Privacy & Data Protection

Who we are

The data controller is I AM SANTORINI, Mesaria, Thira, Santorini, Greece (PC 84700). For any privacy question you can contact us at info@iamsantorini.com.

What we collect

• Booking details - your name, email, phone/WhatsApp number, party size and preferred dates.
• Messages - the content of enquiries you send us by form, email or WhatsApp.
• Newsletter - your email address, if you choose to subscribe.
• Technical data - basic, anonymous usage information needed to operate the website.

How we use your data

We use your information to respond to enquiries, arrange and confirm your booking, keep you informed about your tour, and - only with your consent - to send occasional travel news. We do not sell your data.

Legal bases

• Contract - to handle your booking and provide the tour.
• Consent - for newsletter emails, which you can withdraw at any time.
• Legitimate interests - to run and secure our website and respond to your messages.

Sharing

We share data only where necessary: with trusted service providers who help us operate (for example, booking or email tools), and where required by law. Any third-party booking platform you use has its own privacy policy.

How long we keep it

We keep booking records for as long as needed to provide our service and to meet legal and accounting obligations, after which they are securely deleted. Newsletter data is kept until you unsubscribe.

Your rights

Under the GDPR you have the right to access, correct, delete, restrict or object to the processing of your data, and to data portability. To exercise any of these, email info@iamsantorini.com. You also have the right to complain to the Hellenic Data Protection Authority (HDPA).

Cookies

This website uses only the minimal cookies needed for it to function. We do not use advertising trackers. You can control cookies through your browser settings.