Skip to content
Manolitos Holiday Homes

Privacy policy

Last updated: October 2026

Who we are

Data controller: Emmanouil Mylopotamitakis, Manolitos Holiday Homes, Episkopi, Heraklion 700 08, Crete, Greece. Contact: mylopoman@gmail.com, +30 6999 771 606.

What this website collects

This website does not use cookies, analytics or advertising trackers, and it does not store any personal data. The enquiry form is not sent to our server: when you press “Send on WhatsApp”, WhatsApp opens on your device with your message ready, and you decide whether to send it. The availability calendar only downloads booked dates from our server; it sends no information about you.

When you contact us

If you send us an enquiry (WhatsApp, Viber, phone or email), we use your name, contact details, dates and number of guests to answer you and, if you book, to manage your stay and meet our legal obligations (e.g. tax and accommodation records).

Legal basis

  • Answering your enquiry and managing your booking: steps taken at your request before entering into a contract, and performance of that contract (Art. 6(1)(b) GDPR).
  • Keeping booking and invoicing records: compliance with our legal obligations, e.g. under tax law (Art. 6(1)(c) GDPR).
  • Technical server logs that keep the website secure: our legitimate interest in operating a safe website (Art. 6(1)(f) GDPR).

How long we keep your data

  • Enquiries that do not lead to a booking: deleted within 12 months.
  • Booking data: for as long as Greek tax law requires.

Third-party services

  • Hosting – Cloudflare. The website is hosted by Cloudflare, Inc., which acts as our processor and handles technical data such as your IP address in order to deliver the pages and protect them from attacks. Cloudflare may process data in the United States; such transfers are covered by the EU–US Data Privacy Framework and by the European Commission’s Standard Contractual Clauses.
  • WhatsApp (Meta). When you send us your enquiry through WhatsApp, your message is processed by WhatsApp (Meta Platforms Ireland Ltd) under its own privacy policy; this may involve transfers outside the EU.
  • Google Maps. The map loads only if you press “Show map”. Only then does your browser connect to Google, which may set cookies and process data (such as your IP address) under its own privacy policy.
  • Viber and email providers process the messages you send us under their own privacy policies.

Your rights

You have the right to access, correct or delete your data, to restrict or object to processing and to data portability. Contact us at the email above. You may also lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).