Privacy Policy — Travel Greece Project



Last updated: October 2025

Who we are
The Travel Greece Project website (https://travelgreeceproject.com) posts travel guides and information about Greece and includes affiliate links to third-party travel websites.
Data Controller: Travel Greece Project
Contact & DPO email: travelgreeceproject@gmail.com

What personal data is
Any information that directly or indirectly identifies you (e.g., name, email, phone/WhatsApp, IP address, cookie IDs).

1) Data we collect

Voluntarily given contact information (name, email, phone/WhatsApp) in forms or messages.

Technical/usage data (IP, browser, device, pages viewed, cookies/analytics).

Affiliate/partner data: when you click on an affiliate link, the partner may track your referral using its own identifiers in accordance with its privacy policy.

2) Legal bases (GDPR)

Consent: contact forms, newsletters, non-essential cookies.

Legitimate interests: core analytics/security and site operation.

Legal obligation: compliance where it is a requirement by law.

3) How we use the data

To respond to your questions and provide information or consultancy services.

To improve user experience and site performance (stats, optimization).

To execute affiliate links (follow referrals).

We don't sell your data. We share it only with: (a) hosting/IT providers under data-processing agreements, (b) partner sites you visit with affiliate links, each having its own privacy policy.

4) Cookies

We use:

Strictly necessary cookies (basic functionality, security).

Functionality/performance cookies (basic analytics).

Affiliate/advertising cookies (referral tracking, campaign measurement).
Cookies can be managed by settings in your browser. Blocking non-essential cookies will not prevent you from accessing content but, in certain instances, may hinder referral functions.

5) International transfers

Certain providers or partners may be located outside the EU/EEA. Where applicable, we have proper safeguards (e.g., Standard Contractual Clauses) in compliance with GDPR.

6) Data retention

We retain contact details as needed to respond and for a limited period of follow-up (24 months max.), except if you request that we erase previous. Technical/analytics data is retained according to our providers' practices and minimized/aggregated where possible.

7) Your rights

You have access rights, correct, erase, restrict, object, data portability, and right to withdraw consent at any time based on GDPR and Greek law.
To send rights requests: travelgreeceproject@gmail.com.
You may file a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

8) Security

We employ technical and organizational security measures (HTTPS/SSL encryption, access controls, data minimization) to protect personal data against unauthorized access, loss, or misuse.

9) Third-party links

Our website includes third-party links (e.g., Visit Greece, booking/activity partners). We have no control over their content or privacy policy. See their privacy policies.

10) Changes to this policy

We can update this policy to reflect changes in business or the law. The most current version will be available at /privacy-en.
Made on
Tilda