Last updated: 23 July 2026
1. Who is responsible for your information
The data controller is the owner and operator of Eda House Corfu, a privately owned holiday apartment in Gouvia, Corfu, Greece. The Greek property registration number is 00002739586.
You can contact the controller through the booking enquiry form or by WhatsApp.
2. Information we collect
- Contact and enquiry details: name, email address, WhatsApp number, requested dates, number of guests and any message you provide.
- Booking administration details: confirmation status, agreed arrangements and correspondence relating to the stay.
- Limited technical information, such as the IP address recorded when an enquiry is submitted, for security and abuse prevention.
- Information you choose to send through WhatsApp or email.
Please do not include sensitive personal information in the free-text message unless it is genuinely necessary for your stay.
3. Why we use it
- To answer an enquiry and take steps requested by you before entering into a booking contract.
- To administer and perform an accepted booking.
- To comply with applicable tax, accounting and accommodation obligations.
- To protect the website and booking service against misuse and to establish, exercise or defend legal claims where necessary.
The principal legal bases are steps taken at your request before a contract, performance of a contract, compliance with legal obligations and our legitimate interests in operating and protecting the service. Consent is used only for optional external content such as Google Maps.
4. Service providers and external platforms
Information may be processed by the hosting provider and by Amazon Web Services when Amazon SES is used to send booking emails. If you contact us through WhatsApp, your use of that service is also governed by WhatsApp's privacy terms.
Google Places is contacted from the server to retrieve public Google review information. The public gallery displays reviewer attribution without loading reviewer profile photographs. Google Maps is not loaded unless you permit it or select the one-time map button. These providers may process information outside the European Economic Area under their applicable safeguards.
We do not sell personal information and do not use enquiry details for unrelated advertising.
5. How long information is kept
Enquiry information is retained only for as long as reasonably needed to answer the enquiry, manage a booking, resolve disputes and meet legal record-keeping duties. Information that is no longer required is deleted or anonymised. Security logs may be kept for a limited period appropriate to investigating misuse.
6. Your data protection rights
Depending on the circumstances, you may ask for access to, correction of, deletion of or restriction of your personal information, request portability, or object to processing based on legitimate interests. Where processing relies on consent, you may withdraw that consent at any time without affecting earlier lawful processing.
Contact us using the details above to exercise a right. You may also lodge a complaint with the Hellenic Data Protection Authority or, where applicable, your local supervisory authority.
8. Changes to this notice
We may update this notice when the website, service providers or legal requirements change. The date at the top shows the latest revision.