Terms & Conditions / Privacy & GDPR

Last updated: 4 September 2026

1. About these terms

These Terms & Conditions apply to the use of the Elaton by Doukas Hotel website. By using the website, you agree to use it lawfully and not to interfere with its operation, security or availability.

2. Reservations, prices and availability

Room availability, prices, packages and booking conditions may change. A reservation becomes binding according to the confirmation and the rate or booking terms presented at the time of booking. Where a reservation is completed through a third-party booking or payment provider, that provider may apply additional terms.

3. Guest responsibilities

Guests are responsible for providing accurate booking and contact information, complying with hotel rules and applicable law, and paying any amounts due under the confirmed reservation. Specific accommodation, group, event or promotional rates may include additional conditions.

4. Website content and third-party services

We aim to keep website information accurate and current, but photographs, descriptions, availability and external information may change. The website may contain links or embedded services provided by third parties, including mapping, video, booking, payment and social-media services. Those third parties operate under their own terms and privacy notices.

5. Privacy and data controller

For personal data processed directly in connection with this website and hotel services, the hotel/operator acts as data controller. Privacy enquiries and requests may be sent to the hotel using the contact details shown on this page.

6. Personal data we may process

• Identification and contact data, such as name, telephone number and email address.
• Reservation and stay information, such as dates, room preferences, number of guests and messages relating to the booking.
• Transaction or payment-reference information where required for a booking or refund. Payment-card information may be processed directly by the relevant payment or booking provider rather than by this website.
• Technical information generated when the website is used, such as IP address, browser/device information, security logs and server logs.
• Any information you voluntarily provide when contacting the hotel or requesting a service.

7. Purposes and legal bases

Personal data may be processed to answer enquiries, take steps before entering into a booking contract, perform and manage reservations and hotel services, process modifications or refunds, comply with legal and accounting obligations, protect the security and legitimate interests of the hotel and its guests, and, where required, on the basis of your consent.

8. Recipients and international transfers

Personal data may be shared only where necessary with service providers supporting hosting, IT, communications, booking, payment, accounting or hotel operations, and with competent authorities where required by law. If a provider processes data outside the European Economic Area, appropriate legal safeguards must be used where required by the GDPR.

9. Data retention

Personal data is retained only for as long as necessary for the purpose for which it was collected and for any additional period required by applicable tax, accounting, contractual or other legal obligations. Retention periods may therefore differ depending on the type of record.

10. Your GDPR rights

Subject to the conditions of the GDPR, you may request access to your personal data, correction of inaccurate data, erasure, restriction of processing, data portability, or object to certain processing. Where processing is based on consent, you may withdraw that consent at any time without affecting earlier lawful processing.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority or another competent supervisory authority. dpa.gr

11. Cookies and external content

The website may use technically necessary browser storage and may load external content such as Google Maps or YouTube. External providers may receive technical information such as your IP address and device/browser data when their content is loaded. If analytics, advertising or other non-essential tracking technologies are introduced, consent should be requested where required by applicable law.

12. Security

Reasonable technical and organisational measures are used to protect personal data against unauthorised access, loss, alteration or disclosure. No internet transmission or storage method can be guaranteed to be completely secure.

13. Changes and contact

These terms and this privacy notice may be updated when services, legal requirements or data-processing practices change. The current version published on this website applies from its stated update date. For privacy or terms enquiries, contact the hotel by email or telephone using the details shown on this page.