Privacy Policy
Spilia Villas – Plan Escape and More
Last updated: 23 October 2026
1. Introduction
Welcome to Spilia Villas (www.spilia-villas.gr).
We respect your privacy and are committed to protecting your personal information in accordance with the General Data Protection Regulation (GDPR) and applicable data protection legislation.
This website is operated by Papadakis Emmanouil, trading under the distinctive title Plan Escape and More, offering holiday accommodation under the brand name Spilia Villas.
Business address: Spilia, Platanias, Chania, Crete, Greece
Email: info@spilia-villas.gr
Website: https://www.spilia-villas.gr
Papadakis Emmanouil is the data controller for the personal information processed directly by Spilia Villas.
2. Personal Information We Collect
When you visit our website, contact us or make a reservation, we may collect:
- Your full name
- Email address and telephone number
- Reservation dates and accommodation preferences
- Number of guests and booking details
- Information you voluntarily provide in messages
- Payment confirmation and transaction information
- Technical information, such as IP address, browser type and website usage data, subject to applicable privacy and consent requirements
We collect only information reasonably necessary to provide our accommodation services, manage reservations and operate our website.
3. How We Use Your Information
We process personal information to:
- Manage and confirm accommodation reservations
- Communicate with guests before, during and after their stay
- Process payments and maintain transaction records
- Respond to enquiries and provide customer support
- Comply with applicable legal, accounting and tax obligations
- Maintain website security
- Analyse website performance where permitted and subject to the appropriate consent
4. Legal Basis for Processing
Depending on the purpose, we process personal information on the following legal bases:
- Performance of a contract: To manage reservations and provide accommodation services.
- Legal obligations: To comply with applicable tax, accounting and other legal requirements.
- Legitimate interests: To maintain website security and respond to relevant business enquiries, where those interests are not overridden by your rights.
- Consent: For optional analytics cookies and other processing activities that require consent.
Where processing is based on consent, you may withdraw that consent at any time.
5. Reservations and Payments
Reservations made directly through our website are managed using our online booking system.
Online payments are processed through PayPal, with the full reservation amount payable through the payment service.
PayPal may process payment and transaction information in accordance with its own privacy policy.
Spilia Villas may receive payment confirmation, transaction references and information necessary to manage the reservation and maintain financial records.
We do not require guests to provide their PayPal passwords or payment card security codes directly to us.
For information about PayPal’s processing of personal data, please visit https://www.paypal.com.
6. Cookies and Google Analytics
Our website uses cookies and similar technologies for essential website functionality and, where enabled and permitted, website analytics.
We use Google Analytics 4 to help us understand website traffic and improve the visitor experience.
Non-essential analytics cookies will be used only where the required consent has been obtained.
Visitors can manage their cookie preferences through our cookie consent system.
Further information is available in our separate Cookie Policy.
7. Sharing of Personal Information
We may share personal information with service providers where necessary to operate our business, including:
- Website hosting and technical support providers
- Our website booking system and related service providers
- PayPal for payment processing
- Google for analytics services, where applicable
- Accounting or other professional service providers where necessary
We do not sell guests’ personal information.
Service providers may act as processors or independent controllers, depending on their role.
8. International Data Transfers
Some service providers may process personal information outside the European Economic Area or the United Kingdom.
Where applicable, we take steps to ensure that international transfers are supported by appropriate legal safeguards, as required by data protection legislation.
9. Data Retention
We retain personal information only for as long as necessary for the purposes for which it was collected, including providing accommodation services, resolving disputes and complying with applicable tax, accounting and legal obligations.
Retention periods depend on the type of information and the relevant legal requirements.
10. Your Data Protection Rights
Subject to applicable law, you may have the right to:
- Access your personal information
- Request correction of inaccurate information
- Request deletion of personal information
- Request restriction of processing
- Object to certain processing activities
- Request data portability
- Withdraw consent where processing is based on consent
To exercise your rights, please contact:
You may also lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr) or another competent supervisory authority.
11. Data Security
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure.
However, no method of transmitting or storing information online can guarantee absolute security.
12. External Websites
Our website may contain links to third-party websites, including payment services and accommodation platforms.
We are not responsible for the privacy practices of independently operated third-party websites. We encourage visitors to review their privacy policies.
13. Children’s Privacy
Reservations may include children travelling with parents or guardians.
We process information relating to children only where necessary for providing accommodation services or meeting applicable legal requirements.
14. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our services, technology or applicable legal requirements.
The latest version will be published on this page with an updated revision date.
15. Contact Us
For any questions about this Privacy Policy or the processing of your personal information, please contact:
Papadakis Emmanouil
Plan Escape and More – Spilia Villas
Spilia, Platanias, Chania, Crete, Greece
Email: info@spilia-villas.gr
Website: https://www.spilia-villas.gr