1. Data Controller
This website is operated by GALLION MON IKE, hereinafter referred to as “we”, “us”, or “our”. We are the data controller responsible for your personal data as described in this Privacy Policy.
Contact details:
GALLION MON IKE
Ornos, Mykonos, 84600, Greece
Email: info@mykonosheaven.com
Phone: +30 6973380419
2. Information We Collect
We may collect and process the following personal data:
- Contact information — name, email address, and phone number when you contact us directly.
- Booking data — reservation details processed via our booking partner WebHotelier (mykonosheaven.reserve-online.net).
- Usage data — pages visited, time spent on site, browser type, device type, and IP address collected via analytics cookies (where consent is given).
- Technical data — cookies and similar tracking technologies as described in Section 5.
3. How We Use Your Data
We use your personal data for the following purposes:
- To respond to enquiries and provide information about the villa.
- To facilitate and manage reservations through our booking partner.
- To improve our website and user experience based on analytics.
- To comply with legal and regulatory obligations.
- To protect the security and integrity of our website.
The legal bases for processing your data are: your consent (Article 6(1)(a) GDPR), the performance of a contract (Article 6(1)(b) GDPR), our legitimate interests (Article 6(1)(f) GDPR), and compliance with a legal obligation (Article 6(1)(c) GDPR).
4. Third-Party Services
Our website integrates third-party services that may process personal data on our behalf or independently. These include:
- Google Maps — We embed Google Maps iframes to display our location. Google may set cookies and collect usage data subject to Google's Privacy Policy.
- WebHotelier — Online reservations are processed via WebHotelier (Reserve Online). Their privacy practices are governed by their own privacy policy. We recommend reviewing it before making a booking.
- Google Fonts— Fonts are loaded from Google's servers, which may log your IP address.
5. Cookies
Our website uses cookies — small text files stored on your device — to ensure the site functions correctly and to understand how visitors use it. The cookies we use fall into the following categories:
| Type | Purpose | Consent required |
|---|---|---|
| Strictly necessary | Enable core site functionality (e.g. cookie preference storage). | No |
| Analytics | Understand visitor behaviour and improve the site (e.g. Google Analytics). | Yes |
| Third-party | Google Maps and WebHotelier embeds. | Yes |
You can withdraw your cookie consent at any time by clearing your browser's cookies and revisiting the site. Most browsers also allow you to block or delete cookies through their settings.
6. Data Retention
We retain personal data only for as long as is necessary to fulfil the purposes set out in this policy, or as required by applicable law. Booking records are retained for the period required by Greek accounting and tax legislation. Analytics data is retained in aggregated, anonymised form.
7. International Transfers
Some third-party services (e.g. Google) may transfer data outside the European Economic Area (EEA). Where this occurs, appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.
8. Your Rights Under GDPR
As a data subject under the General Data Protection Regulation (EU) 2016/679, you have the following rights:
- Right of access — request a copy of the personal data we hold about you.
- Right to rectification — request correction of inaccurate or incomplete data.
- Right to erasure — request deletion of your personal data (“right to be forgotten”).
- Right to restriction — request that we limit the processing of your data.
- Right to data portability — receive your data in a structured, machine-readable format.
- Right to object — object to processing based on legitimate interests.
- Right to withdraw consent — withdraw consent at any time without affecting prior processing.
To exercise any of these rights, please contact us at info@mykonosheaven.com. We will respond within 30 days. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA).
9. Children's Privacy
Our website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The “Last updated” date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically.