Privacy Policy

Last updated 11 October 2026

1. Who we are

This website, galation.gr, is operated by GALION IKE (ΑΦΜ 800779297), which runs Galation Hotel Mykonos as part of the Aegean Collection. GALION IKE is the data controller for the personal information described in this policy. You can reach us at info@galation.gr or by post at GALION IKE, Mykonos 846 00, Greece.

2. What we collect

Enquiries. If you email, call or message us, we receive whatever you choose to share, such as your name, contact details, dates and requests.

Reservations. Bookings are made on our reservation system at reserve-online.net, operated by WebHotelier, a separate website with its own privacy notice. We receive the booking details you enter there so that we can host you. This website never collects card details.

Technical data. Our hosting provider processes technical information such as your IP address and browser details in order to deliver and protect the website.

Browser storage and third-party services. We store your cookie choice and whether you closed our book-direct offer. Only if you allow it do we load Google Maps, which sets its own cookies. The full list is in our cookie policy. We do not use analytics or advertising trackers.

3. Why we use it and our legal basis

• To answer enquiries and take and manage reservations — steps taken at your request before a contract, and performance of that contract (Article 6(1)(b) GDPR).
• To meet our legal obligations, for example tax, accounting and tourism regulations (Article 6(1)(c)).
• To keep the website secure and working — our legitimate interest (Article 6(1)(f)).
• To load Google Maps and to send any marketing email — only with your consent (Article 6(1)(a)), which you can withdraw at any time.

4. Who we share it with

We do not sell your personal information. We share it only with the providers we need to run the website and your stay — our hosting provider, our email provider and WebHotelier — and, if you allow maps, Google. We disclose information to authorities when the law requires us to.

5. Transfers outside the EU

Some of these providers, such as Google, may process data outside the European Economic Area, including in the United States. Such transfers rely on the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

6. How long we keep it

We keep enquiries for as long as needed to answer them and for up to two years afterwards, unless they lead to a booking. Booking records are kept for as long as Greek tax and accounting law requires. Your cookie choice is kept for six months; the book-direct flag is deleted when you close the tab.

7. Your rights

You have the right to access the personal information we hold about you, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. Where we rely on consent you can withdraw it at any time — for cookies, use Cookie Settings. To exercise any of these rights, email info@galation.gr.

You also have the right to complain to the Hellenic Data Protection Authority, Kifisias 1–3, 115 23 Athens (www.dpa.gr).

8. Children

This website is not aimed at children under 16, and we do not knowingly collect their personal information.

9. Security

The website is served over an encrypted connection (HTTPS), and we limit access to your information to the people who need it to help you. No transmission over the internet is completely secure.

10. Changes to this policy

We may update this policy. The date at the top shows when it last changed.