GIRNI Hotels
Privacy Policy
Last updated: 6 October 2026
GIRNI Hotels ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect the personal data of visitors to this website (girnis.com) and of guests of our hotels: Akteon Girni, Zoi Hotel by Girni, Poseidon by Girni and Olympiada by Girni. Please read it carefully. We may update this policy from time to time, so please check back for the latest version.
1. Data Controller
For the purposes of the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the data controller is GIRNI Hotels, Paralia Katerinis, Pieria, Greece. For any privacy matter, or to exercise your rights, you can contact our Data Protection Officer at g.gkirnis@yahoo.com.
2. The personal data we collect
Depending on how you interact with us, we may collect:
- information you give us through the contact form on this website (such as your name, email, phone and message);
- booking information when you reserve a stay (such as your name, contact details, dates, number of guests and preferences);
- payment details needed to guarantee or pay for a booking;
- technical data about your visit (such as IP address, browser and pages viewed), collected through cookies.
3. Bookings and our booking partner
Room reservations are handled through our online booking engine, operated on our behalf by WebHotelier (Revplus Hellas S.A., 5th km Rhodou–Lindou Ave., 851 00 Rhodes, Greece), a certified PCI-DSS Level 2 service provider that acts as our data processor under a strict contractual framework. When you book, the data you provide is processed to confirm and manage your reservation. You can contact WebHotelier's Data Protection Officer at dpo@webhotelier.net.
4. How we use your data
We use your personal data to:
- manage your bookings, including payment and your requests and preferences;
- respond to your enquiries and contact requests;
- send you commercial communications, only where you have given your consent;
- provide and improve our accommodation and services, including quality surveys.
5. Legal basis for processing
We process your data on the basis of: the performance of a contract (your booking); your consent (for example, for marketing); compliance with a legal obligation; and our legitimate interests in operating and improving our services. Where processing is based on consent, you may withdraw it at any time, without affecting the lawfulness of earlier processing.
6. Sharing and disclosure
We share your data with our booking processor and other service providers acting on our behalf. We may also disclose data where necessary to comply with the law or legal process, to respond to public authorities, to enforce our terms, and to protect our rights, safety and property, or those of others.
7. International transfers
Our booking data is stored in the cloud using Amazon Web Services, in data centres located in Frankfurt, Germany and in N. Virginia, USA. Where data is transferred outside the European Economic Area, it remains protected by appropriate safeguards required by law, such as EU-approved standard contractual clauses.
8. Data retention
We keep your personal data only for as long as necessary for the purposes described here, including for the duration of our relationship with you and to meet legal obligations (for example, tax and accounting records), after which it is deleted or anonymised.
9. Your rights
Under the GDPR you have the right to: access your data; have inaccurate data corrected; have your data erased; restrict or object to processing; data portability; and to withdraw consent. To exercise these rights, contact us at g.gkirnis@yahoo.com, free of charge. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).
10. Minors
This website and our booking services are not directed at children under the age of sixteen (16), and we ask that they do not provide personal data to us.
11. Cookies
We use cookies that are necessary for the website to function, and — only with your consent — cookies that help us understand how the site is used. You can manage your choices at any time through the cookie banner or your browser settings.
12. Security
We apply appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access or disclosure, taking into account the state of the art and the risks involved.
13. Contact
For any question about this Privacy Policy or about how we handle your personal data, please contact us at g.gkirnis@yahoo.com or through the contact page of this website.
GIRNI Hotels ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect the personal data of visitors to this website (girnis.com) and of guests of our hotels: Akteon Girni, Zoi Hotel by Girni, Poseidon by Girni and Olympiada by Girni. Please read it carefully. We may update this policy from time to time, so please check back for the latest version.
1. Data Controller
For the purposes of the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the data controller is GIRNI Hotels, Paralia Katerinis, Pieria, Greece. For any privacy matter, or to exercise your rights, you can contact our Data Protection Officer at g.gkirnis@yahoo.com.
2. The personal data we collect
Depending on how you interact with us, we may collect:
- information you give us through the contact form on this website (such as your name, email, phone and message);
- booking information when you reserve a stay (such as your name, contact details, dates, number of guests and preferences);
- payment details needed to guarantee or pay for a booking;
- technical data about your visit (such as IP address, browser and pages viewed), collected through cookies.
3. Bookings and our booking partner
Room reservations are handled through our online booking engine, operated on our behalf by WebHotelier (Revplus Hellas S.A., 5th km Rhodou–Lindou Ave., 851 00 Rhodes, Greece), a certified PCI-DSS Level 2 service provider that acts as our data processor under a strict contractual framework. When you book, the data you provide is processed to confirm and manage your reservation. You can contact WebHotelier's Data Protection Officer at dpo@webhotelier.net.
4. How we use your data
We use your personal data to:
- manage your bookings, including payment and your requests and preferences;
- respond to your enquiries and contact requests;
- send you commercial communications, only where you have given your consent;
- provide and improve our accommodation and services, including quality surveys.
5. Legal basis for processing
We process your data on the basis of: the performance of a contract (your booking); your consent (for example, for marketing); compliance with a legal obligation; and our legitimate interests in operating and improving our services. Where processing is based on consent, you may withdraw it at any time, without affecting the lawfulness of earlier processing.
6. Sharing and disclosure
We share your data with our booking processor and other service providers acting on our behalf. We may also disclose data where necessary to comply with the law or legal process, to respond to public authorities, to enforce our terms, and to protect our rights, safety and property, or those of others.
7. International transfers
Our booking data is stored in the cloud using Amazon Web Services, in data centres located in Frankfurt, Germany and in N. Virginia, USA. Where data is transferred outside the European Economic Area, it remains protected by appropriate safeguards required by law, such as EU-approved standard contractual clauses.
8. Data retention
We keep your personal data only for as long as necessary for the purposes described here, including for the duration of our relationship with you and to meet legal obligations (for example, tax and accounting records), after which it is deleted or anonymised.
9. Your rights
Under the GDPR you have the right to: access your data; have inaccurate data corrected; have your data erased; restrict or object to processing; data portability; and to withdraw consent. To exercise these rights, contact us at g.gkirnis@yahoo.com, free of charge. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).
10. Minors
This website and our booking services are not directed at children under the age of sixteen (16), and we ask that they do not provide personal data to us.
11. Cookies
We use cookies that are necessary for the website to function, and — only with your consent — cookies that help us understand how the site is used. You can manage your choices at any time through the cookie banner or your browser settings.
12. Security
We apply appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access or disclosure, taking into account the state of the art and the risks involved.
13. Contact
For any question about this Privacy Policy or about how we handle your personal data, please contact us at g.gkirnis@yahoo.com or through the contact page of this website.