Privacy

For a confirmed stay I collect the details needed to manage your reservation: your name, email, chosen apartment, dates, number of guests, reservation reference and any guest details you choose to provide. For Greek guests this can include ΑΦΜ and ID number; for international guests it can include a passport or ID number.

To confirm your stay, send your reservation email, prepare your arrival, manage any cancellation or refund, answer questions, and file the short-stay declaration that Greek law requires for a registered rental. Nothing more.

Apartment stays are paid by card, Apple Pay or Google Pay through Stripe Payments Europe, Ltd. (Dublin, Ireland), which acts as our payment processor. Card details are entered directly on Stripe's own encrypted payment page — I never see, receive or store card numbers. I only receive the booking reference, the amount, the payment status and the email you used, which I need to confirm the stay and send your reservation details. Stripe processes this data as an independent controller for its own compliance and fraud-prevention duties; its privacy notice is published at stripe.com/privacy.

Confirmation, cancellation and refund emails are sent from our own verified domain info.athenssignature.com. Your email address is used for these transactional messages only — never for marketing lists and never sold or passed to advertisers.

Your details are not sold, rented or shared for marketing. They are used only by Athens Signature and by the services needed to run the booking, payment, email confirmation and refund process. Details are also passed on where the law requires it, such as the guest declaration for the Greek tax authority.

Reservation and payment records are kept for as long as tax, accounting and legal rules require afterwards. Concierge messages are kept while the request is being arranged. Beyond that, ask me and I will delete anything I am no longer required to keep.

The calendar on this site combines Airbnb availability with confirmed stays booked directly here, so paid dates can be blocked quickly. The calendar does not publish guest names, emails, phone numbers or payment details.

I sometimes advertise these apartments on Google. To see which adverts actually lead to an enquiry, this site can load the Google Ads tag, which places cookies in your browser and sends Google Ireland Limited and Google LLC your visit and the moment you tap a WhatsApp or email enquiry button. It is used for measuring adverts and improving who they are shown to. No name, phone number, email address or booking detail is sent to Google.

In Greece, the rest of the EEA, the United Kingdom and Switzerland this only happens if you tap Accept on the cookie notice. Until then it stays switched off, and Declining keeps it off. You can change your mind at any time with the “Cookie choices” link at the bottom of every page — a change applies straight away. Google also offers its own advert settings at adssettings.google.com.

Your personal data is handled under the EU General Data Protection Regulation (Regulation (EU) 2016/679) and Greek Law 4624/2019. The legal bases are performance of your booking contract, my legal obligations (short-stay declaration, tax and accounting records), and your consent for advertising measurement cookies.

Under Articles 15–21 GDPR you can ask for access to the data I hold about you, correction of anything inaccurate, erasure once I am no longer legally required to keep it, restriction of processing, a copy of your data in a portable format, and you can object to processing or withdraw consent at any time. Write to pantelhsparaskevopoulos@gmail.com and I will answer personally, normally within one month. You also have the right to complain to the Hellenic Data Protection Authority (dpa.gr).