Last updated: 13 November 2026
This policy explains how personal data are processed when you browse www.niriides-hotel.com or contact Niriides Hotel through this website. It concerns this website and enquiries made through it; information about a subsequent accommodation agreement may also be provided separately.
1. Who is responsible for your data
The controller is the company operating Niriides Hotel: ΟΙΚΟΔΟΜΙΚΕΣ ΒΙΟΜΗΧΑΝΙΚΕΣ ΚΑΙ ΤΟΥΡΙΣΤΙΚΕΣ ΕΠΙΧΕΙΡΗΣΕΙΣ ΠΑΡΙΣΙΔΗΣ Α.Ε, General Commercial Registry (G.E.MI.) number 122428420000. Address: 24–25 G. Papandreou Street, Kos, 85300, Greece.
For privacy requests, contact niriideshotel@gmail.com or telephone +30 22420 23919. Please identify your request sufficiently for us to respond, without sending unnecessary identity documents or sensitive information.
2. Information processed through the website
The contact form collects the name, telephone number, email address and message you enter. Please do not include payment-card details, passwords, health information or other sensitive personal data. An enquiry is sent to the hotel by email; it is not an automatically confirmed reservation.
Website and infrastructure services may process technical data such as your IP address, requested URLs, access time, browser information and security-related events when delivering pages, images, maps and email. Our form also uses a hidden anti-spam field and a short-lived request counter to limit abuse.
3. Purposes and legal bases
We use enquiry information to answer your request and, where relevant, take steps at your request before entering into an accommodation agreement (Article 6(1)(b) GDPR). For other correspondence, service security and the prevention of abuse, processing may be based on legitimate interests (Article 6(1)(f)), balanced against your rights. Where a legal obligation requires processing, Article 6(1)(c) applies.
Sending an enquiry does not subscribe you to a newsletter or authorise advertising. Optional analytics or advertising technologies, if introduced, require a separate assessment, updated information and consent where legally required. Google Analytics is used only after your explicit consent (Article 6(1)(a) GDPR). Analytics consent does not authorise email marketing.
4. Service providers and recipients
Authorised hotel personnel and technical service providers may access data as needed to operate the website, maintain security and handle enquiries. Website administration and hosting support are provided through MARINET and its infrastructure. Enquiry email is transmitted through the hotel's mail infrastructure to its existing Gmail address, so Google also processes the message within the email service.
Images may be delivered from Google-hosted media infrastructure. Interactive maps request tiles and related resources from OpenStreetMap services; these providers receive the technical information necessary to answer your browser's requests. This is separate from Google Analytics. External links, such as social-sharing links, lead to services with their own privacy terms.
Information may also be disclosed where required by law or necessary for the establishment, exercise or defence of legal claims. We do not sell personal information submitted through the contact form.
5. International processing
Some providers, including Google, operate internationally, and processing may take place outside the European Economic Area. The applicable transfer arrangements depend on the provider, service and destination. Contact the hotel for information about the safeguards applicable to your data. You may also consult the providers' privacy information linked below.
6. Retention and security
Enquiry correspondence is retained for as long as needed to respond and follow up, and where necessary to meet legal obligations or handle a dispute. If an enquiry becomes a reservation or an accommodation agreement, the applicable contractual, accounting and statutory retention requirements may differ. Technical data are retained according to operational and security needs rather than for unlimited use.
Access restrictions, HTTPS and other technical and organisational measures are used to protect website and email processing. No Internet transmission or storage system can be guaranteed completely secure. Please avoid sending sensitive information through the form or ordinary email.
7. Cookies, local storage and analytics
Your analytics choice is stored in your browser under niriides-analytics-consent-v1 for up to 180 days. This preference is not an analytics identifier. The previous niriides-cookie-consent acknowledgement, if still present in your browser, is not treated as permission for analytics. Technical and security technologies may also be used where necessary to provide the service.
With your permission, this website loads Google Analytics 4 using the existing measurement ID G-Q6DJHJJ1GB. No Google analytics code or analytics requests are loaded before a choice or after rejection. Accept analytics enables statistical measurement of page visits and basic technical information. Google receives the technical data necessary for those requests. We do not send contact-form field values to Analytics; page-location and referrer values sent by our pageview implementation omit query strings and fragments. Google Signals and advertising-personalisation features are disabled in this implementation. There is no Google Tag Manager container.
If you accept, Google Analytics may store _ga and _ga_* cookies with a configured lifetime of up to 180 days, subject to browser limits. Retention of event data within Analytics is governed by the property settings; contact the hotel for details. Accept analytics and Reject analytics are equally available. You may change or withdraw your choice at any time through Cookie settings in the footer. Rejecting does not restrict the website, maps or contact form. Withdrawal deletes accessible Analytics cookies and reloads the page to unload Google's code; it does not make earlier consented processing unlawful. You can also inspect or delete site storage through your browser. Maps, images and external services may still receive technical request data needed for their operation, independently of analytics consent.
8. Your rights
Subject to the conditions and exceptions in the GDPR, you may request access, correction, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing.
Send your request to niriideshotel@gmail.com. We may need proportionate information to verify your identity. Requests are normally answered within one month, with any legally permitted extension explained to you. You may lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr), or the competent supervisory authority where you live or work.
9. Children and automated decisions
This website is not directed at children for the independent submission of personal information. Parents or guardians should contact the hotel if a child has supplied information that needs to be removed. The contact form is not used for automated decisions producing legal or similarly significant effects, or for advertising profiling.
10. Changes and further information
This policy may be updated when the website, its providers or applicable requirements change. The latest version and update date appear on this page. For questions concerning a particular use of your information, please contact the hotel.
