Privacy Policy

The operator of the accommodation under the name Mades Magic Place, Mades Axladas, 715 00 Crete, Greece, is the controller for the processing described here. Privacy requests may be sent to mades-magic-place@gmail.com or made by phone at +30 694 476 6786.

When you use the contact form, we receive the name, email address and message you provide. We use them only to review and answer your enquiry and, where relevant, take steps you request before a possible booking. The legal basis is Article 6(1)(b) GDPR for pre-contractual enquiries and our legitimate interest under Article 6(1)(f) GDPR in answering other genuine enquiries. Required fields are necessary for us to reply; if they are not provided, the form cannot be sent. Please do not include identity documents, payment details, health information or other sensitive data in the message.

Contact-form requests are transmitted through EmailJS Pte. Ltd., acting as a service provider, and then delivered to our email provider. Hosting and security providers may process limited technical request data where necessary to operate and protect the website. EmailJS states that its servers are in the United States and that transfers from Europe are protected using Standard Contractual Clauses. Its Data Processing Agreement provides further details. We do not sell personal data.

Contact correspondence is retained for up to 12 months after the last communication, unless a longer period is necessary to establish, exercise or defend legal claims, comply with a legal obligation, or manage a booking relationship. Technical security logs are retained according to the hosting provider’s security schedule and only for as long as reasonably necessary for security and service operation.

Google Maps is blocked until you actively choose to load it. If you do, your browser connects directly to Google, which may receive your IP address, browser/device details, referrer information and interaction data and may use cookies or similar technologies under Google’s Privacy Policy. Booking.com and Instagram open independent websites with their own policies. Read our Cookie Policy for the current cookie setup and available controls.

When you request a page, the hosting infrastructure may process standard logs such as IP address, browser and device information, requested URL, referring URL, date and time, response status and security events. This is necessary to deliver the website, prevent abuse and maintain security. The website does not currently use analytics, advertising pixels, profiling or behavioural tracking.

Subject to the conditions of the GDPR, you may request access to and a copy of your data, correction, deletion, restriction, or portability, and you may object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing. You may also complain to the Hellenic Data Protection Authority. Send requests to the email address above; we may ask for information needed to verify your identity.

We use reasonable organisational and technical measures appropriate to this small contact service and limit access to information to those who need it. No internet transmission can be guaranteed completely secure. We do not use the information submitted through this website for automated decision-making, profiling, advertising or mailing lists.

This website and contact form are not directed to children. If you are under 18, please ask a parent or guardian to contact us. Do not use the form to send sensitive personal data. If we learn that data was submitted improperly, we will take reasonable steps to delete it.

This policy may be updated when the website or the services it uses change. The date at the top indicates the latest revision.