Who is responsible
Aegean Blue Houses Ε.Ε. (a Greek limited partnership), trading as Aegean Blue Houses, is the controller responsible for the processing described in this notice. Address: Mandrakia, Triovasalos, Milos, Cyclades, 848 00, Greece. For privacy matters and requests concerning your personal data, contact info@aegeanbluehouses.com.
Information you provide
Our enquiry form asks for your name, email address and message. For a stay, you may also provide your preferred house, arrival and departure dates and numbers of adults and children. For an experience, you may provide your interests, preferred date, party size and telephone number. Please do not include payment-card details, identification documents or sensitive personal information in your message. Fields marked with an asterisk are required to respond to your enquiry; other fields help us understand your request.
Why we use it
We use your enquiry details to respond to you and to take steps at your request towards arranging a stay or an experience, on the basis of Article 6(1)(b) GDPR. For general correspondence that does not concern a possible contract, we rely on our legitimate interest in responding to questions addressed to our business, under Article 6(1)(f).
Where a booking creates statutory record-keeping obligations, we process the required records on the basis of Article 6(1)(c). Sending an enquiry does not subscribe you to marketing emails.
Who receives information
Our team handles your enquiry. For experience enquiries, we share the relevant request and contact details with our experience partners so that they can respond and help arrange the requested activity. This sharing is for handling the experience you requested, not for newsletter subscriptions. Hosting and email services also process information needed to operate the website and deliver correspondence.
Website operation also involves hosting, technical support and email delivery providers, with access according to the services they provide.
How long information is kept
Enquiries that do not result in a booking are retained by Aegean Blue Houses for three days, in accordance with our company policy. Booking and transaction records are separate from unconverted enquiries; their retention is determined by the applicable legal obligations and any necessary handling of related claims.
The three-day period concerns unconverted enquiries handled by the company, not Analytics statistics, statutory transaction records or independent third-party records. Technical email delivery logs and backups follow the separate retention cycles of the relevant systems. The Site Mailer service installed on this website provides email delivery logs for up to 30 days when logging is used.
Website services and external links
The Contact page currently loads fonts from Google Fonts. This makes a connection from your browser to Google's servers and transmits technical request information, including your IP address. The illustrated island map itself is displayed within this website; clicking its directions links takes you to Google Maps.
External websites apply their own privacy notices. Google services may process information outside the EEA. Google describes its applicable transfer safeguards, including contractual clauses and, where applicable, adequacy frameworks, in its international transfer information.
Google Analytics and cookie choices
We use Google Analytics 4 to understand website usage, only after you accept analytics in our banner. The legal basis is consent under Article 6(1)(a) GDPR. Google receives technical device/browser information, cookie identifiers and events such as page views, scrolling and clicks. We do not intentionally send names, email addresses, telephone numbers or enquiry messages.
Automatic site-search and form-interaction measurement have been disabled in the stream. A successful enquiry may be counted as an event without its contents. Our integration does not enable Google Signals or advertising personalisation. You may decline without losing access to the website, and change your choice using Cookie settings.
Your preference is stored locally for 180 days. Analytics cookies (_ga and _ga_*) are configured for up to 180 days. User/event-level data in standard GA4 is subject to the property retention setting, with a maximum of 14 months; aggregate reports are not subject to the same limit. Withdrawal stops future collection through our integration and removes accessible site Analytics cookies.
Newsletter
If you separately subscribe to our newsletter, we use your email address to send occasional news and offers from Aegean Blue Houses. We rely on your consent under Article 6(1)(a) GDPR. Subscription requires a separate checkbox and confirmation through an email link (double opt-in). Sending a stay or experience enquiry does not subscribe you.
We use Mailchimp (The Rocket Science Group LLC, an Intuit company) to manage subscriptions and deliver these emails. Mailchimp processes your email address, subscription and confirmation information, and technical delivery information such as IP addresses and timestamps. This may involve processing in the United States.
Mailchimp describes its transfer safeguards in its Data Processing Addendum and European data-transfer information, including Standard Contractual Clauses and the EU–US Data Privacy Framework where applicable. We keep your active subscription until you unsubscribe. You can withdraw consent at any time using the unsubscribe link in each newsletter or by contacting info@aegeanbluehouses.com.
Withdrawal does not affect earlier lawful processing. After unsubscribe, a limited record of the opt-out and subscription history may remain to respect your choice and address consent-related requests; unsubscribing does not itself erase every provider record. You may contact us to request deletion, subject to applicable obligations.
Your rights
Subject to the conditions in data-protection law, you may request access to your personal data, correction, erasure, restriction of processing or data portability. You may object to processing based on legitimate interests. If processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing.
Send requests to info@aegeanbluehouses.com. We may request proportionate information to verify your identity. We normally respond within one month; an extension may be available for complex or numerous requests, with an explanation within that first month.
Complaints and updates
You can lodge a complaint with the Hellenic Data Protection Authority at www.dpa.gr, or with the competent supervisory authority where you live, work or believe an infringement occurred. We will update this notice when our processing changes. Last updated: 16 October 2026.