PRIVACY NOTICE

When you reach out to us—whether for enquiries, feedback, or reservations—we collect only the information you choose to provide, such as your full name, company and position (where relevant), email address, and any details included in your message.

We may also gather limited data through cookies to enhance your experience on our website. For more details, please consult our Cookies Policy.

The data controller is Lava Hospitality P.C. (Ι.Κ.Ε.), located at A. Frantzi 14, 117 45 Athens, Greece, and operator of KHAI Syvota.

Our website is hosted by Vercel Inc. (United States), certified under the EU-US Data Privacy Framework. Any cross-border transfer of personal data is governed by Standard Contractual Clauses.

When you submit the contact form on our website, your enquiry is transmitted to us through Resend, Inc. (United States), a third-party email-delivery provider acting as our processor. You may also email us directly, in which case your message is delivered via your own email provider.

Authorized employees and trusted associates may also process your data, all under strict confidentiality obligations.

We process your data based on our legitimate interests (Article 6(1)(f) GDPR):

• To respond to your enquiries and feedback.
• To maintain the security and proper functioning of our website.

Where applicable, for example in the case of non-essential cookies, we process data based on your consent (Article 6(1)(a) GDPR).

We retain communications and related metadata until you request deletion, unless retention is required for legal or legitimate business reasons.

For details on cookie retention, please refer to our Cookies Policy.

You may request at any time:

• A copy of the personal data we hold about you.
• Correction of inaccurate data.
• Deletion of your data.
• Restriction of processing or limitation to specific purposes.
• Transfer of your data to another entity where feasible.
• Withdrawal of consent, for example for cookies.

To exercise any of your rights or ask questions about your personal data, please contact us at compliance@khaisyvota.com. We will respond within 30 days.

If you believe your personal data has been mishandled, you may also lodge a complaint with the Hellenic Data Protection Authority: www.dpa.gr.