Privacy Policy

Aries Villas — Skiathos, Greece

Last updated: 18 October 2026

1. Introduction

Welcome to Aries Villas.

At Aries Villas, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, disclose, and protect personal information when you visit our website, contact us, enquire about accommodation, or submit a reservation request.

Our website is available at https://ariesvillas.com/.

We process personal data in accordance with applicable data protection legislation, including the European Union General Data Protection Regulation (EU GDPR), Greek data protection laws and, where applicable, the United Kingdom GDPR and relevant privacy and electronic communications regulations.

Please read this Privacy Policy to understand how your personal information is handled and the rights available to you.

2. Who We Are

Aries Villas is a luxury villa accommodation business located on the island of Skiathos, Greece.

For applicable data protection legislation, the controller responsible for personal data processed through this website is:

Business name: Aries Villas

Legal entity: Javen A.E

Registered or business address: Megas Gialos, Skiathos

Website: https://ariesvillas.com/

Privacy contact email: ariesvillas@gmail.com

You may contact us at the above email address regarding this Privacy Policy, the handling of your personal information, or the exercise of your data protection rights.

3. Personal Information We Collect

Depending on how you interact with our website and services, we may collect the following categories of personal information.

A. Information You Provide Directly

When you enquire, contact us or submit a reservation request, we may collect:

• First and last name.
• Email address.
• Telephone number.
• Postal address, city, postal code and country, where provided.
• Preferred accommodation or villa.
• Check-in and check-out dates.
• Number of adults, children and other guests.
• Booking requests, preferences and additional information you choose to provide.
• Correspondence and messages exchanged with our team.
• Reservation status, applicable prices and payment-related records.

We only request information reasonably necessary to respond to enquiries, arrange accommodation and provide our services.

If you provide personal information about another guest, you should ensure that you are authorised to share that information and that the person concerned is appropriately informed.

Please avoid including sensitive personal or medical information in general enquiry forms unless it is necessary to discuss specific accommodation needs. Where such information is provided, we will handle it with appropriate confidentiality and safeguards under applicable law.

B. Information Collected Automatically

When you access our website, certain technical and usage information may be collected, depending on your browser settings and applicable cookie preferences.

This may include:

• IP address and approximate geographical location.
• Browser type and version.
• Device type, operating system and screen information.
• Pages visited and referring websites.
• Date and time of website visits.
• Time spent interacting with website content.
• Navigation and interaction events.
• Advertising campaign identifiers and referral information.
• Cookie identifiers and related analytics information, where permitted.

We use this information to operate, secure and improve our website, understand visitor behaviour and evaluate our online marketing activities.

4. How and Why We Use Your Personal Information

We process personal information for the following purposes.

Reservation Requests and Accommodation Services

We use personal information to:

• Check availability and respond to booking enquiries.
• Receive and process reservation requests.
• Communicate booking details, availability and payment instructions.
• Confirm, modify or cancel reservations.
• Prepare and provide accommodation services.
• Respond to guest requests before, during and after a stay.
• Manage necessary administrative and financial records.

Legal basis: Performance of a contract or taking steps at your request before entering into a contract, together with compliance with applicable legal obligations.

Communication and Customer Support

We use contact information to respond to enquiries, answer questions, provide assistance and manage communications relating to our services.

Legal basis: Performance of a contract or pre-contractual steps, or our legitimate interests in responding to enquiries and providing customer support, as applicable.

Website Operation and Security

We process necessary technical information to maintain the website, prevent unauthorised access, investigate technical issues, protect against misuse and ensure the reliability of our services.

Legal basis: Our legitimate interests in maintaining a secure and functional website, and compliance with legal obligations where applicable.

Website Analytics

Subject to applicable consent requirements, we use website analytics to understand how visitors use our website, identify areas for improvement and evaluate its performance.

Legal basis: Consent where required for analytics cookies and associated processing.

Advertising and Marketing Measurement

Subject to applicable consent requirements, we may use advertising technologies to understand how visitors discover Aries Villas, measure the effectiveness of advertising campaigns and assess the results of website interactions.

Legal basis: Consent where required for advertising cookies, identifiers and associated processing.

Legal, Financial and Administrative Obligations

We may use and retain information to comply with applicable accounting, tax, accommodation, regulatory and other legal obligations, and where necessary to establish, exercise or defend legal claims.

Legal basis: Compliance with legal obligations and, where applicable, our legitimate interests in protecting our legal rights.

5. Online Reservations and HBook

Our website uses HBook, a WordPress accommodation booking system, to manage villa availability and reservation requests.

When you submit a reservation request, we process the information you enter in the booking form to help us arrange your requested stay.

This may include your contact information, accommodation selection, arrival and departure dates, number of guests, booking price, and any additional information you provide.

Reservation data may be stored within the website’s booking administration system and accessed by authorised personnel responsible for managing reservations.

Submitting a reservation request does not necessarily mean we have received payment or that the booking has been finally confirmed.

Booking confirmation is subject to the applicable reservation conditions and any payment requirements communicated to the guest.

We may send transactional emails relating to reservation requests, confirmations, amendments, cancellations and payment instructions.

These operational emails are separate from optional promotional communications.

6. Payments and Payment Providers

Aries Villas may offer guests the option to pay for their reservations by bank transfer or through an external online payment service, such as Viva Wallet.

Bank Transfers

If you choose to pay by bank transfer, relevant transaction information is processed by the financial institutions involved.

We may receive and retain payment confirmation details, such as the payment amount, date, reference, and information needed to identify the corresponding reservation.

Card Payments Through External Providers

Where a guest chooses to use an external payment link, payment information is entered and processed through the relevant payment provider’s secure environment.

Aries Villas may receive transaction confirmation, payment status, and other limited information necessary to manage the reservation and financial records.

We do not require guests to enter their full payment card details directly into the HBook reservation form.

External payment providers process information according to their own privacy policies and applicable legal obligations.

For information about Viva Wallet’s privacy practices, please refer to the privacy information provided through its official payment service.

7. Google Analytics 4

Our website uses Google Analytics 4 (GA4), a web analytics service provided by Google.

Google Analytics helps us understand website usage, including:

• Visits and page views.
• Website traffic sources.
• General geographical and device information.
• Visitor engagement and navigation.
• Interactions with selected website features.
• Reservation-related events.

We use this information to improve the website and assess the effectiveness of our services and marketing activities.

Our analytics implementation may measure the submission of a reservation request through an event named booking_completed.

This event may include the currency and the monetary value associated with the submitted reservation request.

This value represents the amount associated with the reservation request and does not necessarily mean that payment has been received.

We do not intentionally include guests’ names, email addresses, telephone numbers, or other directly identifying reservation details in Google Analytics event parameters.

Analytics data may be processed by Google in accordance with its applicable terms, privacy practices and data processing arrangements.

Analytics technologies requiring consent will be used in accordance with visitors’ consent preferences and applicable law.

For further information, please visit:

https://policies.google.com/privacy

8. Google Ads and Advertising Measurement

Aries Villas uses Google Ads to promote its accommodation services, including advertising to people searching for villa accommodation in Skiathos.

Google Ads and related measurement technologies may help us:

• Understand which advertising campaigns generate visits.
• Measure reservation requests associated with advertising interactions.
• Evaluate the effectiveness of advertisements.
• Improve advertising relevance and campaign performance.
• Create advertising audiences for future campaigns, where permitted and enabled.

Advertising identifiers, cookies or similar technologies are used only subject to applicable consent requirements.

Where remarketing or personalised advertising is enabled, it will be subject to the relevant privacy settings, legal requirements and available consent choices.

Advertising measurement does not necessarily identify individual visitors to Aries Villas by name.

We do not treat an advertising conversion value as proof that a reservation has been paid for or financially settled.

You can find further information about Google’s privacy practices and advertising controls at:

https://policies.google.com/privacy

https://myadcenter.google.com/

9. Cookies and Consent Management

Our website may use cookies and similar technologies for essential website functions, visitor preferences, analytics and advertising.

Cookies are small files or identifiers that websites and related services may store on or access from your device.

We distinguish between the following categories.

Strictly Necessary Cookies

These support essential website functions, security, technical operation and the storage of privacy preferences.

They may be used without consent where an applicable legal exemption permits this.

Functional and Preference Cookies

These may help remember visitor choices, interface settings or preferences that improve website functionality.

Where consent is legally required, these technologies are subject to the visitor’s choices.

Analytics Cookies

These help us measure website activity, understand visitor behaviour and improve our services.

Where required by applicable law, these cookies are used only after the visitor provides consent.

Marketing and Advertising Cookies

These may be used for advertising measurement, campaign attribution, advertising audiences and personalised advertising where enabled.

Where required by applicable law, these technologies are used only after the visitor provides consent.

Managing Your Cookie Preferences

We use Complianz, a consent management solution for WordPress, to provide information about cookies and manage applicable visitor preferences.

Through the cookie consent interface, visitors can accept or reject optional categories and manage their preferences. Consent may be withdrawn or changed through the available cookie settings controls.

Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

For more detailed information about the cookies and technologies used on our website, including their purposes and applicable retention periods, please refer to our separate Cookie Policy:

10. Contact Forms, Email and Communications

When you contact Aries Villas through our website, email, telephone or another communication channel, we process the information necessary to respond and provide assistance.

Information may include your name, contact details, enquiry content and subsequent correspondence.

We may use email delivery services and technical providers to send or receive messages relating to your enquiry or reservation.

We do not automatically add individuals to a promotional mailing list solely because they contact us or submit a reservation request.

If we introduce optional newsletters or promotional email subscriptions, we will provide the appropriate privacy information, obtain consent where required and offer a straightforward way to unsubscribe.

Operational communications necessary to manage a booking are treated separately from promotional marketing.

11. Third-Party Services and External Links

Our website is built using WordPress and may rely on trusted third-party services for hosting, booking administration, email delivery, website security, analytics, advertising and consent management.

Depending on the service and the information involved, relevant providers may include:

• Website hosting and technical support providers.
• HBook, for accommodation reservation administration.
• Google, for Google Analytics 4 and Google Ads.
• Complianz, for cookie consent management.
• Email infrastructure and email delivery providers.
• Banks and external payment service providers.
• Accounting, legal and other professional service providers.

Personal data is shared only where necessary for the stated purposes and subject to applicable legal requirements.

Some service providers act as processors on our instructions, while others may act as independent controllers for their own services and legal obligations.

Our website may also contain links to external websites, social media services, mapping services, messaging applications or payment platforms.

When you leave our website, the privacy practices of the external provider may apply. We encourage you to review the relevant third-party privacy information.

We do not sell guest contact information or reservation records to third parties.

12. International Transfers of Personal Data

Aries Villas operates in Greece, within the European Economic Area (EEA).

Some of our service providers may process or access information from countries outside the EEA, including where international technology infrastructure is involved.

Where personal data is transferred internationally, we assess the applicable data protection requirements and rely on appropriate legal transfer mechanisms where required.

These may include an applicable adequacy decision or approved contractual safeguards, such as Standard Contractual Clauses, together with any supplementary protections that are necessary.

Where United Kingdom data protection rules apply, relevant UK international transfer requirements will also be taken into account.

You may contact us for further information about the safeguards applicable to relevant transfers.

13. How Long We Keep Personal Data

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including applicable legal, accounting, tax, administrative and contractual requirements.

Retention is determined according to the type of information and its purpose.

Reservation and guest information: Retained as necessary to administer the booking and stay, and subsequently for applicable financial record-keeping requirements, legal obligations and relevant limitation periods.

Financial and transaction records: Retained for the periods required by applicable Greek tax, accounting and financial legislation.

Enquiries and correspondence: Retained for the time necessary to respond, manage any resulting reservation or ongoing matter, and address relevant disputes or legal claims.

Technical and security records: Retained for limited periods appropriate to security, troubleshooting, operational requirements and applicable legal obligations.

Analytics information: Retained according to the configured Google Analytics data retention settings and applicable privacy requirements. Aggregated reporting data may be retained under different settings from user-level or event-level information.

Consent records: Retained as necessary to demonstrate compliance with applicable consent and accountability requirements.

Marketing subscription information, where applicable: Retained while an applicable lawful basis for communication remains valid and deleted or restricted when it is no longer needed, subject to legal requirements.

Cookie data: Retention periods are described in the separate Cookie Policy.

When information is no longer required, we delete it, anonymise it or securely restrict its retention where deletion is not immediately possible or legally permitted.

14. Data Security

We take reasonable technical and organisational measures designed to protect personal information from unauthorised access, loss, alteration, misuse or unlawful disclosure.

These measures may include access controls, secure website connections, security maintenance, appropriate system permissions and restrictions on access to reservation information.

Access to personal data is limited to authorised individuals and relevant service providers who need that information for legitimate operational purposes.

Although we take steps to protect personal information, no internet transmission or electronic storage system can be guaranteed to be completely secure.

If you believe that information you have shared with us has been compromised, please contact us promptly.

15. Your Data Protection Rights

Depending on your location, the applicable legislation and the circumstances of processing, you may have the right to:

• Access: Request confirmation of whether we process your personal data and obtain a copy of relevant information.
• Rectification: Request correction of inaccurate or incomplete information.
• Erasure: Request deletion of personal information where the applicable legal conditions are met.
• Restriction: Request restriction of certain processing activities.
• Data portability: Receive qualifying personal data in a structured, commonly used and machine-readable format.
• Object: Object to processing based on legitimate interests, and object to direct marketing.
• Withdraw consent: Withdraw consent for processing that relies on consent, without affecting prior lawful processing.
• Automated decisions: Exercise applicable rights relating to solely automated decisions that produce legal or similarly significant effects.

We do not use solely automated decision-making to approve or reject accommodation reservations in a way that produces legal or similarly significant effects without appropriate human involvement.

Certain rights are subject to legal conditions and exceptions. For example, some booking and financial records may need to be retained to comply with legal obligations even after an erasure request.

To exercise your rights, please contact us using the privacy contact information in Section 2.

We may request reasonable information to verify your identity before responding, where necessary to protect personal data.

We will respond within the timeframe required by applicable data protection legislation, normally within one month, subject to any lawful extension.

16. Complaints and Supervisory Authorities

If you have concerns about how Aries Villas processes your personal information, we encourage you to contact us first so that we can investigate and respond.

You also have the right to lodge a complaint with a competent data protection supervisory authority.

For Greece, the supervisory authority is:

Hellenic Data Protection Authority (HDPA)

Website: https://www.dpa.gr/en

You may also have the right to contact another competent European supervisory authority.

Where United Kingdom data protection legislation applies, relevant rights to complain to the UK Information Commissioner’s Office may also be available.

17. Children’s Privacy

Our website and online reservation services are intended to be used by adults.

Accommodation reservations may include children travelling as part of a family or group. Relevant guest-count information may be supplied by an adult making the reservation.

We do not knowingly collect personal information directly from children for independent marketing purposes.

If you believe that a child has provided personal information to us inappropriately, please contact us so that we can investigate and take appropriate action.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our website, booking services, technology providers, business practices or legal requirements.

Any updated version will be published on this page, together with a revised “Last updated” date.

Where required by applicable law, we will provide additional notification or request renewed consent when relevant processing activities materially change.

We encourage visitors to review this Privacy Policy periodically.

19. Contact Us

If you have any questions about this Privacy Policy, how we handle your personal information, or wish to exercise your data protection rights, please contact us using the contact details provided in Section 2.

You may also reach us through our Contact Page.

We are committed to handling privacy enquiries fairly, transparently and in accordance with applicable data protection legislation.

End of Privacy Policy