Privacy Policy

Maggie’s Blissful Escape — Loutraki, Greece

Last updated: September 2026

This Privacy Policy explains how personal data is collected, used and protected when you visit the Maggie’s Blissful Escape website, make a direct booking, communicate with us or stay at the property.

Personal data is processed in accordance with applicable data protection legislation, including the General Data Protection Regulation (GDPR).

1 — DATA CONTROLLER

Maggie’s Blissful Escape is operated by Georgia Karachristou as a private host in Loutraki, Greece.

For personal data processed in connection with direct bookings, guest communication and operation of this website, Georgia Karachristou acts as the data controller.

The website, booking systems and guest communications may be administered on her behalf by an authorised person.

Contact:

Email: info@maggiesblissfulescape.com
Website: maggiesblissfulescape.com
Location: Loutraki, Greece

2 — PERSONAL DATA WE MAY COLLECT

Depending on how you use the website and booking service, we may collect and process:

Full legal name.
Email address.
Telephone number.
Arrival and departure dates.
Number of guests.
Booking and accommodation information.
Messages, requests and other communications relating to the booking or stay.
Payment status and transaction information required to administer the booking.
Where required by applicable law, Greek Tax Identification Number (AFM/TIN) for guests who are Greek tax residents.
For guests from outside Greece, where required by applicable law, the full legal name exactly as shown on the passport or EU identity card and the corresponding passport or EU identity card number.
Technical and usage information generated when you use the website, such as device type, browser, approximate geographic area, pages viewed, referral source and website interactions, subject to your consent preferences where required.

Identification and tax details are requested only for the person who made the booking unless additional information is required by applicable law.

3 — WHY WE USE PERSONAL DATA

To process, administer and confirm direct bookings.
To provide the booked accommodation.
To communicate before, during and after the stay.
To process and verify payments.
To comply with applicable Greek tax, accommodation-registration and other legal obligations.
To manage booking changes, cancellations, refunds and payment disputes.
To manage damage or security incidents where necessary.
To respond to enquiries and provide guest support.
To operate, maintain and secure the website and booking systems.
With consent where required, to measure website usage and improve the website and direct-booking experience.

4 — LEGAL BASES FOR PROCESSING

We process different categories of personal data on different legal bases:

Performance of a contract: booking details and information necessary to process and provide your accommodation reservation.
Legal obligation: information that must be collected or retained to comply with applicable Greek tax, accommodation-registration or other legal requirements, including AFM/TIN or passport/EU identity information where required.
Legitimate interests: reasonable activities necessary for security, fraud prevention, administration, resolving disputes and protecting the property and legal rights, provided those interests do not override your rights and freedoms.
Consent: analytics and other non-essential cookies or similar technologies where consent is required.

5 — BEDS24

The direct booking system used by Maggie’s Blissful Escape is provided through Beds24.

Information submitted during the direct-booking process is processed through Beds24 systems in order to operate the booking engine, manage reservations, send booking-related communications and provide related booking functionality.

Beds24 may process personal data on our behalf in connection with these services.

6 — PAYPAL

Direct-booking payments may be processed through PayPal.

When you choose PayPal, payment information is processed by PayPal according to PayPal’s own privacy policy and terms.

Maggie’s Blissful Escape does not receive or store your complete payment-card details.

We may receive information necessary to identify and administer the payment, such as transaction status, transaction reference, payer information and the amount paid.

7 — WEBSITE HOSTING

This website is hosted using Hostinger services.

Technical information may be processed by the hosting infrastructure where necessary to deliver the website, maintain its security, diagnose technical problems and provide hosting services.

This may include information such as IP addresses, request logs and other technical server information.

8 — GOOGLE ANALYTICS 4

This website uses Google Analytics 4 (GA4) to help us understand how visitors use the website and improve its content, performance and booking experience.

Analytics information may include:

Pages viewed.
Website interactions and events.
Session and traffic-source information.
Device and browser information.
Approximate geographic information.

We do not intentionally send names, email addresses, telephone numbers, AFM/TIN, passport numbers, identity-card numbers or other directly identifying booking information to Google Analytics.

Where consent is required, analytics storage is activated only in accordance with the visitor’s consent preferences.

9 — GOOGLE CONSENT MODE

The website uses a consent-management mechanism together with Google Consent Mode v2.

Before a visitor grants consent, Google services receive consent signals indicating that analytics storage and, where applicable, advertising-related storage are denied.

After the visitor makes a choice, those signals are updated according to the selected consent preferences.

Visitors can refuse optional analytics cookies without preventing access to the main website and booking information.

10 — GOOGLE SEARCH CONSOLE

Google Search Console is used to monitor how the website performs in Google Search, including search impressions, clicks and indexing information.

Search Console does not provide us with the identity of individual users who search on Google.

11 — COOKIES AND SIMILAR TECHNOLOGIES

The website may use strictly necessary cookies or similar technologies required for security, website functionality or operation of the booking service.

Optional analytics cookies or similar technologies are used only according to the visitor’s consent preferences where consent is legally required.

You can accept, reject or manage optional cookies through the consent banner or cookie-preference controls available on the website.

12 — THIRD PARTIES AND SERVICE PROVIDERS

We do not sell personal data.

Personal data may be disclosed or made available where necessary to:

Beds24 for reservation and booking management.
PayPal for payment processing.
Hostinger for website hosting and technical infrastructure.
Google in connection with Google Analytics and Search Console.
Technical, accounting, legal or other professional service providers where reasonably necessary.
Competent Greek authorities where disclosure is required by law.

13 — INTERNATIONAL DATA TRANSFERS

Some service providers used by the website may process personal data in countries outside Greece or outside the European Economic Area.

Where applicable, international transfers are subject to appropriate safeguards or another lawful transfer mechanism recognised under applicable data protection law.

14 — DATA RETENTION

Personal data is not retained indefinitely. Different categories of data are kept for different periods depending on the purpose of processing and applicable legal requirements.

Booking, payment, accounting and tax records: generally retained for up to five (5) years from the end of the relevant tax or accounting period, or for a longer period where this is required by applicable law, a tax audit, an unresolved dispute, chargeback or legal claim.
AFM/TIN, passport or EU identity-card information: retained only where and for as long as necessary to satisfy applicable legal, tax or accommodation-registration obligations and, where the information forms part of a legally required booking or tax record, for the corresponding mandatory retention period.
Booking-related communications: may be retained together with the relevant booking record where necessary for administration, legal compliance, disputes or legal claims.
Enquiries that do not result in a booking: normally deleted or anonymised within twelve (12) months, unless there is a legitimate reason to retain them for longer.
Google Analytics user-level and event-level data: configured to be retained for fourteen (14) months, subject to Google Analytics functionality and the visitor’s consent preferences.

Once the applicable retention period has expired and there is no further lawful reason to retain the information, personal data will be deleted or anonymised where reasonably practicable.

15 — DATA SECURITY

Reasonable technical and organisational measures are used to protect personal data against unauthorised access, alteration, loss, destruction or disclosure.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

16 — YOUR DATA PROTECTION RIGHTS

Subject to applicable law, you may have the right to:

Request access to your personal data.
Request correction of inaccurate or incomplete information.
Request deletion of personal data where the legal conditions are met.
Request restriction of processing in certain circumstances.
Object to certain processing carried out on the basis of legitimate interests.
Withdraw consent at any time where processing relies on consent.
Request data portability where applicable.

Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn and does not require deletion of information that must continue to be retained under another lawful basis, such as a legal or tax obligation.

To exercise a privacy right, contact info@maggiesblissfulescape.com.

You may also lodge a complaint with the competent data protection supervisory authority.

17 — EXTERNAL LINKS AND COMMUNICATION SERVICES

The website contains links or contact options for third-party services including Instagram, WhatsApp and Viber.

If you choose to use one of these services, information processed by that provider is governed by its own privacy policy and terms.

18 — CHILDREN

The website and direct-booking service are intended for adults making accommodation reservations. The person making a booking must be at least 18 years old.

We do not intentionally use this website to collect personal data directly from children for marketing or analytics purposes.

19 — CHANGES TO THIS PRIVACY POLICY

This Privacy Policy may be updated where necessary to reflect changes in legal requirements, website functionality, booking systems or service providers.

The current version will be published on this website and will show the latest update date.

20 — CONTACT

For questions about this Privacy Policy or the processing of personal data, please contact:

Georgia Karachristou
Private host — Maggie’s Blissful Escape
Loutraki, Greece
Email: info@maggiesblissfulescape.com