How we collect, use, and protect your personal data
Last updated: 12 November 2026 | Casa Di Cona
This Privacy Policy explains how Casa Di Cona ("we", "us", "our") collects, uses, stores, and protects your personal data when you use our website or make a booking. We are committed to protecting your privacy and processing your data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Greek data protection law.
The data controller responsible for your personal data is:
Casa Di Cona
Lourdhata, Kefalonia 281 00, Greece
Email: contact@casadicona.com
We collect the following categories of personal data:
| Category | Data Collected | Source |
|---|---|---|
| Booking Data | Full name, email address, phone number, country of residence, check-in/check-out dates, number of guests, special requests | Provided by you during booking |
| Payment Data | Payment confirmation details, transaction IDs. We do not store card numbers , payments are processed via PayPal or Stripe | Payment processors (PayPal / Stripe) |
| Enquiry Data | Name, email, phone, message, preferred dates | Provided by you via contact form |
| Technical Data | IP address, browser type, pages visited, referral source , collected anonymously via server logs / analytics | Automatically collected |
| Cookie Data | Session preferences, cookie consent status | Your browser |
We use your personal data for the following purposes and under the following legal bases:
| Purpose | Legal Basis |
|---|---|
| Processing and managing your booking | Contract performance (Art. 6(1)(b) GDPR) |
| Sending booking confirmation and related communications | Contract performance |
| Collecting payment and preventing fraud | Contract performance / Legitimate interests |
| Responding to enquiries | Legitimate interests |
| Complying with legal obligations (tax records, anti-money laundering) | Legal obligation (Art. 6(1)(c) GDPR) |
| Improving our website and services | Legitimate interests |
| Sending marketing communications (with consent only) | Consent (Art. 6(1)(a) GDPR) |
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:
We do not sell your personal data. We may share your data with trusted third parties only where necessary:
All third-party processors are required to handle your data in accordance with GDPR and have appropriate data processing agreements in place.
Some of our service providers (including PayPal and Stripe) may transfer data outside the European Economic Area (EEA). Where this occurs, appropriate safeguards are in place (e.g., EU Standard Contractual Clauses or adequacy decisions) to ensure your data remains protected.
Our website uses cookies to enhance your browsing experience. By continuing to use our website after dismissing the cookie banner, you consent to the use of essential cookies. You may decline non-essential cookies at any time.
You can manage or delete cookies at any time through your browser settings. Note that disabling essential cookies may affect website functionality.
Under GDPR, you have the following rights regarding your personal data:
To exercise any of these rights, please email us at contact@casadicona.com. We will respond within 30 days. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA).
We implement appropriate technical and organisational security measures to protect your personal data against accidental loss, unauthorised access, disclosure, or destruction. These include:
Despite these measures, no method of transmission over the internet is completely secure. We cannot guarantee absolute security but take all reasonable steps to protect your data.
Our website and services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately and we will delete it promptly.
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Material changes will be communicated via the website. The "Last updated" date at the top of this page indicates when the policy was last revised.
For any privacy-related enquiries, data subject requests, or complaints, please contact:
Casa Di Cona
Lourdhata, Kefalonia 281 00, Greece
Email: contact@casadicona.com