Which data we collect
When you contact us with questions or feedback, we collect the information you choose to provide: your full name, company and position (where relevant), email address, and anything you write to us.
We also collect data through cookies. For more information, please read our Cookies policy.
Who controls and processes your data
The data controller is Lava Hospitality P.C. (Ι.Κ.Ε.), with its registered seat at A. Frantzi 14, 117 45 Athens, Greece — the operator of KHAI Syvota.
Our website is hosted by Vercel Inc. (United States), our infrastructure provider. Vercel is certified under the EU-US Data Privacy Framework, and any cross-border transfer of personal data is governed by Standard Contractual Clauses.
We do not operate a contact form. When you write to us by email, your message is delivered directly via your own email provider; we do not use a third-party inbound-email service.
Our authorised employees and associates also process your data. All the above parties are bound by confidentiality obligations.
Why and on which legal basis we process your data
We process your personal data on the basis of our legitimate interests (Article 6(1)(f) GDPR):
- To receive your questions and feedback and to respond to you after your contact.
- To keep our website secure and functioning properly.
Where we rely on your consent — for example, for non-essential cookies — we process your data on the basis of Article 6(1)(a) GDPR.
How long we keep your data
If you contact us, we retain the communication and its metadata until you ask us to delete it, unless it must be kept longer for a legitimate reason or to comply with a legal obligation.
For cookie retention periods, please refer to our Cookies policy.
Which rights you have
You may ask us:
- To provide you with a copy of the personal data we hold about you.
- To correct data that is inaccurate.
- To erase your data.
- To stop processing your data, or to limit its processing to certain uses.
- To send your data to another company or entity by reasonable means.
- To withdraw your consent where you have given it (for example, for the use of cookies).
How you can exercise your rights
If at any time you would like to exercise your rights or ask any question about your personal data, please write to compliance@khaisyvota.com. We will respond within 30 days of receiving your request.
If you feel that the protection of your personal data has been violated, you may lodge a complaint with the Hellenic Data Protection Authority — www.dpa.gr.