Privacy Policy & Cookies

This website, theofanomykonos.com (the "Website"), is operated by THEOFANO PANORAMIC VIEW Ε.Ε. (the "Company", "we", "us"), the company behind Villa Theofano — Panoramic View, Agios Stefanos, Mykonos 846 00, Greece. The Company acts as the data controller for the personal data described in this policy.

For any privacy matter you can reach us at info@theofanomykonos.com or +30 698 844 8901.

The Website is a static informational site. We do not require you to create an account, and we do not use advertising or analytics trackers. We process personal data only when you choose to contact us:

• Enquiry details — name, email address, travel dates, number of guests and the content of your message, when you send us an enquiry (the enquiry form opens a message in your own email application; nothing is transmitted until you send it).
• Communication data — information you share when you email us, call us, or message us on WhatsApp.
• Booking data — details reasonably needed to prepare and manage a reservation, if you proceed with one.

Our hosting provider may process technical log data (such as IP address, browser type and pages requested) strictly for delivering the Website securely.

We use personal data to:

• respond to your enquiries and prepare proposals — necessary for taking steps prior to entering into a contract (Article 6(1)(b) GDPR);
• manage reservations and provide our hospitality services — performance of a contract (Article 6(1)(b) GDPR);
• comply with legal obligations, such as tax and accounting rules (Article 6(1)(c) GDPR);
• keep the Website secure — our legitimate interest (Article 6(1)(f) GDPR).

We keep this to a minimum. The Website itself sets no advertising or analytics cookies. We use:

• Consent preference (local storage) — remembers the choice you make in our cookie notice so we do not ask again. Strictly necessary; kept until you clear your browser data.
• Google Maps (third party) — the interactive map on our Location page is loaded from Google only after you accept it (via the cookie notice or the "Load Map" button). Once loaded, Google may set its own cookies and process your IP address under Google's Privacy Policy (policies.google.com/privacy).
• WhatsApp link (third party) — if you choose to contact us on WhatsApp, your communication is governed by WhatsApp's own terms and privacy policy.

You can change your choice at any time by clearing this website's data in your browser — the cookie notice will appear again on your next visit.

We do not sell personal data. We share it only with service providers who help us operate — such as our website hosting provider and email service — under appropriate data-processing terms, and with authorities where the law requires it. If you load the embedded map, data is processed by Google as described above; such providers may transfer data outside the EEA subject to appropriate safeguards (such as the European Commission's Standard Contractual Clauses).

Enquiry correspondence is kept for as long as needed to handle your request and for a reasonable period afterwards. Booking and invoicing records are kept for as long as Greek tax and commercial law requires. We delete or anonymise data once it is no longer needed.

Under the GDPR you have the right to access, rectify or erase your personal data, to restrict or object to its processing, and to data portability. To exercise any right, email info@theofanomykonos.com. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (dpa.gr).

We may update this policy from time to time — the "Last updated" date above always reflects the current version. Any material change will be posted on this page.