Privacy Notice


Our Company fully shares your concern in relation to your personal data. We have recently made a number of changes, which reflect the increased requirements of the EU General Data Protection Regulation (known as the “GDPR”). Our goal is to be as honest and transparent as possible about the personal data that we collect, as well as the way we process them.

Ι. What personal data do we collect and for what purposes 

Our Company collects and processes personal data in order to provide its products and services, as well as to be able to fulfill its obligations to its (prospective) customers and suppliers.

Specifically, through this website personal data are collected and processed for the following purposes:


On our website we collect data through the specially designed communication field. Specifically, in cases where you wish to contact us for any reason, we will collect the name, email, the subject for which you contact us, as well as any personal data you wish to include in your message.

Personal data may be collected in the context of communication, which takes place either by telephone, through the numbers posted on our website, or by fax or e-mail to the posted address.


  1. Accommodation

In case you wish to book a room, we will collect your name, contact details (email, phone, if you wish to notify us), as well as payment details (credit / debit / prepaid card details). Also, if you fill in the relevant fields, we will collect your full address, the company or organization where you work, the purpose of your trip, and any personal data you choose to let us know to satisfy any of your requests.

  1. Reservation Management

Through our website, it is possible to manage bookings that have been made. In case you wish to manage a reservation, you have made, we will collect the email you used to make the reservation as well as the booking confirmation number.

  1. Room Auction

An alternative way you can book a room is the “Auction”. To be able to make a reservation this way, you must choose to sign in with a Google or Facebook account, at which point we will collect your credentials, or your email. In this case, we will collect your email, as well as the 4-digit code that will be automatically sent to you in the email and you will have to enter in the corresponding field on our website. Proceeding with this option, you will enroll in the Reward Program (“Porto Naxos Membership Program”) of our hotel.

  1. Agent Bookings

Travel agents have the ability to enter their credentials and log in to their account in order to make and manage their bookings. To subscribe to this service, you will be redirected to the WebHotelier website.

  1. Restaurant

It is possible, through our website, to add to the room reservation and reservation for the restaurant of our hotel.

  1. Ferry Transport

Through our website, it is possible to organize your ferry trip, filling in the appropriate fields of departure and arrival ports, the dates and times you wish to travel, as well as the details of your vehicle.

Porto Naxos Membership Program

To enjoy special privileges, you can sign up for our hotel’s Porto Naxos Membership Program by linking to your Google or Facebook account, where we will collect your credentials or email. In this case, we will collect your email, as well as the 4-digit code that will be automatically sent to you in the email and you will have to enter in the corresponding field on our website.

The profile of each user registered in the Porto Naxos Membership Program stores booking data as well as the points collected with each booking.


If you wish to subscribe to the newsletters we will collect your email.

 Social Plugins

Social Plugins are used on our company website.

Through the specific plugins, our Company can access only publicly disclosed information on the respective social networking platforms. The operation of the plugins is governed by the terms of the Privacy Policy.

ΙΙ. Legal bases for processing

Our Company collects and processes personal data, only in case of assistance of at least one of the following conditions:

  • Contract Execution: the processing is necessary for the proper execution of the contracts drawn up by our Company or for the taking of measures at the pre-contractual stage. For example, our Company collects and processes your personal data to provide you with its products and services, in order to be able to adequately respond to any question submitted through the communication channels (contact form, telephone, fax, email ).
  • Legal Obligation: elaboration is necessary for our compliance with obligations established by law, for example tax legislation.
  • Legal interests of the Controller or third parties, as long as these (legal interests) do not outweigh the interests of the Subject: Collection and processing are necessary to pursue the legal interests, consisting of the proper operation of our hotel, the protection of persons and property in securing the reputation of our hotel, in establishing, exercising and supporting legal claims.

Vital interests: processing is necessary to protect a person’s life or to safeguard other vital interests.

  • Consent: If required by law or when any of the above legal bases are not applied, our Company legally processes the data with your consent, which is obtained under the specific conditions provided by the GCP. For example, we obtain your consent for the collection of data through cookies.

 III. How long do we keep your personal data

We retain your personal data for as long as is required for the purpose for which they were collected, unless otherwise provided by law.

If the keeping of your data does not meet a clearly defined and legal purpose, we proceed to the secure deletion and / or destruction of your personal data based on the “Privacy and Deletion Policy of our Company”.

ΙV. To whom do we disclose and / or transmit your personal data

Our Company discloses your personal data:

  1. a) To its authorized officials,
  2. b) Bodies entrusted with the execution of specific tasks such as, but not limited to, lawyers, providers of IT products and / or services and / or support of all kinds of information and electronic systems and networks, administrative support companies, marketing companies.
  3. c) To third parties, who undertake to provide you with services on our behalf, such as, for example, other non-restrictive, booking companies, travel agencies.
  4. d) Supervisory, independent, judicial, prosecutorial, public and / or other authorities or bodies or parties to which control / monitoring of the Company’s activities has been assigned within the framework of their responsibilities.
  1. Your rights

The General Data Protection Regulation provides a number of rights and options that we are committed to satisfying. So, you can ask us:

  • inform you about the data we hold about you and how we process it. If you wish, we will provide you with a copy at your own expense. (Right of access)
  • correct inaccuracies or errors, fill in gaps or update your data. (Right of correction)
  • delete data, if we do not keep them for a specific, legal and declared purpose. (Right to forget or Right to delete)
  • suspend processing a) while questioning the accuracy of the data, b) if you consider the processing illegal (but do not wish to delete it), c) when the data is not necessary for the purpose of processing and d) for as long as it is questionable whether the reasons why we are processing your data outweigh the ones you invoke to permanently stop this processing.
  • object at any time to reasons relating to the processing of personal data which we carry out in particular for the purpose of direct marketing or profiling. The objection may, in particular, concern your compliance with a decision which we have taken by automated means. In the latter case, you can ask us to allow you to intervene. (Right of objection – Automated individual decision making)
  • to provide you with your data in a specific format (usually machine-readable) or to transfer it directly to another person in charge at your suggestion, provided, of course, that this is technically possible and always under the conditions set by law. (Right to portability).
  • not to process your data from now on, giving you the opportunity to freely revoke the consent (consent) you have given us.

You can address your requests to the address (email address for exercising the rights in the form of a link for direct sending of email).

Our Company will satisfy all your requests within one (1) month. In extremely rare cases, where the satisfaction of your rights is almost impossible for us, we will inform you immediately explaining the reasons for our relative weakness.

In case you consider that the current Legislative Framework for the protection of your Personal Data is violated, you reserve the right to submit a complaint to the Personal Data Protection Authority (

  1. Contact info

We remain at your disposal for questions and clarifications. Contact us.




VII. Date of validity- Amendments

Version 1.0