Privacy and cookies

Last updated 6 November 2026

This page explains what personal data we collect when you use capevilla.gr or book with us, why, and what your rights are.

Who is responsible

The data controller is CAPE ΜΟΝΟΠΡΟΣΩΠΗ Ι.Κ.Ε., Thesi Faros, Pounta Zeza, 195 00 Lavrio, Attica, Greece. General Commercial Registry (G.E.MI.) no. 159712503000. Short-term rental registry number (AMA) 00001220341. Email info@capevilla.gr, phone +30 694 160 0695.

What we collect

• When you book: your name, email, phone number, country, the message you write to us, your dates, the number of guests and the price.
• Payment: payments are handled by Stripe. We never see or store your full card number. We only receive the payment status and limited details such as the card brand and the last four digits.
• Technical data: the IP address of your booking request, kept with the booking and used to prevent abuse. Like every website, our hosting provider keeps standard server logs.

Browsing the site without booking does not require you to give us any personal data.

Why we use it, and on what legal basis

• To take, confirm and manage your booking and to communicate with you about it (performance of a contract, GDPR Article 6(1)(b)).
• To issue receipts and invoices and keep accounting records (legal obligation, Article 6(1)(c)).
• To protect the site and the booking system from abuse and fraud (legitimate interest, Article 6(1)(f)).

We do not use your data for advertising and we do not sell it.

Who we share it with

• Stripe (Stripe Payments Europe, Ltd., Ireland), which processes card payments. Stripe may also process data in the United States under the safeguards required by EU law. See stripe.com/privacy.
• Papaki, our hosting and email provider in Greece.
• Our accountant, and public authorities when the law requires it.

Airbnb and Booking.com receive only the dates that are booked, so that they show them as unavailable. They receive no personal data about you.

How long we keep it

We keep booking and payment records for as long as Greek tax and accounting law requires, which is generally five years after the end of the year of your stay, and then delete them. Unfinished booking attempts are deleted within twelve months.

Your rights

You can ask us to see, correct or delete your data, to restrict or object to its use, or to receive it in a portable format. Email info@capevilla.gr and we will reply within one month. Some data we must keep by law even if you ask us to delete it.

If you think we have not handled your data properly, you can complain to the Hellenic Data Protection Authority (www.dpa.gr).

Cookies

• When you pay, you are taken to Stripe's checkout page. Stripe uses cookies that are necessary for secure payment and fraud prevention, under its own cookie policy.
• The Google Maps and Airbnb links open those sites only when you click them, and their own policies apply there.
• The owner's admin area uses one strictly necessary session cookie for logging in. It is never set for visitors.

Because we only use strictly necessary cookies, we do not ask for cookie consent.

Changes

If we change this policy, we will update the date at the top of this page.