Last updated: 22 October 2026
Hellenic Vibes IKE processes your personal data only as far as needed to serve you. This page explains what data we use, why, and what your rights are under Regulation (EU) 2016/679 (GDPR) and Greek Law 4624/2019.
Who we are
The data controller is Hellenic Vibes IKE (Hellenic Vibes Smart Hotel Athens), Agias Irinis 7, 105 51 Athens, Greece, tel. +30 210 32 40 504.
For any data protection matter, write to reception@hellenicvibes.gr.
What data we process and why
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Booking and stay | Name, contact details, booking and payment details, stay preferences | Performance of a contract | For as long as our relationship lasts and afterwards as long as tax and other laws require |
| Contact via form or email | Name, email, message content | Legitimate interest (answering your request) | Until your request is handled and for a reasonable time afterwards |
| Newsletter and Members Club | Name, email, country, stay history | Consent | Until you withdraw consent |
| Statistics and ads on the site | Data from cookies and similar technologies (see Cookie Policy) | Consent | As set out in the Cookie Policy. Google Analytics data: 14 months from last activity |
| Legal and tax obligations | Booking and invoicing records, guest details where the law requires | Legal obligation | As long as the law requires |
The details we ask for in forms are necessary for their purpose unless marked otherwise. If you do not provide them, we may not be able to complete your request. Please do not send us sensitive personal data (for example health data) unless we ask for it.
Bookings through the booking engine
Online bookings are made at hellenicvibes.reserve-online.net, operated by Revplus Hellas S.A. (WebHotelier) as our data processor. See also the booking engine privacy notice.
Marketing and consent
We send newsletters or offers only if you chose to receive them. You can unsubscribe at any time using the link at the bottom of every email, or by writing to us.
Who receives your data
Your data may be passed to providers that serve us under data processing agreements: WebHotelier (bookings), Brevo (email sending), Google (statistics, ads, email), Meta (ads), our website hosting provider (TopHost), Cloudflare (security and speed), Exclusivi (CRM) and payment providers. Also to public authorities where the law requires.
We do not sell personal data.
Transfers outside the EEA
Some providers (for example Google, Meta, Cloudflare) may process data in countries outside the EEA, such as the United States. Transfers rely on the safeguards of the GDPR, such as an adequacy decision or standard contractual clauses. WebHotelier stores data on Amazon Web Services in Frankfurt and in Virginia, USA.
Your rights
Free of charge, you can ask for access, rectification, erasure, restriction of processing and portability of your data, or object to processing. Where we rely on your consent, you can withdraw it at any time. Write to reception@hellenicvibes.gr. We will reply within one month.
You can also lodge a complaint with the Hellenic Data Protection Authority, Kifissias 1-3, 115 23 Athens, www.dpa.gr.
Minors
Our services are not directed to minors and we do not knowingly collect their data.
Security
We apply technical and organisational measures to protect your data against loss, alteration and unauthorised access.
Changes
We will update this page when the policy changes, with a new update date.