Privacy policy
Last updated: February 2025
1. Introduction
This Privacy Policy explains how DirectBnB.gr ("we", "us", "our") collects, uses, stores, and protects your personal data when you use our website. DirectBnB.gr operates as a property listing directory for short-term vacation rentals in Greece. We are committed to protecting your privacy in accordance with the EU General Data Protection Regulation (GDPR) and applicable Greek data protection law.
2. Data We Collect
Account data: When you sign in with Google, we receive your name, email address, and profile picture from Google OAuth. Property listing data: If you are a host, we store the property information you provide — name, address, description, photos, pricing rules, calendar availability, bed details, amenities, and contact details (phone, email, website, social media). Usage data: We may collect basic usage information such as pages visited, browser type, and device type to improve the platform. Cookies: We use a session cookie for authentication and a locale preference cookie to remember your language selection.
3. How We Use Your Data
We use your personal data to: • Authenticate your account and maintain your session. • Display and manage your property listings. • Operate, maintain, and improve the platform. • Send transactional emails related to your account (e.g. welcome emails). • Respond to support requests. We do not use your data for profiling, automated decision-making, or targeted advertising.
4. Legal Basis for Processing (GDPR Art. 6)
Contract performance: Processing your account and listing data is necessary to provide the directory service you signed up for. Consent: You consent to data collection when you sign in with Google and accept our terms. Legitimate interest: We process basic usage data to maintain platform security and improve the service.
5. Data Sharing & Third Parties
We do not sell, rent, or trade your personal data. We share data only with the following service providers, strictly for platform operation: • Google (OAuth authentication) • DigitalOcean Spaces (image storage) • Email service provider (transactional emails) All third-party providers are bound by their own GDPR-compliant privacy policies. Your direct contact information (phone, WhatsApp, Viber, etc.) is displayed publicly on your listing as you provide it — this is the core function of the directory.
6. Cookies
We use only essential cookies: • Session cookie: Required for authentication. Expires when your session ends. • Locale cookie: Remembers your language preference (English or Greek). Persistent. We do not use tracking cookies, analytics cookies, or third-party advertising cookies.
7. Data Retention
We retain your account data and listing data for as long as your account is active. If you delete your account, we will remove your personal data and listing information within 30 days. Anonymized usage data may be retained for analytical purposes.
8. Your Rights Under GDPR
As a data subject in the EU, you have the right to: • Access: Request a copy of the personal data we hold about you. • Rectification: Request correction of inaccurate or incomplete data. • Erasure: Request deletion of your personal data ("right to be forgotten"). • Data portability: Request your data in a structured, machine-readable format. • Restriction: Request that we limit how we process your data. • Objection: Object to data processing based on legitimate interest. • Withdraw consent: Withdraw your consent at any time without affecting prior processing. To exercise any of these rights, contact us at hello@directbnb.gr. We will respond within 30 days.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including encrypted connections (HTTPS), secure database access, and restricted administrative access. While no system is completely secure, we take reasonable steps to safeguard your information.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.
11. Contact
If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at: DirectBnB.gr Email: hello@directbnb.gr