Privacy policy

Last updated: June 10, 2026

This Privacy Policy explains how Vendema Residence Mykonos collects, uses, stores and protects your personal data when you visit our website, contact us, submit a request, make an enquiry or use our online booking options.

We are committed to protecting your privacy and processing your personal data in accordance with the General Data Protection Regulation (EU) 2016/679, the applicable Greek data protection legislation and the relevant guidance of the Hellenic Data Protection Authority.

By using this website, you acknowledge that you have read and understood this Privacy Policy.

1. Data Controller

The data controller responsible for the processing of your personal data is:

Vendema Residence Mykonos
Legal Name: Markos Petrakis
Address: Mykonos, 84600
Email: info@vendemamykonos.com
Website: https://vendemamykonos.com

For any privacy-related request, you may contact us at:
info@vendemamykonos.com

2. Personal Data We Collect

We may collect and process the following categories of personal data:

a. Information you provide voluntarily

When you contact us, submit a form, request information or make a booking enquiry, we may collect:

Full name
Email address
Phone number
Country or location, if provided
Arrival and departure dates
Number of guests
Villa preference
Special requests or message content
Any other information you choose to provide through our forms, email, telephone or booking channels

b. Booking-related information

If you proceed with a reservation through our booking system or an external booking provider, additional data may be collected, such as:

Reservation details
Stay dates
Guest information
Payment or billing details
Communication related to your booking

Payment information is processed by secure third-party payment or booking providers. We do not intentionally store full payment card details on this website.

c. Automatically collected technical data

IP address
Browser type and version
Device type
Operating system
Pages visited
Date and time of visit
Referring website
Cookie preferences
Website usage data

This information helps us maintain the security, functionality and performance of our website.

3. How We Use Your Personal Data

We process your personal data for the following purposes:

To respond to your enquiries
To manage booking requests and reservations
To provide information about our villas, services and availability
To communicate with you before, during or after your stay
To provide customer support
To improve our website and services
To comply with legal, tax and accounting obligations
To protect our legal rights and prevent misuse of our website
To send marketing communications only where you have given your consent or where permitted by law

We do not sell your personal data.

4. Legal Bases for Processing

Depending on the purpose, we process your personal data on one or more of the following legal bases:

a. Contractual necessity
We process personal data when it is necessary to respond to your booking request, manage a reservation or provide accommodation-related services.

b. Legal obligation
We may process and retain certain data where required by law, including tax, accounting, invoicing or regulatory obligations.

c. Legitimate interest
We may process certain data to operate our website, improve our services, protect our business, prevent fraud and ensure website security, provided that your rights and freedoms do not override our interests.

d. Consent
We rely on your consent for optional processing activities, such as non-essential cookies, analytics, marketing communications or newsletter subscriptions, where applicable.

You may withdraw your consent at any time.

5. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to function properly, improve user experience, analyse website traffic and, where applicable, support marketing or advertising activities.

Cookies may include:

a. Strictly necessary cookies
These cookies are required for the website to work properly and cannot usually be disabled through our cookie banner.

b. Analytics cookies
These cookies help us understand how visitors use our website, for example which pages are visited most often. Analytics cookies are used only with your consent, where required.

c. Marketing cookies
These cookies may be used to deliver or measure advertising campaigns. They are used only with your prior consent.

d. Third-party cookies
Some third-party services, such as Google tools, maps, embedded content, booking engines or social media links, may place cookies or collect data if enabled and accepted.

When you first visit our website, you can accept, reject or customise non-essential cookies through our cookie banner. You may change or withdraw your cookie consent at any time through the cookie settings available on the website.
You can also control cookies through your browser settings. Please note that blocking some cookies may affect the functionality of the website.

6. Third-Party Services

To operate our website and provide our services, we may use trusted third-party providers, including but not limited to:

Website hosting providers
WordPress plugins and website security tools
Contact form tools
Cookie consent management tools
Email service providers
Booking engine or reservation platforms
Payment providers, where applicable
Google services, such as Google Analytics, Google Tag Manager, Google Maps or Google Search Console, where enabled
Social media platforms, if you interact with our profiles or links

Our website may redirect users to an external booking platform, Reserve Online, for availability checks, booking requests and reservation management. When you use the external booking platform, your personal data and cookies may be processed by that third-party provider according to its own privacy and cookie practices.

These providers may process personal data only where necessary for the service they provide to us and in accordance with applicable data protection rules.
Our website may also contain links to external websites or platforms. We are not responsible for the privacy practices or content of third-party websites.

7. International Data Transfers

Some third-party service providers may process data outside the European Economic Area. Where this occurs, we take appropriate measures to ensure that your personal data remains protected in accordance with applicable data protection legislation, such as adequacy decisions, standard contractual clauses or other lawful transfer mechanisms.

8. How Long We Keep Your Data

We retain personal data only for as long as necessary for the purposes for which it was collected. Indicatively:

Contact form enquiries may be retained for as long as necessary to respond and manage communication.
Booking and reservation data may be retained for the period required by tax, accounting and legal obligations.
Consent records may be retained to demonstrate compliance.
Technical and security logs may be retained for a limited period for website protection and troubleshooting.

When personal data is no longer required, it is securely deleted or anonymised.

9. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, alteration or disclosure.
These measures may include secure website connections, access controls, website security tools, backups and restricted access to personal data.
However, no method of online transmission or electronic storage is completely secure. For this reason, we cannot guarantee absolute security, but we make reasonable efforts to protect your data.

10. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to data portability
Right to object to processing
Right to withdraw consent at any time, where processing is based on consent
Right to lodge a complaint with a supervisory authority

The Hellenic Data Protection Authority is the competent supervisory authority in Greece.
To exercise your rights, you may contact us at:
info@vendemamykonos.com
We may need to verify your identity before responding to your request.

11. Marketing Communications

We will only send you marketing communications, special offers or promotional updates if you have given your consent or where otherwise permitted by law.
You may unsubscribe or withdraw your consent at any time by contacting us at:
info@vendemamykonos.com
or by using the unsubscribe option included in our marketing emails, where applicable.

12. Children’s Privacy

Our website and services are not directed to children under the age of 16. We do not knowingly collect personal data from children without appropriate parental or guardian consent.
If you believe that a child has provided us with personal data, please contact us so that we can take appropriate action.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our website, services, legal obligations or data processing practices.
The updated version will be posted on this page with a revised “Last updated” date.

14. Contact

For any questions about this Privacy Policy or the way we process your personal data, please contact us at:
Vendema Residence Mykonos
Email: info@vendemamykonos.com
Website: https://vendemamykonos.com

15. Governing Law

This Privacy Policy is governed by the laws of Greece and the applicable laws and regulations of the European Union, including Regulation (EU) 2016/679.