- HOW WE DEAL WITH YOUR PERSONAL DATA
Privacy Policy
This Privacy Policy complies with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Greek Law 4624/2019. At Amalia Rooms Sea View, Villa Amalia Sun Beach and Amalia Lux Villas, we are committed to protecting your privacy and handling your data with transparency.
01. Data Controller
Amalia Rooms Sea View, Villa Amalia Sun Beach, Amalia Lux Villas
Contact Address: Nea Vrasna, 57021, Thessaloniki, Greece
Email: info@amaliarooms.gr
Tel: +30 6948501137
02. Browsing Security & Communication
- SSL Protection: Our website uses SSL encryption to ensure a secure browsing experience. All information exchanged and transitions to booking links are fully encrypted.
- Viber & WhatsApp: The direct contact links open the respective applications on your device. The hotel only processes information you choose to share during the chat (e.g., phone number, name) exclusively to handle your request.
- YouTube Links: Our website contains links to videos on YouTube. By clicking these links, you are redirected to the YouTube platform (Google Ireland Limited), which operates under its own privacy and cookies policy.
03. Reservations via Third Parties
In order to complete a booking, users are redirected to secure external environments:
- Book-OnlineNow: Personal and payment data (PCI-DSS compliant) are processed by B.O.N. Online Ltd.
- Booking.com: Processing is governed by the privacy policy of Booking.com B.V.
The hotel receives only the necessary details from these providers to identify the booking and comply with tax and police regulations.
04. Free Wi-Fi Usage
We provide our guests with complimentary wireless internet access (Wi-Fi).
- Technical Data: We may collect technical information (e.g., device MAC address, connection timestamps) for network security and to prevent malicious use.
- Content: The hotel does not monitor the content of your browsing activity.
- Responsibility: Users are responsible for the lawful use of the network.
05. Detailed User Rights (GDPR)
Under the GDPR, you have the following rights:
- Right of Access: You have the right to request a copy of the personal data we hold about you.
- Right to Rectification: You have the right to request the correction of inaccurate or incomplete data.
- Right to Erasure (“Right to be Forgotten”): You may request the deletion of your data, provided there is no longer a legal obligation to retain it (e.g., tax purposes).
- Right to Restriction of Processing: You have the right to request that we suspend the processing of your data.
- Right to Data Portability: You may request to receive your data in a structured, machine-readable format or have it transferred to another controller.
- Right to Object: You have the right to object to the processing of your data based on legitimate interests.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.
06 Exercise of Rights & Complaints
07. Data Breach Notification
- Notify the Hellenic Data Protection Authority within 72 hours of becoming aware of the breach.
- Informe the affected data subjects (users/guests) without undue delay, providing information on the nature of the breach and the measures taken to mitigate its effects.

