We collect only what we need to run your tour, and we never sell your data.
1. Who is responsible
Greece Holiday Tours, a tour operator in Santorini, Greece (licence MHTE 1167E70000949101). For any question about your data, email info@greeceholidaytours.com.
2. What we collect and why
- When you book: your name, email, phone, the tour, date and guests, and your answers to the booking questions (such as your ship or pick-up place). We use them to confirm and run your tour and to contact you about it. Card details go straight to Stripe; we see only the amount and the last four digits.
- When you contact us: your name, contact details and message, to answer you.
- When you visit the website: technical data such as your IP address, used by our host to deliver and protect the site, and the small items listed in our Cookie Policy.
- Only if you switch on Analytics cookies: how you use the website, through Google Analytics (pages visited, device, approximate location, and bookings made with their value and reference, never your name or contact details).
We do this to perform our contract with you, to meet tax and accounting law, and for our legitimate interest in a safe website and in answering you. Analytics run only with your consent, which you can withdraw with “Cookie settings” at the bottom of every page. We don’t send marketing emails without your consent.
3. Who we share it with
Only with those who need it to run your booking or this website:
- our guides and drivers, and partners who run part of your trip (such as a boat or winery);
- Bókun (Iceland), our booking system, which also sends your confirmation;
- Stripe (Ireland), which processes payments and checks them for fraud;
- Cloudflare, which hosts and protects this website;
- Google, for our email, for Google Analytics only if you switch it on, and for YouTube only if you play a video;
- WhatsApp, when we message each other there;
- our accountant, and authorities when the law requires it.
Some of these providers may process data outside the EU, such as in the United States, under the safeguards GDPR requires (for example the EU–US Data Privacy Framework or standard contractual clauses).
4. How long we keep it
Booking and payment records as long as Greek tax law requires (usually 5 years). Messages that didn’t lead to a booking up to 2 years. Google Analytics statistics 14 months.
5. Your rights
You can ask for a copy of your data, have it corrected or deleted (unless the law requires us to keep it), restrict or object to its use, receive it in a common format, and withdraw your consent at any time. Email info@greeceholidaytours.com; we answer within one month. You can also complain to the Hellenic Data Protection Authority (dpa.gr).
6. Changes
If this policy changes, we update this page and the date at the top.