Legal

Privacy & cookie
policy.

What we collect when you visit this website or write to us, why we collect it, and the choices you have.

This policy explains what personal data we collect through nostalgiehotel.gr, why we collect it, who else sees it, and the rights you have over it.

Who we are

Nostalgie Studios & Apartments is a family-run accommodation business in Georgioupoli, Apokoronas, Chania, Crete, Greece. You can reach us by e-mail at [email protected], or by telephone on +30 697 478 9568 or +30 28250 61400.

We are the data controller for the personal data described on this page.

What we collect

Information you give us: when you send an enquiry through our contact form, or write or telephone us, we receive your name, your e-mail address and telephone number, the dates and details of the stay you are asking about, and whatever you choose to write in your message.

Information collected automatically: our server and the services listed below record technical data such as your IP address, browser and device type, the pages you open and the page that referred you.

We do not ask for special categories of personal data through this website, and no card or bank details are collected here.

Why we use it

  • To answer your enquiry and prepare a possible booking — Article 6(1)(b) GDPR, steps taken at your request before a contract.
  • To keep this website secure, working and free of spam — Article 6(1)(f), our legitimate interest in running the site.
  • To understand how the site is used — Article 6(1)(a), your consent, which you may withdraw at any time.
  • To meet accounting and tax obligations once a booking goes ahead — Article 6(1)(c), a legal obligation.

Who else sees it

We do not sell personal data and we do not share it for advertising. It is handled on our behalf by the providers that run this website:

  • our hosting provider, which stores the website and its server logs;
  • Cloudflare, which delivers the site, protects it from attack, and runs the anti-spam check on our contact form;
  • Google, which provides the website statistics described below and the map embedded on our Contact page;
  • our e-mail provider, which carries the messages you send us.

Some of these providers process data outside the European Economic Area. Where that happens, the transfer is covered by an adequacy decision of the European Commission or by the Commission’s standard contractual clauses.

How long we keep it

Enquiries that do not lead to a booking are kept while we are dealing with them and for up to twenty-four months afterwards, so that we can pick up a conversation you return to. Records relating to a booking are kept for as long as Greek tax and accounting law requires. Server and security logs are kept for the short periods set by the providers above, and website statistics for the retention period configured in Google Analytics.

Your rights

Under the GDPR you may ask us for a copy of the personal data we hold about you, ask us to correct it or erase it, ask us to restrict how we use it, object to our using it, or ask for it in a portable form. Where we rely on your consent, you can withdraw it at any time without affecting what we did before.

Write to us at [email protected] and we will answer within one month. If you are not satisfied with our answer, you have the right to complain to the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα), 1–3 Kifissias Avenue, 115 23 Athens, dpa.gr.

Cookies

Cookies are small files a website stores on your device. This site uses them in three ways.

  • Strictly necessary — cookies set by WordPress when you submit the contact form or sign in to the site, a cookie that remembers your cookie choices, and cookies set by Cloudflare to keep the site secure and to run the anti-spam check on the contact form. These are needed for the site to work and are not used to track you.
  • Statistics — Google Analytics, loaded through Google Site Kit, sets cookies whose names begin with _ga to count visits and show us which pages are read. These are only set with your consent.
  • Embedded content — the map on our Contact page is loaded from Google Maps, which may set its own cookies when the map is displayed.

You can delete or block cookies in your browser settings, and most browsers let you be warned before a cookie is stored. Blocking strictly necessary cookies may stop the contact form from working.

Changes to this policy

We may update this policy as the site or the services behind it change. The version published here is the one that applies, and the date it was last changed is shown below.

Last updated: August 11, 2026