Privacy Policy

BACANO (“we”, “our”, “us”) operates the website bacano.gr and is the data controller responsible for your personal data.

Address: 25 Martiou 29, Rhodes, Greece 85100
Email: bacano@gmail.com

We may collect the following categories of personal data:

• Identity data – name, when provided via reservation or contact forms.
• Contact data – email address and phone number, when you make a reservation or contact us.
• Technical data – IP address, browser type and version, time zone, browser plug-in types, operating system and platform, and device information, collected automatically when you visit our site.
• Usage data – pages visited, links clicked, time spent on pages, referral source.
• Cookie data – see our Cookie Policy for full details.

We do not collect payment card details — any payments are processed directly by third-party providers.

We use your data to:

• Manage and process reservation requests.
• Respond to inquiries sent via email or phone.
• Improve and maintain our website and services.
• Comply with legal obligations.
• Analyse aggregate, anonymised usage trends to improve our offering.

We will never sell your personal data to third parties or use it for unsolicited marketing without your explicit consent.

Under the General Data Protection Regulation (GDPR), we process your data on the following legal bases:

• Contract – to fulfil a reservation or service request you have made.
• Legitimate interest – to operate and improve our website, detect fraud, and maintain security.
• Consent – for cookies and similar tracking technologies where required by law.
• Legal obligation – where processing is required to comply with applicable law.

We retain personal data only as long as necessary for the purposes set out in this policy, or as required by law. Reservation data is typically retained for 12 months. Technical and usage data from cookies may be retained for up to 13 months. When data is no longer needed, we securely delete or anonymise it.

We may share your data with trusted third-party service providers who assist us in operating the website, including:

• Hosting providers – to serve and maintain our website.
• Analytics providers – to understand usage patterns (data may be anonymised).
• Map providers – Google Maps is embedded on our Info page to display our location.

All third parties are contractually required to protect your data and process it only on our instructions.

Under the GDPR you have the right to:

• Access – request a copy of the personal data we hold about you.
• Rectification – ask us to correct inaccurate or incomplete data.
• Erasure – request deletion of your data where there is no legitimate reason to retain it.
• Restriction – ask us to suspend processing of your data in certain circumstances.
• Portability – receive your data in a structured, machine-readable format.
• Objection – object to processing based on legitimate interests.
• Withdraw consent – where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at bacano@gmail.com. We will respond within 30 days. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (dpa.gr).

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. Our website uses HTTPS encryption for all data in transit. However, no method of internet transmission is completely secure and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time to reflect changes in law or our practices. We will post the updated version on this page with the revised “Last Updated” date. We encourage you to review this policy periodically.

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at bacano@gmail.com or write to us at 25 Martiou 29, Rhodes, Greece 85100.