Privacy Policy

Our Commitment

The Pink Palace S.A. (hereinafter referred to as “the Hostel”, “The Pink Palace”, or “we”) places the protection of your personal data among its highest priorities, whether you are a guest at our property or a visitor to our website (hereinafter referred to as “you”). Because your trust means everything to us, this Privacy Policy has been prepared to explain clearly how we handle your personal information. Every operation carried out on personal data is grounded in your consent and in the applicable provisions of domestic and European law.

Scope

At The Pink Palace we recognise how vital it is to safeguard our guests’ and visitors’ privacy. We are committed to being as transparent as possible about the ways in which we collect, use, share, transfer, and store your personal data. This Privacy Policy sets out the practices we follow in relation to your privacy.

It applies to this website, our online applications, and all online and offline promotional activities carried out by The Pink Palace S.A., as well as any service we provide that references this Privacy Policy or includes a link to it (collectively, the “Services”).

Please be aware that this Policy applies to your use of our Services regardless of the device through which you access them — computer, mobile phone, tablet, television, or any other medium. It also covers Services delivered without electronic means.

Data Controller

For the purposes of data protection legislation, The Pink Palace S.A. acts as the Data Controller. This means we are responsible for determining the means and purposes for which your personal data is collected and used.

Personal Data We Collect

“Personal data” refers to any information that is collected or recorded in a manner that may enable the direct or indirect identification of a natural person.

We may lawfully collect the following categories of personal data:

1. Contact details— surname, given name, father’s name, passport or ID card details, telephone number, home address, email address
2. Personal details— date of birth, nationality, place of birth
3. Billing details— credit card number, VAT number
4. Stay-related details— dates of arrival and departure, room number, enquiries or comments made during or after your visit

Sensitive data

Data protection legislation identifies special categories of information that require stricter handling — including health data, racial or ethnic origin, sexual orientation, religious beliefs, and political opinions. We process such data only when you provide it in connection with a specific request (for example, a food allergy) or when we are legally obliged to do so.

Children

For guests under 16 years of age, we limit the data we collect to given name, surname, nationality, and date of birth. Such data must be provided exclusively by a parent or legal guardian.

Automatically collected information

In addition to the information you provide directly, we may collect certain data automatically. This includes language settings, IP address, location data, and device settings. We may also make use of Cookies — small files placed on your electronic device that allow us to analyse user behaviour. Full details on the types of Cookies we use and how they are processed are available in our separate Cookie Policy.

Purposes of Processing

We collect your personal data in order to manage your relationship with The Pink Palace S.A. and to deliver an improved level of service. Specifically, we process personal data for the following purposes:

1. Managing reservations and related hospitality services
2. Handling our relationship with you before, during, and after your stay
3. Improving system and data security
4. Complying with Greek and European legal requirements
5. Keeping guests informed about hostel operations and updates

Legitimate Interest for Processing

We may also collect and use personal data where we have a legitimate interest in doing so, including in connection with:

1. Day-to-day hostel operations and management
2. Activities conducted through electronic devices and systems
3. Participation in marketing programmes or hosted events
4. Information received from third-party sources

Third Party Access

The Pink Palace S.A. does not disclose your personal data to third parties for their own commercial or marketing purposes without your prior consent.

However, we may share your information with the following categories of recipients:

1. Service providers and processors— third parties who process data on our behalf, such as payment service providers and banks
2. Regulatory and public authorities— where required by law or to protect the integrity of our Services, including compliance with legal procedures or court orders

Security & Data Retention

We handle all personal information with the utmost care and respect, and we take all reasonable steps to keep your data secure from the moment it enters our systems and storage infrastructure. We follow best practices for the collection, storage, and processing of data, and we apply appropriate security measures to guard against unauthorised access, modification, disclosure, or destruction of information held on our website or in our databases.

We take reasonable measures to ensure that your personal data is retained only for as long as is necessary for the purpose for which it was collected, and no longer than required under applicable legislation.

Your Rights

Subject to the conditions set out in the General Data Protection Regulation, you have the following rights with respect to your personal data:

1. The right to receive transparent information about how your data is processed
2. The right to access your personal data
3. The right to rectification of inaccurate data
4. The right to erasure (the “right to be forgotten”)
5. The right to restriction of processing
6. The right to data portability
7. The right to object to processing

Where we process your data on the basis of consent, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of any processing carried out prior to that point. The Pink Palace S.A. retains the right to continue processing data that is strictly necessary to fulfil its tax and legal obligations. Withdrawing consent carries no consequences beyond our inability to carry out the processing described above.

Policy Amendments

The Pink Palace S.A. reserves the right to amend this Privacy Policy at any time in order to reflect changes in the regulatory environment or our business operations. To remain informed of any updates, we recommend that you check our website regularly — in particular before submitting a reservation request. The current version of this Privacy Policy will always be available at https://thepinkpalace.com/privacypolicy and displayed on our premises.

Questions

If you have any questions about this Privacy Policy, we warmly encourage you to reach out to us. Our contact details are provided in the Data Controller and Your Rights sections above.