Privacy policy
Last updated: September 2026
The protection of your personal data is important to Avocado Villas.
This Privacy Policy explains how personal data is collected, used and protected when you visit and use the website avocadovillas.gr.
The processing of personal data is carried out in accordance with applicable European and Greek data protection legislation, including the General Data Protection Regulation (GDPR).
1. Data Controller
The controller responsible for the processing of personal data collected through the website is Avocado Villas.
For any matter relating to the protection of your personal data, you may contact the business by email or telephone using the contact details provided on the website’s Contact page.
2. Personal Data We May Collect
Depending on how you use the website, we may collect information such as:
- full name,
- email address,
- telephone number,
- information you provide through contact forms,
- information relating to accommodation or booking enquiries,
- technical data relating to your use of the website,
- technical data and signals used to protect the website and its forms against automated or malicious submissions,
- website traffic and interaction data, where you have consented to analytics cookies.
Only data that is necessary for the relevant processing purpose is collected.
3. Purposes of Processing
Personal data may be used for:
- responding to enquiries and contact requests,
- providing information about accommodation and services,
- handling accommodation or booking enquiries,
- assisting visitors and customers,
- improving the operation and user experience of the website,
- analysing website traffic, where the relevant consent has been given,
- complying with legal or tax obligations,
- protecting the website and its contact forms against spam, automated submissions and malicious use.
4. Legal Basis for Processing
Depending on the circumstances, the processing of personal data may be based on:
- your consent,
- the performance of a contract or steps taken prior to entering into a contract,
- compliance with a legal obligation,
- the legitimate interests of the business, where permitted by law.
Where processing is based on consent, you may withdraw your consent at any time.
5. Contact Forms
When you contact us through a form, email or telephone, the information you provide is used to process and respond to your enquiry.
This data is not used for unrelated or incompatible purposes without an appropriate legal basis.
6. Form Protection – Cloudflare Turnstile
To protect contact forms against automated submissions, spam and malicious use, the website uses Cloudflare Turnstile, a service provided by Cloudflare, Inc.
Turnstile performs security checks designed to distinguish genuine users from automated systems. For this purpose, it may process technical data and signals relating to the device, browsing environment and the visitor’s interaction with the security mechanism.
Turnstile performs security checks designed to distinguish genuine users from automated systems. For this purpose, it may process technical data and signals relating to the device, browsing environment and the visitor’s interaction with the security mechanism.
Turnstile is used on the website solely for security and abuse-prevention purposes, and not for advertising tracking or statistical analysis of website traffic.
Further information about Cloudflare’s processing of data through Turnstile is available in the Turnstile Privacy Addendum and Cloudflare’s Privacy Policy.
7. Cookies, Security Technologies and Google Analytics 4
The website uses technologies that are necessary for its proper and secure operation, as well as local storage technologies where required.
Cloudflare Turnstile is used to protect website forms, as described above. Turnstile Pre-clearance is not enabled in the current implementation.
Google Analytics 4 (GA4) is used to measure website traffic.
The website uses Google Consent Mode v2.
Before the user gives consent, analytics_storageanalytics_storagedenied remains denied, and Google Analytics cookies are neither read nor written. Under the Advanced Consent Mode implementation, limited cookieless signals may be sent to Google for measurement purposes.
Google Analytics cookies may only be stored and accessed after the user has given the relevant consent. Before consent is provided, limited cookieless signals may be sent to Google as part of the Advanced Consent Mode implementation, without the use of Analytics cookies.
Settings relating to the use of data for advertising purposes remain disabled unless relevant services are added in the future and the appropriate consent is requested.
Users may change their choice at any time through the Cookie Settings page.
8. Third-Party Services
The website may use services provided by third parties that are necessary for its operation, hosting, security, traffic measurement or the provision of services to users.
These providers may process data in accordance with their own terms and privacy policies.
Where prior consent is required for non-essential technologies, such technologies are activated in accordance with the user’s choices.
9. Data Retention
Personal data is retained only for as long as necessary for the purpose for which it was collected or for as long as required under applicable law.
When there is no longer a lawful or legitimate business reason to retain the data, it is deleted or anonymised where reasonably possible.
10. Sharing of Personal Data
Avocado Villas does not sell personal data.
Personal data may be shared with partners or service providers only to the extent necessary for the operation of the website, the provision of customer support or services, or compliance with legal obligations.
11. Transfers of Data Outside the European Economic Area
Certain technology service providers may process personal data outside the European Economic Area (EEA).
Where required, appropriate safeguards are implemented in accordance with applicable data protection legislation.
12. Data Security
Appropriate technical and organisational measures are implemented to protect personal data against unauthorised access, loss, alteration, destruction or unlawful processing.
Although reasonable security measures are applied, no method of transmitting or storing data over the internet can be considered completely secure.
13. Your Rights
Under the GDPR, depending on the circumstances, you may have the right to be informed, access your personal data, request rectification or erasure, restrict processing, request data portability, object to processing and withdraw your consent where processing is based on consent.
To exercise your rights, you may contact Avocado Villas by email or telephone using the contact details provided on the Contact page.
You also have the right to lodge a complaint with the Hellenic Data Protection Authority if you believe that the processing of your personal data is not being carried out in accordance with applicable data protection law.
14. Links to Third-Party Websites
The website may contain links to external websites, services, booking platforms, social media platforms or other third-party providers.
Avocado Villas does not control and is not responsible for the privacy practices, content or security of these external websites or services.
15. Changes to This Privacy Policy
This Privacy Policy may be updated if there are changes to the operation of the website, the services used or the applicable legal framework.
The date of the most recent update is displayed at the top of this page.
