Privacy policy

This Privacy Policy informs you of our policies regarding the collection, use, disclosure, and protection of Personal Information we receive from users of the Site and from our partner booking channels.

1. Data Controller

The data controller responsible for the processing of your personal data is:

Company Name: Dado Service Single Member PC
Registered Office: Porti Sidariou 49081 – Karousades – Corfu, Greece
Website: dadovillas.com
Contact Email: info@dadovillas.com

Note: The company has not appointed a formal Data Protection Officer (DPO), as it is not mandatory under its current scope of operations. For any privacy-related inquiries, please contact us directly at our email address.

2. Information Collection and Use

We collect and process personal data strictly for professional purposes related to the execution of your lodging reservation and the provision of our holiday rental services.

The personally identifiable information we collect includes:

Full name (first and last name)
Postal/billing address
Email address
Telephone/contact number
Government-issued identification or passport details (where required by applicable laws and regulations)

Please note: Government-issued identification or passport details are collected only when strictly necessary to fulfill local legal, tax, or statutory reporting obligations (such as official declarations to the Greek tax authority – AADE). When required, these details are processed strictly in accordance with applicable laws and retained only for the duration mandated by law.

We do not directly store or process credit card numbers on our own servers. All financial transactions are managed securely by our payment gateway.

3. How We Receive Your Data

We obtain your personal information through two main channels:

Directly from you: When you fill out a form or complete a reservation on our website, dadovillas.com.
From partner platforms: Transmitted to us via third-party booking portals (such as Booking.com, Airbnb, Vrbo, Holidu, etc.) through which you initiated your reservation.

4. Legal Basis for Processing

The processing of your personal data is justified under the following legal bases of the EU General Data Protection Regulation (GDPR):

Performance of a contract (Article 6(1)(b) GDPR): To process, manage, and complete your tourist accommodation booking and communicate operational updates regarding your stay.
Legal obligation (Article 6(1)(c) GDPR): To comply with fiscal, tax, and statutory accounting requirements mandatory for hospitality operators under Greek and European Union laws (including identity declarations for tax purposes).
Legitimate interest (Article 6(1)(f) GDPR): To maintain the security, technical stability, and integrity of our website and services.

5. Identity Verification & Statutory Reporting

Where applicable laws or local statutory obligations require the verification of guest identity, we may request official government-issued identification or passport details prior to or upon check-in.

Any identification data collected for these purposes is processed strictly on the legal basis of compliance with a legal obligation (Article 6(1)(c) GDPR), used solely for mandatory reporting to competent authorities (including the Greek tax authority – AADE), and handled in full compliance with GDPR security standards.

6. Data Sharing and Third Parties

We do not sell, rent, trade, or share your personal data with external third parties for commercial or marketing purposes. Your data is shared exclusively with the following entities to fulfill your service request or comply with legal requirements:

Property Owners / Managers: Your contact and booking details are shared strictly with the owner or manager of the specific villa/property you have booked, solely to facilitate your check-in, check-out, and stay.
Avantio: Our specialized property management and reservation software provider, based in Spain (EEA), which acts as a data processor hosting and managing our secure reservation database.
Stripe: All online financial transactions are handled securely via Stripe. We do not store, view, or process your credit card details on our servers.
Public Authorities: When required by applicable Greek or EU legislation (e.g., tax offices like AADE).

7. Log Data

Like most website operators, we collect information that your browser automatically sends whenever you visit our Site ("Log Data"). This Log Data may include information such as your computer's Internet Protocol ("IP") address, browser type, browser version, the specific pages of our Site that you visit, the time and date of your visit, and the time spent on those pages. This data is used exclusively to maintain site security and technical stability. We do not use this data to profile or track individual guests.

8. Cookies

Our website uses cookies exclusively to enable core technical functionalities, manage booking paths, and secure your session. We do not deploy third-party advertising or cross-site tracking cookies.

For granular details regarding the specific cookies we use, please refer to our dedicated Cookie Policy available on dadovillas.com. You can manage your preferences or block non-essential technical cookies at any time via your browser settings.

9. Data Security

The security of your Personal Information is highly important to us. Your data is managed through secure technical infrastructure provided by our GDPR-compliant processor (Avantio) and payment gateways (Stripe).

However, please remember that no method of transmission over the Internet, or method of electronic storage, is 100% secure. While we use commercially acceptable and secure systems to protect your Personal Information, we cannot guarantee absolute security.

10. Data Retention

In compliance with Greek tax and statutory accounting laws, all personal data related to financial transactions, accounting, and accommodation bookings will be securely retained for a fixed period of 10 years following the end of the calendar year in which the transaction occurred. Upon expiration of this retention period, the data will be permanently deleted or anonymized.

11. Your GDPR Rights

As a data subject under the EU General Data Protection Regulation (GDPR), you hold the following rights, which you can exercise at any time:

The right to access, update, or erase the personal information we hold about you.
The right of rectification if that information is inaccurate or incomplete.
The right to object to or restrict our processing of your personal data under certain conditions.
The right to data portability, allowing you to receive a copy of your data in a structured, machine-readable format.

To exercise any of these rights, please contact us at info@dadovillas.com.

You also have the right to lodge a formal complaint with a European Data Protection Supervisory Authority. For Greece, the competent authority is:

Hellenic Data Protection Authority (HDPA)
Address: 1-3 Kifissias Avenue, PC 115 23, Athens, Greece
Website: www.dpa.gr
Email: contact@dpa.gr

12. Changes to This Privacy Policy

We reserve the right to update or change our Privacy Policy at any time to reflect operational or legal shifts. Any updates will be posted directly to this page and will become effective immediately upon publication.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us at: info@dadovillas.com