Privacy Policy

South Star Private Villas

Last updated: 20/05/2026

1. Introduction

This Privacy Policy explains how S. & S. BOROVAS L.P. collects, uses, shares, and protects your personal data when you visit https://southstarvilla.com/.

We are committed to protecting your privacy and handling your data in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and any applicable national implementing legislation.

By using the Website or Services, you acknowledge that you have read and understood this Policy. This Policy works alongside our Terms and Conditions.

2. Who We Are (Data Controller)

The data controller responsible for your personal data is:

S. & S. BOROVAS L.P.

REAL ESTATE EXPLOITATION / MANAGEMENT
31, ZAGORION ST.
104 45 ATHENS,
VAT No: GR803206520
Email: info@southstarvilla.com
Phone: +30 694 783 0287

3. Personal Data We Collect

We may collect and process the following categories of personal data:

3.1 Information you provide to us

Identity and contact data: name, email address, postal address, telephone number, date of birth (where required for booking), nationality, and identification details where legally required for check-in.

Booking data: dates of stay, property selected, number and details of guests in your party, and any special requests or accessibility needs.

Account data: username, password (stored in encrypted form), wishlist items, and saved preferences.

Payment data: billing address and transaction details. Card details are processed directly by our payment provider — we do not store full card numbers (see Section 7).

Communications: the content of messages, enquiries, reviews, and correspondence you send us.

3.2 Information we collect automatically

Technical and usage data: IP address, browser type, device information, operating system, referring URLs, pages viewed, and time spent on the Website.

Cookies and similar technologies: as described in Section 6.

3.3 Special category data

We do not generally seek special category data. If you voluntarily provide health or accessibility information to help us accommodate your stay, we process it only with your consent and solely for that purpose.

4. How We Collect Your Data

We collect data when you: browse the Website; create an account; make or request a booking; contact us by any channel; subscribe to marketing; leave a review; or interact with our cookies and similar technologies. We may also receive data from third parties such as payment processors, booking partners, or analytics providers.

5. How and Why We Use Your Data (Purposes and Legal Bases)

Under the GDPR we must have a lawful basis for processing your data.

Where we rely on legitimate interests, we have assessed that these are not overridden by your rights and freedoms.

6. Cookies and Similar Technologies

The Website uses cookies and similar technologies to function, remember preferences, analyse traffic, and (where you consent) support marketing.

Strictly necessary cookies are required for the Website and booking process to work.

Functional, analytics, and marketing cookies are used only where permitted, and where consent is required, only after you provide it.

You can manage your preferences through our cookie banner and your browser settings. Disabling certain cookies may affect Website functionality.

7. Sharing Your Data

We do not sell your personal data. We may share it with:

Service providers (processors) who act on our behalf — for example hosting, IT support, payment processors, email and communications platforms, analytics providers, and cleaning/property management partners — under contracts that require them to protect your data.

Property owners or local managers, where necessary to deliver your stay.

Professional advisers such as lawyers, accountants, and insurers.

Authorities and regulators, where required by law or to protect our rights.

A successor entity, in connection with a merger, acquisition, or sale of assets.

8. International Transfers

Your data is primarily processed within the European Economic Area (EEA). Where we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as an adequacy decision by the European Commission or Standard Contractual Clauses. You may request a copy of the relevant safeguards by contacting us.

9. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. As a general guide:

Booking and transaction records: retained for 2 years to meet tax and legal obligations.

Account data: retained while your account is active and for 3 months thereafter, unless you ask us to delete it sooner.

Marketing data: retained until you withdraw consent or object.

When data is no longer needed, we securely delete or anonymise it.

10. Data Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, alteration, or disclosure — including encryption in transit, access controls, and secure hosting. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

11. Your Rights

Subject to applicable law, you have the right to:

Access – request a copy of the personal data we hold about you.

Rectification – ask us to correct inaccurate or incomplete data.

Erasure – ask us to delete your data (“right to be forgotten”) where there is no overriding reason to keep it.

Restriction – ask us to limit our processing in certain circumstances.

Data portability – receive your data in a structured, machine-readable format.

Object – object to processing based on legitimate interests, and to direct marketing at any time.

Withdraw consent – where processing is based on consent, withdraw it at any time (without affecting prior lawful processing).

Lodge a complaint – with a supervisory authority (see Section 14).

To exercise any right, contact us at info@southstarvilla.com. We will respond within one month, as required by the GDPR. We will not charge a fee unless your request is manifestly unfounded, excessive, or repetitive.

12. Marketing Communications

Where you have consented, we may send you offers and updates. You can opt out at any time via the unsubscribe link in any marketing email or by contacting us. Opting out of marketing does not affect service-related communications necessary to manage your bookings.

13. Children’s Privacy

The Services are not directed at children, and we do not knowingly collect personal data from children under 17 years old without parental consent. Booking details for minors travelling in your party are provided by the responsible adult Guest. If you believe we have collected a child’s data improperly, please contact us so we can delete it.

14. Complaints and Supervisory Authority

If you have a concern about how we handle your data, please contact us first so we can try to resolve it. You also have the right to lodge a complaint with a data protection supervisory authority.

For Greece: the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα) — https://www.dpa.gr.

15. Third-Party Links

The Website may link to third-party websites or services. We are not responsible for their privacy practices, and we encourage you to review their policies.

16. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the latest version. Material changes will be notified through the Website or by email where appropriate. Continued use of the Services after changes take effect constitutes acceptance of the revised Policy.

17. Contact Us

If you have any questions about this Privacy Policy or how we handle your data: