Privacy

Privacy notice

Theasis Paros collects only the information required to respond to reservation requests and manage confirmed stays. That usually includes name, email address, phone number, guest counts, requested dates, and any notes you decide to share. If you ask us to prepare an invoice, we may also store the billing address details you provide for that purpose.

Reservation details are stored in our self-hosted booking admin. Analytics are disabled by default and only load after an explicit opt-in. Location maps load as part of the stay pages, which means map tile requests can be made to the configured provider when those sections render.

Passport or identity-document details are not collected through the public booking form. If legal guest-registration data is ever required, it should be handled through a separate, more secure workflow with stricter encryption, access controls, and retention limits.

Data is used for reservation administration, guest communication, and legal compliance. Guests can request access, correction, or deletion by emailing hello@theasisparos.com.

Transactional email is intended to be sent via an EU-hosted provider configuration. The deployed stack is prepared for Brevo SMTP, but the same flow can be used with any EU-based SMTP service.

Minimal aggregate server-side traffic statistics may also be processed for page volume, page path, device type, browser family, and source category, without cookies, without unique visitor IDs, and without cross-site tracking.

These aggregate statistics are retained for 90 days, used only for operational traffic monitoring and site performance, and kept separate from the optional analytics that load only after explicit consent.