Controller
The data controller is ZanteRooms Apartments, Kalamaki, Zakynthos, Ionian Islands, 29100, GR. Contact: Owner email configured in the admin dashboard.
This policy covers the public website, direct reservation request forms, the digital guest guide, and the admin dashboard.
Data we process
- Reservation request details: name, email, phone, selected room, dates, guest count, message, quote, booking number, and request status.
- Messages you send by email, WhatsApp, or other confirmed contact channels.
- Booking number or host PIN submitted to unlock arrival details in the guest guide.
- Operational data such as IP address, user agent, request time, email delivery logs, webhook events, and security logs.
- Connected iCal calendar data used to calculate availability. The app should avoid importing more personal information than needed for dates and source status.
Why we use it
- To answer reservation requests and take pre-contractual steps before a booking is confirmed.
- To display availability, prices, guest-guide information, and arrival instructions.
- To protect the admin dashboard, prevent abuse, and maintain audit trails.
- To comply with accounting, tax, consumer, and accommodation-record obligations when a booking is confirmed.
Processors and third parties
The app runs on Cloudflare Pages, Workers, and KV. Email is sent through Resend when configured. Maps are displayed with Leaflet using OpenStreetMap/CARTO tiles, so map providers may receive technical connection data such as IP address and browser details. Airbnb, Booking.com, or other platforms may be used as calendar sources when connected by the owner.
Retention
Reservation requests and confirmed booking data are kept for the period needed to manage the stay, resolve disputes, and satisfy accounting or legal obligations. Admin session cookies expire after 8 hours. Rate-limit records and technical logs are kept only as long as needed for security and troubleshooting.
Your rights
Depending on the situation, you may request access, correction, deletion, restriction, portability, or objection. You may also complain to the Hellenic Data Protection Authority: dpa.gr.