Privacy Policy

1. Introduction

This policy explains what personal data we collect through andrihouse.com, why and what rights you have regarding it, in accordance with the General Data Protection Regulation (GDPR).

2. Who we are

The data controller is Christos Spyridon Karydis, son of the owner of Andri House Andriana, Marathias, Corfu 49084, Greece. For any matter regarding your personal data, contact [email protected] or +30 690 654 2839.

3. What data we collect

We collect data in the following situations:

• Contact form: your name, email, phone (optional) and your message, when you send us a question through the form.
• Booking request: the dates and number of guests you choose (adults, children and their ages), your name, email, phone (optional) and message (optional), together with the indicative price you saw, so we can get in touch with you about your booking.
• Both forms are processed by our provider, Formspree, and reach us by email.
• If you contact us on WhatsApp or by phone, we receive the details you share there.
• Cookies & analytics: see section 4 below.

We do not collect payment data. Bookings made on Booking.com are handled by Booking.com.

4. Cookies and similar technologies

• Cloudflare Web Analytics: anonymous traffic statistics, without using cookies or personal data. Always active.
• Google Analytics: website usage statistics via cookies. Activated only if you click "Accept" on the cookie banner.
• Google Maps: the map in the Location section is loaded from Google, which may set its own cookies under its own policy.
• Your choices on the cookie banner and your language are remembered in your browser.

You can change your choice about analytics cookies at any time through "Cookie settings" at the bottom of every page.

The availability calendar shows booked dates from the Booking.com calendar of Andri House. It contains dates only and collects no data about you.

5. How we use your data

We use your data solely to respond to your enquiry or booking request, and analytics data to understand how the website is used and to improve it.

6. Legal basis for processing

Processing of the data of the contact form and the booking request is based on your consent when submitting the form, and on the steps needed before a booking at your request. Use of analytics cookies (Google Analytics) is based exclusively on your explicit consent via the cookie banner. Cloudflare Web Analytics is based on legitimate interest, as it does not process personal data.

7. Sharing with third parties

Your data may be transmitted to the following providers, solely for the operation of the website: Formspree (handling of the contact form and the booking request), Google (Analytics, if you gave consent, and the embedded map), Cloudflare (hosting, analytics). We do not sell or rent your data to third parties.

8. International data transfers

Some of the providers above (e.g. Google, Formspree) may process data outside the European Economic Area. In these cases, the providers apply appropriate safeguards (such as the European Commission's Standard Contractual Clauses).

9. Data retention

Contact messages and booking requests are retained for as long as necessary to handle your enquiry. The maximum period is one year. Analytics data is retained according to the default retention periods of Google Analytics and Cloudflare.

10. Your rights

Under the GDPR, you have the right to access, rectify, erase, restrict processing of, port and object to your data. To exercise any of these rights, contact [email protected]. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

11. Data security

The website is hosted and protected via Cloudflare's infrastructure, with an encrypted connection (HTTPS) on all pages.

12. Changes to this policy

We may update this policy from time to time. The last-updated date is shown at the top of this page.

13. Contact

For any question about this privacy policy, contact us at [email protected].