Privacy and cookies
This page describes the data flows on ibiscuskalymnos.com as they are set up today. It is a plain description, not legal advice.
Who is responsible
Ibiscus Kalymnos, a family-run accommodation business in Massouri, Kalymnos 85200, Greece (MHTE 1257603, AFM 062535699), is responsible (the "controller") for the personal data described on this page. Contact: info@ibiscuskalymnos.com, +30 698 589 0273.
Visit statistics (our own, cookieless)
We count page visits and a short list of anonymous events (for example, clicks on “See dates & prices”) on our own server. No cookies are set and your IP address is not stored: it is turned into an anonymous code that changes every day and cannot be linked back to you. We never record names, e-mail addresses, messages or booking details in these statistics. They are kept for up to 13 months and are always on.
Heatmaps and session recordings (Microsoft Clarity) — only with your permission
If you allow it, Microsoft Clarity records how pages are used (clicks, scrolling, heatmaps) so we can find where the site is hard to use. Form fields, messages, chat, contact details and your booking summary are masked on your device and are not uploaded. Clarity sets its own cookies only after you allow it. It is off until you choose, and it never runs on unsubscribe or staff pages.
Changing your mind
Use “Privacy settings” at the bottom of any page to allow or stop recording at any time. Stopping clears Clarity’s cookies and ends future recording; it does not delete recordings made earlier. To ask for those to be deleted, write to info@ibiscuskalymnos.com.
Booking requests and messages
When you send a booking request, the details you enter (name, e-mail, phone, dates, message) are sent to the family so we can answer you. WhatsApp messages are handled by WhatsApp under its own terms. The chat assistant sends your questions to an AI service to draft an answer; do not share payment details in chat.
Services that handle data for us
Website hosting: Hostinger. E-mails we send: Resend. WhatsApp messages: WhatsApp (Meta), connected through Twilio. Notice of a new booking request to the family: Telegram. Chat assistant answers: Groq and Google Gemini. Visit statistics: our own server (hosted by Hostinger). Session recordings, only with your permission: Microsoft Clarity. Each service receives only what it needs for its task.
Why we may use your data
Booking requests, messages and your stay: to answer you, take the steps you ask for before a booking and carry out the booking (GDPR Art. 6(1)(b)). Records of stays: because Greek tax and accounting law requires them (Art. 6(1)(c)). Cookieless page counts: our legitimate interest in knowing which pages help guests (Art. 6(1)(f)). Session recordings and the newsletter: only with your consent, which you can withdraw at any time (Art. 6(1)(a)).
How long we keep it
Records of confirmed stays are kept for as long as Greek tax and accounting law requires. Booking requests and messages that do not lead to a stay are kept only as long as needed to answer you, and you can ask us to delete them at any time. Newsletter addresses are kept until you unsubscribe; every newsletter has an unsubscribe link.
Your rights
You can ask to see, correct or delete your data, to restrict or object to its use, and to receive it in a portable format. Write to info@ibiscuskalymnos.com. If you think we have handled your data wrongly, you can complain to the Hellenic Data Protection Authority (www.dpa.gr).
Contact
Questions about your data: info@ibiscuskalymnos.com — Ibiscus Kalymnos, Massouri, Kalymnos 85200, Greece.