PRIVACY POLICY
Last updated: September 2026
Casa Panorama takes the protection of your personal data and your privacy seriously. This Privacy Policy explains how we collect, use, store and protect personal data when you visit our website, contact us or make a reservation.
We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), as well as applicable Greek and European data protection legislation.
1. DATA CONTROLLER
The controller responsible for the processing of personal data in connection with this website is:
Casa Panorama
Beach Elia
Elia 63088
Chalkidiki, Greece
Tax Identification Number (AFM): 802235370
GEMI Number: 172688057000
Email: info@casa-panorama.com
Website: www.casa-panorama.com
If you have any questions regarding this Privacy Policy or the processing of your personal data, you can contact us using the email address above.
2. VISITING OUR WEBSITE
When you visit our website, certain technical information may automatically be transmitted by your browser and processed by our website and hosting infrastructure.
This information may include:
-
IP address
-
date and time of access
-
browser type and version
-
operating system
-
referring website
-
pages visited
-
device information
-
technical connection and security information
This information may be processed in order to provide the website, ensure its functionality and stability, detect technical problems and protect the website against misuse, fraud and cyberattacks.
Where applicable, the legal basis for this processing is our legitimate interest pursuant to Article 6(1)(f) GDPR in providing a secure and functional website.
3. WEBSITE PLATFORM AND HOSTING – WIX
Our website is created and hosted using services provided by:
Wix.com Ltd.
Yunitsman 5 St
Tel Aviv
Israel
Wix provides the technical platform and hosting infrastructure necessary for the operation of this website.
When you visit our website, Wix may process certain information on our behalf, including IP addresses, technical device and browser information, website activity and other technical information required to provide and secure the website.
In relation to personal data processed by Wix on our behalf and according to our instructions, Casa Panorama acts as the Data Controller and Wix generally acts as a Data Processor within the meaning of the GDPR.
Wix operates internationally and may process or store personal data in countries outside the European Economic Area (EEA).
Israel has been recognised by the European Commission as providing an adequate level of protection for personal data.
Where personal data is transferred to other countries outside the EEA that are not covered by an adequacy decision, Wix states that appropriate safeguards, including Standard Contractual Clauses approved by the European Commission and additional technical, contractual and organisational measures, may be used.
Further information about the processing of personal data by Wix can be found in the Wix Privacy Policy.
4. COOKIES AND SIMILAR TECHNOLOGIES
Our website uses or may use cookies and similar technologies.
Cookies are small files stored on your device when you visit a website.
Some cookies are technically necessary for the website to function properly, securely and reliably. These cookies may be used without separate consent where permitted by applicable law.
Other cookies and technologies may be used for purposes such as:
-
website analytics and statistics
-
remembering visitor preferences
-
improving website functionality
-
integrating external services
-
social media functionality
-
marketing and advertising
Where required by applicable law, non-essential cookies and similar technologies will only be activated after you have provided your consent through our cookie consent system.
Where processing is based on consent, the legal basis is Article 6(1)(a) GDPR.
You can refuse non-essential cookies or withdraw or modify your consent at any time through the cookie settings provided on our website.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
5. CONTACTING CASA PANORAMA
If you contact us by email, telephone or through another communication channel, we process the information you provide in order to respond to and manage your enquiry.
This may include:
-
your name
-
email address
-
telephone number
-
requested travel dates
-
information concerning your requested stay
-
the content of your message
-
other information voluntarily provided by you
Where your enquiry concerns a reservation, potential reservation or accommodation contract, the legal basis for processing is Article 6(1)(b) GDPR.
For other enquiries, processing may be based on our legitimate interest in communicating with customers and interested persons pursuant to Article 6(1)(f) GDPR.
Correspondence is retained only for as long as necessary for the respective purpose or for as long as required by applicable law.
6. RESERVATIONS AND ONLINE BOOKING – WEBHOTELIER
For online reservations, Casa Panorama uses the WebHotelier booking engine.
When you click on the “BOOK NOW” button on our website, you are redirected to our external booking environment at:
casapanorama.reserve-online.net
The booking system is provided by:
WebHotelier Technologies Ltd
Mnasiadou 9
Demokritos Building, Office 16
1065 Nicosia
Cyprus
Data Protection Contact:
dpo@webhotelier.net
WebHotelier provides the online booking system used to process reservations for Casa Panorama.
Where WebHotelier processes personal data on our behalf and according to our instructions, Casa Panorama acts as the Data Controller and WebHotelier acts as a Data Processor within the meaning of the GDPR.
When you make an online reservation, personal data necessary for processing your booking may be collected.
This may include:
-
first and last name
-
postal address
-
country of residence
-
email address
-
telephone number
-
arrival and departure dates
-
number and age category of guests where required
-
selected room or accommodation category
-
booking preferences
-
special requests voluntarily provided by you
-
booking and transaction information
-
payment information where required for the selected booking or rate
This information may be used to:
-
process and confirm your reservation;
-
manage, modify or cancel your reservation;
-
communicate with you regarding your booking and stay;
-
provide the accommodation and services requested;
-
process payments or guarantee reservations where applicable;
-
prevent fraudulent transactions; and
-
comply with applicable legal, tax and accounting obligations.
The processing of personal data necessary to make and manage your reservation is based on Article 6(1)(b) GDPR, as the processing is necessary for the performance of a contract or in order to take steps at your request prior to entering into a contract.
Where information must be processed or retained in order to comply with legal, tax, accounting or regulatory obligations, processing is based on Article 6(1)(c) GDPR.
Where optional processing is based on your consent, the legal basis is Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.
The WebHotelier booking environment may use cookies and similar technologies. Additional privacy information and cookie settings may therefore be provided directly within the booking environment.
7. PAYMENT PROCESSING
Payments relating to accommodation reservations may be processed through WebHotelier and/or external payment service providers.
Depending on the selected payment method, personal and payment-related information may be transmitted directly to the respective payment provider.
Such information may include:
-
name
-
booking reference
-
payment amount
-
payment method
-
transaction information
-
payment or card information where required
Casa Panorama processes payment and transaction information only to the extent necessary for managing reservations, receiving payments, accounting, preventing fraud and complying with applicable legal obligations.
The legal basis is generally Article 6(1)(b) GDPR for contractual processing and Article 6(1)(c) GDPR where processing is required by law.
8. SOCIAL MEDIA – INSTAGRAM AND FACEBOOK
Our website contains or may contain links to our profiles on social media platforms, including Instagram and Facebook.
If you click on one of these links, you leave our website and access the website or application of the respective social media provider.
The respective provider is responsible for the processing of personal data that takes place on its platform in accordance with its own privacy policy.
If social media content or functionality is embedded directly into our website and this results in personal data being transmitted to the respective provider, such functionality will only be activated after consent has been obtained where required by applicable law.
9. THIRD-PARTY CONTENT AND SERVICES
Our website may contain links to or integrations with third-party services, such as:
-
online booking services
-
payment providers
-
maps and location services
-
social media platforms
-
external media or content providers
When you access an external service, personal data such as your IP address and technical information about your device may be transmitted to the respective provider.
Where consent is legally required for an integrated third-party service, the service will only be activated after you have provided your consent.
Third-party providers may act as independent data controllers for processing carried out under their own responsibility.
10. RECIPIENTS OF PERSONAL DATA
We do not sell your personal data.
Personal data may be disclosed to third parties only where necessary for operating our hotel, website and reservation services, or where disclosure is required by law.
Recipients may include:
-
Wix and website hosting/service providers
-
WebHotelier
-
payment service providers
-
IT service providers
-
accountants and tax advisers
-
professional advisers
-
other service providers necessary for operating our hotel
-
competent public authorities where disclosure is legally required
Where a service provider processes personal data on our behalf, appropriate contractual arrangements pursuant to Article 28 GDPR are used where required.
11. INTERNATIONAL DATA TRANSFERS
Some service providers used in connection with our website may process personal data outside the European Economic Area.
Where personal data is transferred outside the EEA, such transfers are carried out in accordance with the GDPR.
Depending on the destination and recipient, safeguards may include:
-
an adequacy decision adopted by the European Commission;
-
Standard Contractual Clauses approved by the European Commission; or
-
other safeguards recognised under applicable data protection law.
12. DATA RETENTION
We retain personal data only for as long as necessary for the purposes for which it was collected or as required by applicable law.
The applicable retention period depends on the type of data and the purpose for which it is processed.
Booking, payment, invoice, accounting and transaction information may be retained for the periods required under applicable Greek tax, accounting and commercial legislation.
General enquiries and correspondence are deleted when they are no longer required unless a legal obligation or legitimate interest requires longer retention.
Once the applicable retention period has expired, personal data will be deleted or anonymised unless further retention is legally permitted or required.
13. DATA SECURITY
We take appropriate technical and organisational measures designed to protect personal data against:
-
accidental or unlawful destruction;
-
loss;
-
alteration;
-
unauthorised disclosure;
-
unauthorised access; and
-
other unlawful processing.
Our website uses encrypted HTTPS communication where technically available.
However, no method of transmitting or storing information electronically can guarantee absolute security.
14. YOUR RIGHTS UNDER THE GDPR
Subject to the requirements and limitations provided by applicable law, you have the following rights regarding your personal data:
Right of access
You may request information about the personal data we process about you and obtain a copy of such data.
Right to rectification
You may request correction of inaccurate personal data and completion of incomplete personal data.
Right to erasure
Under certain circumstances, you may request the deletion of your personal data.
Right to restriction of processing
Under certain circumstances, you may request that the processing of your personal data be restricted.
Right to data portability
Where applicable, you may request to receive personal data you have provided to us in a structured, commonly used and machine-readable format and may have the right to transmit this data to another controller.
Right to object
Where processing is based on our legitimate interests, you may have the right to object to the processing of your personal data on grounds relating to your particular situation.
Right to withdraw consent
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
To exercise your rights, please contact:
We may request appropriate information to verify your identity before processing your request.
The exercise of your data protection rights is generally free of charge, subject to the conditions and exceptions provided by applicable law.
15. RIGHT TO LODGE A COMPLAINT
If you believe that the processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with a competent supervisory authority.
The competent supervisory authority in Greece is:
Hellenic Data Protection Authority (HDPA)
Athens, Greece
You may also have the right to lodge a complaint with another competent data protection supervisory authority within the European Union, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.
We encourage you to contact us first at info@casa-panorama.com so that we have an opportunity to address your concerns.
16. CHILDREN'S DATA
Our website is not specifically directed at children.
Where information concerning children is required as part of a hotel reservation, such information is processed only to the extent necessary for managing the reservation, providing accommodation and requested services or complying with applicable legal obligations.
Parents or legal guardians should not provide unnecessary personal information about children through free-text fields or special request forms.
17. AUTOMATED DECISION-MAKING
Casa Panorama does not use personal data collected directly through this website for decision-making based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you, unless expressly stated otherwise.
18. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes to our website, services, third-party providers or applicable legal requirements.
The current version of this Privacy Policy will be published on this website.
We therefore recommend reviewing this Privacy Policy periodically.
Last updated: September 2026
Casa Panorama
Beach Elia
Elia 63088
Chalkidiki, Greece
Email: info@casa-panorama.com
Website: www.casa-panorama.com