Privacy Policy

Last updated: August 2026

1. Controller

The controller responsible for the processing of personal data on this website is:

Bromberg Real Estate I.K.E.
Tsoukalades
31100 Lefkada
Greece

Phone: +49 172 9743666
Email: villasagerides@gmail.com

2. General Information on Data Processing

The protection of your personal data is important to us. We process personal data only in accordance with applicable data protection legislation, in particular the General Data Protection Regulation (GDPR).

Personal data means any information relating to an identified or identifiable natural person. This may include, for example, your name, email address, telephone number, IP address and information you provide when submitting a contact or booking enquiry.

3. Hosting and Provision of the Website by Wix

This website is operated using services provided by Wix.

The platform provider is Wix.com Ltd., based in Israel. In connection with the provision and technical operation of our website, Wix processes personal and technical data relating to website visitors.

This may include, in particular, IP address, browser and device information, date and time of access, pages visited, referrer information and technical log and security data.

The processing is carried out to provide the website technically, ensure secure and stable operation, identify technical errors and protect the website against misuse.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in providing a secure, reliable and functional website.

Wix may use additional companies and sub-processors to provide its services. Personal data may therefore also be processed outside the European Economic Area.

When Wix services are used, personal data is initially processed by Wix.com Ltd. in Israel. Israel is recognised by the European Commission as providing an adequate level of data protection. Where data is transferred to countries without an adequate level of data protection, Wix states that it uses, in particular, Standard Contractual Clauses approved by the European Commission and other appropriate safeguards.

4. Server Log Files

When you visit our website, technical information may automatically be processed in server log files.

This may include:

IP address, date and time of access, page or file requested, browser type and browser version, operating system, referrer URL and technical connection information.

This processing is necessary for the technical provision of the website, the detection and resolution of errors and the security of our systems.

The legal basis is Article 6(1)(f) GDPR.

We do not combine this information with other data for advertising or profiling purposes.

5. Cookies and Similar Technologies

Our website may use cookies and similar technologies.

Cookies are small files stored on your device that enable certain website functions.

Technically necessary cookies and technologies may be required in particular for security functions, the correct display of the website, language settings and other essential website functions.

Where non-essential cookies or similar technologies are used, they are used only in accordance with applicable legal requirements and, where required, on the basis of your consent.

You can change or withdraw any consent you have given at any time with effect for the future using the cookie or privacy settings available on the website.

We currently do not use additional analytics or marketing cookies for our own advertising purposes.

6. Contact by Contact Form or Email

If you contact us using our contact form or by email, we process the personal data you provide.

This may include:

first and last name,
email address,
telephone number where provided,
the content of your message,
date and time of your enquiry.

The information is processed solely for the purpose of handling your enquiry and communicating with you.

Where your enquiry relates to the preparation or performance of a stay or booking, the legal basis for processing is Article 6(1)(b) GDPR.

For general enquiries, processing is based on Article 6(1)(f) GDPR. Our legitimate interest is to process and respond to enquiries addressed to us.

Information submitted through our forms may be stored and processed within systems provided by Wix.

7. Booking and Availability Enquiries

For accommodation that can be enquired about directly through Villas Agerides, you can submit a booking or availability enquiry through our website.

The following personal data may in particular be processed:

name,
email address,
telephone number,
requested accommodation,
arrival and departure dates,
number of guests,
message and any other information voluntarily provided by you.

We process this information to check availability, handle your enquiry, communicate with you and prepare a possible accommodation agreement.

The legal basis is Article 6(1)(b) GDPR.

Submitting an enquiry through our website does not itself constitute a binding contract or confirmed booking.

8. reCAPTCHA and Protection Against Automated Submissions

We use a reCAPTCHA system provided through Wix to protect our contact and booking forms against spam, automated submissions and misuse.

reCAPTCHA is used to determine whether an interaction is carried out by a human user or an automated program.

Technical information may be processed in connection with the use of reCAPTCHA. This may include, in particular, IP address, browser and device information, connection data and information about interaction with the CAPTCHA.

The processing serves solely to protect our website and forms against automated misuse and spam.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in maintaining the security and functionality of our website and preventing abusive form submissions.

The reCAPTCHA technology used by Wix is based on Google reCAPTCHA technology. Google may therefore also process data in connection with the technical provision of this service. Google's privacy provisions additionally apply to processing carried out by Google.

9. Recipients and Processors

We disclose personal data only where this is necessary to provide our website, process an enquiry, perform a contractual relationship or comply with a legal obligation.

Our technical service providers include, in particular, Wix.

Wix may itself use additional sub-processors for hosting, infrastructure, communications, security and technical operation.

We do not disclose your personal data to third parties for their own advertising purposes.

10. International Data Transfers

The use of Wix and associated technical services may result in personal data being processed outside the European Economic Area.

Wix.com Ltd. is based in Israel. Israel is recognised by the European Commission as providing an adequate level of data protection.

Where personal data is transferred to other countries for which no adequacy decision exists, the relevant providers state that appropriate safeguards are used. These may include Standard Contractual Clauses approved by the European Commission.

11. External Links

Our website contains links to external websites and services, for example mapping services, travel operators or other partner websites.

These external services are accessed only when you click the relevant link.

Once you leave our website, we have no control over the processing of personal data carried out by the respective external provider. The privacy policy of the respective provider applies to any further processing.

12. Analytics, Tracking and Advertising

We currently do not use additional services to create user profiles, personalised advertising or our own external web analytics or marketing tracking services.

This does not affect technical processing carried out by Wix and its service providers where such processing is necessary for the provision, security, error detection and functionality of the platform.

13. Retention Period

We retain personal data only for as long as necessary for the respective purpose of processing or for as long as statutory retention obligations apply.

Data relating to general contact enquiries is deleted when the enquiry has been fully dealt with and there are no statutory or other legitimate reasons requiring further retention.

Data connected with booking enquiries and contractual relationships may be retained for longer periods where required by tax, commercial or other statutory retention obligations.

Technical data and server log files are deleted or anonymised in accordance with the applicable retention periods of the systems used.

14. Your Rights

Subject to the applicable legal requirements, you have in particular the right of access to your personal data under Article 15 GDPR, the right to rectification under Article 16 GDPR, the right to erasure under Article 17 GDPR, the right to restriction of processing under Article 18 GDPR, the right to data portability under Article 20 GDPR and the right to object under Article 21 GDPR.

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future in accordance with Article 7(3) GDPR. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise your rights, you may contact us at any time:

Email: villasagerides@gmail.com

15. Right to Object

Where we process personal data on the basis of Article 6(1)(f) GDPR, you have the right under Article 21 GDPR to object to such processing at any time on grounds relating to your particular situation.

Following a valid objection, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing is required for the establishment, exercise or defence of legal claims.

16. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data infringes the General Data Protection Regulation.

The supervisory authority responsible in particular for the country in which our company is established is:

Hellenic Data Protection Authority
Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα
Kifisias 1-3
115 23 Athens
Greece

Phone: +30 210 6475600
Email: contact@dpa.gr

You may also generally contact a data protection supervisory authority in the country of your habitual residence or place of work.

17. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy if legal requirements or the technical services and functions used on our website change.

The current version of this Privacy Policy is available on this website.

​

Please note: The German version of this Privacy Policy is the legally binding version. The English translation is provided for informational purposes only.