Privacy Policy

Last Updated: April 2, 2026

1. Data Controller

The entity responsible for processing your personal data is:

Company Name: Vass Beach House A.E.
Address: Vassiliki, Lefkada, Greece
Email: vassbeachhouse@gmail.com
Phone: +30 690 9101946

2. Data We Collect and Why

We collect and process personal data to provide a better user experience and to promote our services effectively.

A. Analytics (Google Analytics 4)

We use Google Analytics 4 (GA4) to understand how visitors interact with our website.

Data collected: IP address (anonymized), device type, browser information, pages visited, and time spent on site.
Legal Basis: Consent (Art. 6(1)(a) GDPR). We only track your activity if you explicitly accept “Statistics” or “Analytics” cookies.
Purpose: To improve website performance and user experience.

B. Marketing & Advertising (Google Ads & Meta Ads)

We use tracking pixels and cookies from Google and Meta (Facebook/Instagram).

Data collected: Interaction with our ads, conversions (e.g., if you filled out a form), and “Remarketing” data (showing you our ads on other platforms).
Legal Basis: Consent (Art. 6(1)(a) GDPR). These tools are only activated if you accept “Marketing” cookies.
Purpose: To show you relevant advertisements based on your interests and to measure the effectiveness of our paid campaigns.

C. Google My Business

Our website may integrate features from Google My Business (like Maps or Reviews). Google may collect your location or account data if you interact with these elements while logged into a Google account.

3. Data Sharing & International Transfers

Your data is shared with the following third-party providers:

Google Ireland Limited (for Google Analytics and Google Ads)
Meta Platforms Ireland Ltd. (for Meta Ads/Pixel)

Because these companies are based in the US, your data may be transferred outside the EEA. We ensure these transfers are protected via Standard Contractual Clauses (SCCs) and the EU-U.S. Data Privacy Framework.

4. Your Rights

Under the GDPR, you have the following rights regarding your data:

Access: Request a copy of your data.
Rectification: Correct inaccurate data.
Erasure: Request that we delete your data (“Right to be forgotten”).
Withdrawal of Consent: You can change your cookie preferences at any time via our [Link to Cookie Settings/Banner].
Complaint: You have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA) at www.dpa.gr.

5. Data Retention

Analytics data: Kept for as long as necessary to fulfill the advertising purpose or until consent is withdrawn.
Marketing data: Kept for as long as necessary to fulfill the advertising purpose or until consent is withdrawn.