, browser type, device information and website usage data
- Any information you voluntarily provide through contact forms, booking forms, email or telephone communication
We only collect personal data that is necessary for the purposes described in this Privacy Policy.
3. Why We Process Your Personal Data
We may process your personal data for the following purposes:
- To respond to your enquiries
- To manage booking requests and reservations
- To provide accommodation services
- To process payments securely through third-party payment providers
- To communicate with you before, during or after your stay
- To improve our website and services
- To comply with legal, tax and accounting obligations
- To protect the security and proper operation of our website
4. Legal Basis for Processing
We process your personal data based on one or more of the following legal grounds:
- Contractual necessity: when processing is required to manage a booking or provide accommodation services.
- Legal obligation: when we are required to keep records for tax, accounting or legal purposes.
- Legitimate interest: when we need to operate, secure and improve our website and services.
- Consent: when you accept optional cookies, analytics cookies or any marketing communication where applicable.
You may withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
5. Contact Forms and Email Communication
When you contact us through our website, by email or by phone, we use the information you provide only to respond to your message and manage your request.
Your message may include personal data such as your name, email address, phone number and booking preferences. We do not sell or rent this information to third parties.
6. Bookings and Payments
If you make a booking or payment through our website, your data may be processed by secure third-party booking or payment providers. These providers process your data only for the purpose of completing the booking, confirming availability, processing payment or managing the reservation.
Payment card details are processed securely by the relevant payment provider. Katerina Studios & Apartments does not store full card details on its own website.
7. Cookies and Analytics
Our website uses cookies to improve functionality, enhance user experience and understand how visitors use our website.
Cookies may include:
- Necessary cookies: required for the website to function properly.
- Analytics cookies: used to understand website traffic and visitor behaviour.
- Third-party cookies: may be used by embedded content, maps, videos, social media tools or booking/payment systems.
Optional cookies, such as analytics or marketing cookies, should only be used with your consent through the cookie banner/settings available on the website.
You can manage or withdraw your cookie consent at any time through the cookie settings on our website or through your browser settings.
8. Google Analytics
Our website may use Google Analytics to collect statistical information about website traffic and user behaviour. This may include information such as device type, browser, approximate location, pages visited and time spent on the website.
Where required, Google Analytics will only be activated after your consent. The information collected is used to improve our website and services.
You can also prevent Google Analytics tracking by using Google’s browser add-on available from Google.
9. Embedded Content and Third-Party Services
Our website may include embedded content or links from third-party services, such as maps, videos, booking engines, payment providers or social media platforms.
These third-party services may collect data about you, use cookies, embed additional tracking and monitor your interaction with their content, especially if you are logged into their services.
We recommend that you review the privacy policies of these third-party providers.
10. Data Sharing
We may share your personal data only when necessary with:
- Booking system providers
- Payment service providers
- Website hosting providers
- Email and communication service providers
- IT support providers
- Accounting, legal or tax advisors
- Public authorities, where required by law
We do not sell, rent or trade your personal data.
11. International Data Transfers
Some third-party providers may process data outside the European Economic Area. In such cases, we rely on appropriate safeguards, such as adequacy decisions, Standard Contractual Clauses or other lawful transfer mechanisms under the GDPR.
12. Data Retention
We keep your personal data only for as long as necessary for the purposes described in this Privacy Policy.
Booking, invoice and transaction data may be kept for the period required by tax, accounting and legal obligations. Contact form or email communication is kept only for as long as necessary to manage your request, unless a longer retention period is required by law or for legitimate business reasons.
13. Your Rights Under GDPR
Under the GDPR, you have the right to:
- Request access to your personal data
- Request correction of inaccurate or incomplete data
- Request deletion of your personal data
- Request restriction of processing
- Object to processing based on legitimate interest
- Request data portability, where applicable
- Withdraw your consent at any time, where processing is based on consent
- Lodge a complaint with the competent data protection authority
To exercise your rights, please contact us at: [email protected]
You also have the right to contact the Hellenic Data Protection Authority.
14. Data Security
We take appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, misuse, alteration or disclosure.
Our website uses HTTPS encryption to protect data transmitted between your browser and our website.
However, no method of transmission over the Internet is completely secure, and we cannot guarantee absolute security.
15. Data Breaches
In the event of a personal data breach that may result in a risk to your rights and freedoms, we will take all necessary steps in accordance with the GDPR, including notifying the competent authority and, where required, the affected individuals.
16. Children’s Privacy
Our services are not directed to children under the age of 16. If you are under 16, you should not provide personal data through our website without the consent of a parent or legal guardian.
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations or website functionality.
The latest version will always be available on this page, with the updated date shown at the top.
18. Contact
For any question about this Privacy Policy or the way we process your personal data, please contact:
Katerina Studios & Apartments
Email: [email protected]
Phone: +30 6985851882
Address: Sidari, Corfu, Greece, 49081