Privacy Policy
Last Updated: May, the 19th 2026]
Welcome to Heronia Urban Suites (the “Website”). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our professional services, in compliance with the General Data Protection Regulation (GDPR) and applicable local data protection laws.
1. Data Controller
For the purposes of the GDPR, the Data Controller is:
Company Name: Heronia Urban Suites
Registered Office: I. Kotsika 23, Karistos, 34001, Evia
Contact Email: contact@heroniasuites.com
Phone Number: + 30 36939200285
2. The Data We Collect About You
We only collect personal data that is strictly necessary to fulfill your requests and provide our professional services. This may include:
Identity Data: First name, last name, title, or company/organization name.
Contact Data: Email address, telephone number, and billing/physical address.
Technical Data: Internet protocol (IP) address, browser type and version, time zone setting, operating system, and platform via essential cookies.
Usage & Project Data: Information you provide voluntarily through our contact forms regarding specific professional inquiries, briefs, or project requirements.
3. How and Why We Use Your Personal Data
We will only use your personal data when the law allows us to. Most commonly, we use your data under the following legal bases:
Consent: You have given clear consent for us to process your personal data for a specific purpose (e.g., submitting an inquiry via our contact form).
Performance of a Contract: Processing is necessary to take steps at your request before entering into a professional contract, or to perform an existing contract.
Legal Obligation: Processing is necessary for compliance with legal or regulatory obligations (e.g., tax regulations, professional invoicing).
| Purpose / Activity | Type of Data | Legal Basis for Processing |
| To respond to inquiries submitted via contact forms | Identity, Contact, Project Data | Explicit Consent |
| To manage professional consultation appointments | Identity, Contact | Performance of a contract / Pre-contractual steps |
| To manage payments, fees, and invoicing | Identity, Contact, Financial | Performance of a contract & Legal Obligation |
| To optimize website performance and user experience | Technical, Usage | Legitimate Interests (essential site functionality) |
4. Data Retention: How Long We Keep Your Data
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
Inquiry Data: If you contact us via a form and no contractual relationship follows, your data will be securely deleted within 12 months.
Client Data: If we enter into a professional agreement, contractual data is retained for the duration required by local tax and corporate law (typically 5 to 10 years).
5. Data Security
- We have put in place appropriate technical and organizational security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed.
- Our website utilizes secure SSL/TLS encryption for all data transmissions.
- Access to your personal data is strictly limited to authorized personnel (e.g., the direct project team) who are bound by professional confidentiality.
6. Disclosure of Your Personal Data
We do not sell, rent, or trade your personal data. We may share your data only with trusted third-party service providers who operate under strict data processing agreements, such as:
IT and Cloud Hosting Providers (who host our website or back up our communications).
Professional Advisers (such as legal counsel, accountants, or auditors) where strictly necessary.
Public Authorities if required to do so by law.
7. Your Legal Rights Under GDPR
Under the GDPR, you have the following rights regarding your personal data:
- Right of Access: You have the right to request a copy of the personal data we hold about you.
- Right to Rectification: You can request that we correct any incomplete or inaccurate data.
- Right to Erasure (“Right to be Forgotten”): You can ask us to delete your personal data where there is no good reason for us continuing to process it.
- Right to Restrict or Object to Processing: You can object to us processing your data under certain circumstances.
- Right to Data Portability: You can request the transfer of your data to you or a third party in a structured, machine-readable format.
- Right to Withdraw Consent: If we rely on your consent to process data, you can withdraw it at any time.
To exercise any of these rights, please contact us directly at [contact@heroniasuites.com]. We respond to all legitimate requests within 30 days.
8. Third-Party Links
This website may include links to third-party websites or plug-ins (such as payment gateways, maps, or external tools). Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.
9. Changes to this Privacy Policy
We reserve the right to update this Privacy Policy at any time. Any changes will be posted directly on this page with an updated “Last Updated” date. We encourage you to review this policy periodically.