Privacy Policy

Last Updated: July 2026

Crete Wanderer ("we", "us", or "our") is committed to protecting the privacy and personal data of our website visitors and clients. This Privacy Policy explains how we collect, use, store, and protect your personal information in compliance with the EU General Data Protection Regulation (GDPR).

1. Data Controller Information Crete Wanderer Address: Ethnikis Antistaseos 176, 71306 Heraklion, Crete, Greece Telephone: +30 6984 229073 Email: info@cretewanderer.com

2. Personal Data We Collect We collect personal information that you voluntarily provide to us when you make a booking, submit an inquiry form, or contact us via WhatsApp/email. This includes: - Full Name - Contact Information (Email address, Phone number, Country) - Booking details (Travel dates, number of guests, pick-up location, special requests) - Payment details (Processed securely through our third-party booking engine, Bókun/Stripe; we do not store full credit card numbers on our servers).

3. Legal Basis and How We Use Your Data We process your personal data based on the following legal grounds: - Performance of a Contract: To process your bookings, manage payments, communicate tour arrangements, and provide customer support. - Legitimate Interests: To improve our website performance, services, and client experience. - Consent: To send marketing communications or newsletters (where you have explicitly opted in). You can withdraw consent at any time.

4. Data Sharing & Third-Party Services We do not sell or rent your personal data. We only share necessary information with trusted third-party service providers who assist us in operating our business: - Booking Engine & Payment Processors (e.g., Bókun, Stripe, PayPal) - Analytics & Website Optimization (e.g., Google Analytics) - Legal Authorities (only if required by applicable Greek or EU law).

5. Cookies & Tracking Technologies Our website uses cookies to enhance user experience, analyze site traffic, and assist in our marketing efforts. You can manage or disable your cookie preferences at any time through your browser settings.

6. Data Retention We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting obligations under Greek Law.

7. Your GDPR Rights Under the EU General Data Protection Regulation, you have the following rights regarding your personal data: - Right of Access: Request a copy of the personal data we hold about you. - Right to Rectification: Request correction of inaccurate or incomplete data. - Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data when it is no longer necessary for processing. - Right to Restrict Processing & Object to Processing. - Right to Data Portability.

To exercise any of these rights, please contact us at info@cretewanderer.com. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

8. Security We implement appropriate technical and organizational security measures (including SSL encryption) to protect your personal data against unauthorized access, loss, or alteration.

9. Changes to This Privacy Policy We reserve the right to update this Privacy Policy at any time. Any updates will be posted on this page with an updated "Last Updated" date.