Privacy Policy
Last updated: 21 October 2026
Who is responsible
The controller is the operator of the accommodation Mandilaria Studios. Please contact reservations@mandilariastudios.com about this policy or your data.
Your enquiries
When you use the contact form, we receive the name, email address, subject, telephone and message you provide. A valid enquiry is saved in the accommodation contact database and sent by email to the accommodation, the technical support team and the address you supplied for the acknowledgement. Please avoid including sensitive information that is not needed for your enquiry.
Alongside an enquiry, the site records connection details such as the IP address, browser information and referring page for handling the request and security.
We process enquiry details to respond to your request and, where relevant, take steps before a booking at your request. Necessary website security and spam prevention serve our legitimate interest in operating a reliable service. Optional analytics, advertising measurement and maps use your consent.
Guest reviews
If you choose to submit a review, we receive the name, email, country, city, rating, title and text you provide, together with technical connection details for handling and security. A valid review is saved and emailed to the accommodation and the technical support team. When marked for publication, its name, rating, title and text can appear publicly on the website. Contact the accommodation at the email above about your review or its retention.
Newsletter
If you register through the newsletter form, we receive your email and technical connection details such as your IP address, browser information and referring page. A valid registration is saved and emailed to the accommodation and technical support, with confirmation to your supplied address. You can ask to stop newsletter messages by contacting the accommodation at the email above. Your analytics cookie choice does not register you for the newsletter.
Hosting and service providers
The website and its static assets use Google Cloud hosting, including our own storage bucket, mandilaria-studios. Requests to hosting and other enabled services convey technical connection information, such as an IP address, requested resource and browser details.
Measurement before and after a choice
Before a choice, and after Decline, the Google tag library can load and send cookieless consent-state and measurement pings directly to Google (region1.google-analytics.com) using Advanced Consent Mode. The checked denied state does not set analytics cookies. These pings do not use cookies; like any web request, they carry technical connection details such as the IP address.
After Accept, Google Analytics 4 measures page visits and interactions directly to Google (region1.google-analytics.com). The current property is configured for 14-month event-data retention and Google signals is ON. Google signals can enrich reporting for signed-in Google users who have enabled Ads Personalization. About Google signals. These settings concern Analytics event data, not a promise about every log or cookie lifetime.
The site includes Google Ads tags for advertising measurement and remarketing. Measurement goes directly to Google, not through a first-party measurement endpoint. Optional advertising features follow the choice in the cookie banner.
Form security
reCAPTCHA Enterprise checkbox loads when you interact with a form, independently of your analytics choice, to help prevent automated abuse. Submitted enquiry fields can also be checked by the site’s automated spam-screening service through Google Cloud (europe-west1 region). If a genuine enquiry is rejected, please contact the accommodation by email.
Google services are subject to the Google Privacy Policy and Terms. Providers may process data outside Greece or the European Economic Area under the arrangements described in their policies.
Website chat
The website chat is a service operated for the accommodation. Its provider loads only when you open the chat, including if you declined analytics. When you use it, connection details and the messages you choose to send are processed to provide the conversation and respond to your request. The chat may reply automatically. Contact the accommodation for questions about a chat record or its retention.
Retention and your choices
The retention period for enquiry records and correspondence is determined by handling your request, any resulting booking and applicable legal or dispute obligations. You may ask the accommodation about the retention or deletion of your particular enquiry. Withdrawing optional consent stops the relevant future use; it does not automatically erase an enquiry or data already sent to a provider.
Your rights
Subject to the GDPR conditions, you may request access, correction, erasure, restriction or portability of your data, object to relevant processing, and withdraw consent without affecting the lawfulness of earlier consent-based processing. Contact the accommodation at the address above; it may need information to verify your identity. You may complain to the Hellenic Data Protection Authority.
