Privacy & Cookies Policy

1. Who We Are

This Privacy Policy applies to oneromilos.com (the “Website”), operated by Milos Luxury Resort Monoprosopi Anonymi Etaireia (Milos Luxury Resort), with registered office at Papanikoli 24 Chalandri, 15232, VAT 801862459, Tax Office KEFODE ATTIKIS (the “Company”, “we”, “us”), owner and operator of Onero, a boutique hotel in Parasporos, Milos, Cyclades, Greece.

We are committed to protecting the privacy of visitors to our Website and guests of the Hotel, in accordance with the EU General Data Protection Regulation (GDPR) and applicable Greek data protection law.

2. Data We Collect

We may collect:

• Contact form data: name, email address, phone number, and the content of your message.
• Newsletter data: email address and, optionally, name, when you subscribe to receive offers and updates.
• Automatically collected data: IP address, device and browser type, pages visited, and similar technical data, collected via cookies and similar technologies.
• Reservation-related data: certain booking details may be shared with us by the third-party reservation platform (oneromilos.reserve-online.net) once a booking is confirmed. Payment card details are processed and stored by the reservation platform and/or its payment provider, not by the Company.

3. Purposes of Processing

We use your data to:

• Send newsletters and promotional communications, where you have subscribed.
• Communicate with guests regarding confirmed reservations, stays, dining, and experiences.
• Analyse Website traffic and improve user experience.
• Promote the Hotel's services through marketing and analytics tools (e.g., Google Analytics, Meta/Facebook Pixel).

4. Legal Basis for Processing

• Consent – for newsletter subscriptions and non-essential (analytics/marketing) cookies.
• Contractual necessity / pre-contractual steps – for handling enquiries and communications related to a booking.
• Legitimate interest – for analysing and improving Website performance and security.

5. Sharing of Data

We do not sell personal data. We may share data with:

• The third-party reservation platform, solely to process your booking.
• Service providers acting on our behalf (e.g., email/newsletter providers, analytics providers, IT hosting), under appropriate confidentiality and data processing agreements.
• Public authorities, where required by law.

6. Your Rights

Under the GDPR, you have the right to: access your personal data; request rectification or erasure; restrict or object to processing; request data portability; and not be subject to decisions based solely on automated processing, including profiling. You may withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise these rights, contact us at: info@oneromilos.com

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr) if you believe your rights have been infringed.

7. Data Retention

• Contact form enquiries: retained for up to 12 months.
• Newsletter subscriber data: retained until you withdraw your consent.
• Reservation-related data received from the booking platform: retained for as long as necessary to fulfil legal, accounting, and tax obligations.
• Cookie data: as described in the Cookies section below.

8. Data Security

We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. No method of transmission or storage over the internet is entirely secure, and we encourage you to take reasonable precautions when sharing personal information online.

9. Cookies Policy

9.1 What Are Cookies

Cookies are small text files placed on your device when you visit our Website. They help the Website function properly, improve your browsing experience, and provide us with information about how visitors use the site.

9.2 Types of Cookies We Use

• Necessary cookies – required for the basic operation of the Website; enabled by default.
• Performance/Analytics cookies – help us understand Website traffic and usage patterns (e.g., Google Analytics).
• Marketing cookies – used for personalised advertising and remarketing (e.g., Meta/Facebook Pixel).

None of these categories, on their own, identify you personally.

9.3 Managing Cookies

Upon your first visit, you will be asked to consent to the use of non-essential cookies. You may withdraw or adjust your consent at any time via your browser settings or the Website's cookie preferences, where available. Most browsers also allow you to block or delete cookies directly; note that blocking necessary cookies may affect Website functionality. For general information about cookies, visit www.allaboutcookies.org.

10. Changes to This Policy

We may update this Privacy & Cookies Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. The updated version will be published on this page with a revised effective date.

11. Contact

For any questions about this Privacy & Cookies Policy or to exercise your data protection rights, please contact:

• Email: info@oneromilos.com
• Phone: +30 228 711 0310
• Address: Parasporos, Milos 84800, Greece
• Governing Law: Greek law and, where applicable, EU law (GDPR).