Privacy policy
How we use your information when you visit our website or contact us.
Last updated: 31/10/2026
1. Who we are
This website is operated by Makis Rousopoulos and Alexis Rousopoulos under the name Katoikia Pyrgos. They are responsible for the personal data described in this policy.
For privacy questions or requests, contact us at rousomakis@yahoo.gr or rousoalex@yahoo.gr.
2. Information we collect
Our contact form requires your name, email address and message. You may also provide a phone number, preferred accommodation, arrival and departure dates, and number of guests. Without the required fields, we cannot process the form.
We receive your enquiry by email. Hosting and security services may also process technical information such as your IP address, browser details and request logs.
The website does not process payments or automatically confirm bookings. Please do not send payment-card details, identity documents or sensitive personal information through the form.
3. Why we use your information
We handle enquiries about a proposed stay to take steps at your request before a contract, under Article 6(1)(b) GDPR. For general questions and website protection, we rely on our legitimate interests in responding to visitors and preventing abuse, under Article 6(1)(f), subject to your rights.
Where a separate activity requires consent, we request it separately. Any legally required record retention is based on Article 6(1)(c). We do not use enquiry details for marketing.
4. Services that handle information
We use Vercel to host the website and Yahoo to deliver and store enquiries. With your consent, we also load Google Maps to display the property location and Google reCAPTCHA to protect the contact form. Access to enquiries is limited to those who need it to handle your request.
We do not sell your information. We may disclose it when required by law or necessary for legal claims.
Our service providers may process personal data outside the European Economic Area, including in the United States. Depending on the provider and the transfer, they use mechanisms such as European Commission adequacy decisions or Standard Contractual Clauses to protect transferred data. Further information is available in Vercel’s data protection terms, Yahoo’s information on international data transfers and Google’s data transfer information.
5. Google reCAPTCHA and cookies
Our contact form uses Google reCAPTCHA v2 Invisible to help prevent automated submissions. We load this service only after you enable it in our privacy settings. Verification runs when you submit the form, and Google may display an additional challenge.
When enabled, Google may process your IP address, browser and device information, and interactions with the service. Google states that reCAPTCHA sets the _GRECAPTCHA cookie for risk analysis. Other Google cookies may also be involved.
You can change your choice through Privacy settings in the footer. If you do not enable reCAPTCHA, you can contact us directly by email or phone. See our Cookies Policy and the Google links below for more information.
6. How long we keep information
Enquiries that do not lead to a reservation are deleted or anonymised 12 months after the last relevant communication.
Reservation-related correspondence is retained for as long as necessary to manage the stay, handle related questions or disputes, and meet applicable legal obligations. Where correspondence forms part of records subject to mandatory retention, the applicable legal retention period is followed.
Technical logs and backups are retained according to the relevant provider’s retention settings and policies. Their retention depends on their purpose, including security, troubleshooting and recovery.
7. Your rights
Where applicable, you can request access, correction, deletion, restriction or portability of your information, and object to processing based on legitimate interests. If processing relies on consent, you can withdraw it without affecting earlier lawful processing.
Contact the email above to exercise your rights. We may need to verify your identity. Rights are subject to legal conditions, including obligations to retain certain records.
You can complain to the Hellenic Data Protection Authority or another competent supervisory authority. We do not make solely automated decisions with legal or similarly significant effects about you.