Privacy & Cookie Policy

Last updated 22 August 2026

This policy explains what personal data we collect when you visit ventidipaxos.com or enquire about a stay, why we collect it, and what rights you have over it. We have written it to meet our obligations under the EU General Data Protection Regulation (GDPR) and Greek data protection law.

Who we are

Venti di Paxos, part of Nissos Blue Suites & Villas, Corfu and Paxos, Ionian Islands, Greece, is the data controller for the personal data described here.

Data protection contact: Christos Manos
Email: reservations@nissosblue.com

Please use this address for any question about this policy or to exercise any of the rights set out below.

What we collect and why

Enquiry and booking details. If you contact us by email, WhatsApp or an enquiry form, we receive the details you choose to give us — typically your name, email address, travel dates, party size and any notes about your stay. We use these solely to answer you and to arrange your stay.
Analytics data. Only if you agree. If you accept analytics cookies, Google Analytics records which pages you view, roughly where in the world you are, and which site or search brought you here. It is reported to us in aggregate; we do not use it to identify you.
Server logs. Our hosting provider records your IP address, browser type and the pages requested. These logs keep the site secure and available, and are kept only briefly.

We do not sell your personal data, and we do not use it for advertising or profiling.

Our legal bases

Consent (Art. 6(1)(a) GDPR) — for analytics cookies. You give this through the cookie banner and may withdraw it at any time.
Steps prior to a contract, and performance of a contract (Art. 6(1)(b)) — for handling your enquiry and your stay.
Legitimate interests (Art. 6(1)(f)) — for keeping the site secure and functioning, and for keeping records of correspondence.
Legal obligation (Art. 6(1)(c)) — where Greek tax or tourism law requires us to keep booking and guest records.

Cookies and similar technologies

A cookie is a small file stored on your device. This site sets no analytics cookies until you choose "Accept analytics" on the banner. Until then, Google Analytics runs in a consent-denied mode in which it stores nothing on your device.

Name	Type	Purpose	Duration
`nb_cookie_consent`	Essential (local storage)	Remembers whether you accepted or declined analytics, so we stop asking.	12 months
`_ga`	Analytics (consent required)	Google Analytics: tells returning visits apart using a randomly generated ID.	2 years
`_ga_1VRF8T9ZN2`	Analytics (consent required)	Google Analytics: keeps track of the current session.	2 years

Declining is entirely free of consequence — every part of the site works either way.

Changing your mind

You can withdraw or grant consent whenever you like. Withdrawing is as easy as giving it, and we delete the analytics cookies from your browser when you decline.

Who else processes your data

We keep the list of third parties deliberately short. Each acts as our processor or, where noted, as an independent controller:

Google Ireland Ltd — provides Google Analytics (property G-1VRF8T9ZN2), only after you consent. See Google's privacy policy.
Google Fonts — serves the typefaces used on this page; your IP address is visible to Google when the fonts load.
Mapbox — displays the interactive location map. See their privacy policy.
RateParity — shows a live rate comparison on our booking panel. See their privacy policy.
Reserve Online — runs our direct booking engine at ventidipaxos.reserve-online.net. See their privacy policy.
Our hosting provider — stores the site and its server logs.

If you follow a link to Booking.com, Airbnb, Instagram, Facebook or WhatsApp, those companies act as independent controllers under their own privacy policies.

Transfers outside the EEA

Some of these providers, including Google, may process data outside the European Economic Area. Where they do, transfers are covered by the European Commission's Standard Contractual Clauses and, for transfers to the United States, the EU–US Data Privacy Framework.

How long we keep it

Enquiries that do not lead to a booking — up to 24 months, then deleted.
Booking and guest records — for as long as Greek tax and tourism law requires, normally 5 years.
Analytics data — retained by Google for 14 months.
Server logs — typically 30 days.
Your cookie choice — 12 months, after which we ask again.

Your rights

Under the GDPR you may ask us to:

give you a copy of the personal data we hold about you (Art. 15);
correct anything inaccurate or incomplete (Art. 16);
delete your data where we have no continuing reason to keep it (Art. 17);
restrict or object to how we use it (Arts. 18 and 21);
receive it in a portable format (Art. 20);
withdraw consent at any time, without affecting what we did before you withdrew it (Art. 7(3)).

Write to reservations@nissosblue.com and we will respond within one month. There is no charge.

If you believe we have handled your data wrongly, you may complain to the Hellenic Data Protection Authority (Αρχη Προστασιας Δεδομενων Προσωπικου Χαρακτηρα), Kifissias 1-3, 115 23 Athens, www.dpa.gr. We would appreciate the chance to put things right first.

Children

This site is meant for adults arranging travel. We do not knowingly collect data from children under 16. If you believe a child has sent us personal data, please write to us and we will delete it.

Changes to this policy

If we change how we use personal data we will update this page and revise the date above. Material changes to analytics or cookies will reset your consent, so you will be asked again.