Featured Hotels Grace Hotel Santorini Katikies Oia Canaves Oia Hotel Santo Pure Oia Mystique Hotel Contact
Data Protection & Governance

Privacy Policy

Effective Date: January 1, 2026

1. Introduction & Data Controller

Friendflisortbord Ltd. ("Friendflisortbord", "we", "our", or "us"), registered under company number 12948201 at 14 Akrotiri View Boulevard, Fira 84700, Cyclades, Greece, operates the website friendflisortbord.autos. We are dedicated to safeguarding personal data in adherence with the European Union General Data Protection Regulation (EU GDPR), the UK GDPR, and the California Consumer Privacy Act (CCPA/CPRA).

2. Personal Data We Collect

We collect and process personal data exclusively under legitimate, transparent legal bases:

  • Direct Communications Data: When you submit our contact form, we collect your name, email address, message subject, and content to respond to your specific editorial or business inquiry.
  • Technical and Analytical Telemetry: Anonymized IP addresses, browser specifications, operating system versions, and page interaction times collected through cookie technologies.
  • Cookie Consent Choices: Your recorded decision concerning storage of functional and analytics cookies stored locally within your browser.

3. Legal Bases for Processing

We process personal data strictly pursuant to Article 6 of the GDPR:

  • Consent: When you voluntarily submit contact details or opt in to non-essential analytical cookies.
  • Legitimate Interests: To ensure website server stability, defend against denial-of-service attempts, and optimize user experience across modern browsers.
  • Legal Obligations: Compliance with corporate tax, administrative, and data audit responsibilities.

4. Third-Party Data Processors

We do not sell, rent, or trade your personal data. We utilize reputable infrastructure providers acting strictly as data processors under binding Data Processing Agreements (DPAs):

  • Hosting Infrastructure: Cloud hosting facilities operating within the European Economic Area (EEA).
  • Secure Transit Encryption: Cloud security layers that route web requests via TLS 1.3 encryption protocols.

5. International Data Transfers

Where technical telemetry traverses outside the EEA or the United Kingdom, transfers are conducted strictly under European Commission Standard Contractual Clauses (SCCs) to guarantee equivalent data safety safeguards.

6. Retention Schedules

Inquiries transmitted via our contact form are retained for no longer than twenty-four (24) months after case resolution, unless ongoing legal retention demands otherwise. Analytical metrics are aggregated, stripped of unique identifiers, and retained for thirty-six (36) months for architectural trend benchmarking.

7. Your Statutory Rights (GDPR & CCPA)

Depending on your jurisdiction, you maintain the following rights:

  • Access: The right to request an electronic copy of personal data maintained about you.
  • Rectification: The right to correct inaccurate or incomplete records.
  • Erasure: The "right to be forgotten" subject to statutory retention exceptions.
  • Restriction and Objection: The right to limit or oppose certain processing activities.
  • Data Portability: The right to obtain your submitted data in a structured, machine-readable format.
  • Non-Discrimination: We do not alter service levels if you choose to exercise your privacy rights under CCPA.

8. Data Protection Officer (DPO) Contact

To exercise any statutory rights or to raise questions concerning data handling, contact our designated Data Protection Officer via email at [email protected] or postal mail addressed to: Data Protection Desk, Friendflisortbord Ltd., 14 Akrotiri View Boulevard, Fira 84700, Greece.