This Privacy Policy explains how the business House of Marisol (hereinafter “We” or “Data Controller”) collects, uses, stores, and protects your personal data, fully complying with the General Data Protection Regulation (EU) 2016/679 (GDPR).
1. Data Controller
The Data Controller for the data collected through the website https://houseofmarisol.com/ and the accommodation services is:
House of Marisol
- Address: Pedassos Residence, Methoni 240 06, Greece
- Email: info@houseofmarisol.com
- Phone: +30 6996341862
2. Collection of Personal Data & Legal Basis
We collect data in the following ways and for the purposes outlined below, based on the corresponding legal bases of the GDPR:
| Data Category | Purpose of Processing | Legal Basis (GDPR) |
| Booking Details (Name, Surname, Email, Phone, Stay Dates) | Management and completion of your booking and provision of accommodation services. | Performance of a Contract (Article 6(1)(b)) |
| Billing Information (Address, Tax ID – where required) | Compliance with our legal and tax obligations. | Legal Obligation (Article 6(1)(c)) |
| Email/Name (Via Newsletter Sign-up Form) | Sending newsletters, special offers, and updates. | Consent (Article 6(1)(a)) |
| Comment Data (Name, Email, IP Address, browser user agent string) | Publishing comments, spam detection, and security improvement. | Legitimate Interest (Article 6(1)(f)) |
| Cookies / Technical Data (As noted in Section 4) | Website functionality and traffic analysis. | Consent / Legitimate Interest |
3. Sending Promotional Material (Newsletter) – MailChimp & Brevo
At House of Marisol, we offer the option to subscribe to our newsletter to receive information and special offers.
- Data Collection: The Subscription requires your email and, optionally, your name.
- Legal Basis: Processing is based exclusively on your consent (opt-in).
- Data Processors: For the delivery and management of our newsletters, we use the following platforms, which act as Data Processors on our behalf:
- MailChimp (The Rocket Science Group LLC d/b/a Mailchimp, USA)
- Brevo (Sendinblue SAS, France)
Your data is transferred to these platforms for the technical support of email delivery. You can withdraw your consent at any time by clicking the unsubscribe link present in every newsletter or by contacting us directly.
4. Cookies and Embedded Content
Our website uses cookies to improve the user experience.
- Comment Cookies: If you leave a comment on our site, you may opt-in to saving your name, email address, and website in cookies for your convenience (duration: 1 year).
- Login Cookies: If you have an account, cookies are used to store your login information.
- Embedded Content: Articles on this site may include embedded content (e.g., videos, images, articles). Embedded content from other websites behaves in the same way as if the visitor had visited the other website. These websites may collect data, use cookies, and monitor your interaction.
5. Data Retention
We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, taking into account our legal obligations:
- Booking/Billing Data: Retained for the period required by applicable tax and insurance legislation (usually 5-10 years).
- Newsletter Data: Retained until you withdraw your consent.
- Comments: The comment and its metadata are retained indefinitely so we can recognize and approve any follow-up comments automatically.
6. Your Rights (GDPR Data Subject Rights)
In accordance with the GDPR, you have the following rights regarding your personal data:
- Right of Access (Article 15): To request a copy of the data we hold about you.
- Right to Rectification (Article 16): To request the correction of inaccurate or incomplete personal data.
- Right to Erasure (“Right to be Forgotten”) (Article 17): To request the deletion of your personal data, provided there is no legal basis for the continuation of processing.
- Right to Restriction of Processing (Article 18): To request the restriction of the processing of your data, under specific conditions.
- Right to Data Portability (Article 20): To request to receive your data in a structured, commonly used, and machine-readable format, or to have it transmitted to another controller.
- Right to Object (Article 21): To object to data processing based on legitimate interest, unless the Controller demonstrates compelling legitimate grounds.
- Right to Withdraw Consent (Article 7): Where processing is based on consent, you have the right to withdraw it at any time.
7. Exercising Rights and Complaints
To exercise any of your above rights, please contact the Data Controller via email at info@houseofmarisol.com.
If you believe that the processing of your personal data violates the GDPR, you have the right to complain with the competent supervisory authority:
Hellenic Data Protection Authority (HDPA)
Website: www.dpa.gr
Address: 1-3 Kifissias Ave., P.C. 115 23, Athens, Greece
Phone: +30 210 6475600