This page explains what personal information San Stefano Estate collects through this website, why, who else sees it, how long we keep it, and your rights. It also lists the cookies the site uses and how to change your choice.
Who we are
San Stefano Estate, Benitses, 49084 Corfu, Greece, is responsible for your information (the “controller”). For anything about your data, write to our e-mail address.
What we collect, and why
- Enquiries and brochure requests: your name, e-mail, telephone, country, dates, number of guests and your message. We use them to reply, to prepare a quote and to arrange your stay or event. Legal basis: steps you ask for before a contract, and the contract itself (GDPR art. 6(1)(b)).
- Bookings and stays: what we need to run your stay and the payments. Greek law requires us to issue receipts through the tax authority’s myDATA system with your name and country (and, for businesses, the VAT number). Legal basis: the contract and our legal obligations (art. 6(1)(b) and (c)).
- Friends of San Stefano Estate letter: your name and e-mail, only if you ticked the box or joined the list. About twice a year. You can leave at any time from any letter or by writing to us. Legal basis: your consent (art. 6(1)(a)).
- Measurement and advertising cookies: only if you agree in the cookie banner. See Cookies below. Legal basis: your consent (art. 6(1)(a)).
- Visitor statistics, without cookies: which pages are read and for how long, which dates are tried in the price box, the website or campaign link that brought you, your approximate country (from your device’s time zone, not your internet address) and the kind of device. They are counted on this website only, are not shared with anyone, and cannot identify you: a visit is remembered only in that browser tab, and is forgotten when you close it. If your browser asks not to be tracked (Do Not Track or Global Privacy Control), nothing is counted. Legal basis: our legitimate interest in understanding which parts of the site are useful (art. 6(1)(f)). Kept for 25 months.
- Security: each attempt to log in to the site’s administration is recorded with its time, the username typed, the internet address, the browser, and the approximate place and network that address belongs to, so we can spot and block break-in attempts. This concerns only people who try to log in, not visitors. Legal basis: our legitimate interest in keeping the site safe (art. 6(1)(f)).
We never sell your information, and we do not use it for anything you would not expect from the above.
Who else sees it
- Hostinger, who host this website and its database.
- Our e-mail provider, for messages between us.
- Smoobu (Smoobu GmbH, Berlin), our booking calendar, for dates and names of confirmed stays.
- ipapi.co (Kloudend Inc.), and if it does not answer ipwho.is, which turn the internet address of a login attempt into an approximate place. Nothing else is sent to them.
- The Independent Authority for Public Revenue (AADE), which receives our receipts by law, and our accountant.
- Airbnb, Booking.com and agents, if you book through them: they share what is needed for your stay, under their own privacy policies.
- Google and Meta (Facebook and Instagram), only if you accept their cookies: see below. For the information their cookies collect on this site, they and we are jointly responsible; they use it under their own policies: Google, Meta.
Google and Meta may process information in the United States. Both take part in the EU–US Data Privacy Framework, which the European Commission recognises as giving adequate protection, and use the Commission’s standard contractual clauses.
How long we keep it
- Enquiries that did not become a booking: as long as useful to reply and for a later booking; we review and delete old ones regularly, normally within three years.
- Booking records and receipts: for as long as Greek tax law requires (at least five years).
- The Friends letter: until you leave the list.
- Your cookie choice: six months, after which we ask again. Our record that you made a choice (a random code, the date, what you chose and a shortened internet address, never your name) is kept for three years, as proof that we asked.
- Records of login attempts: 90 days.
Cookies
Essential cookies are always on: one remembers your cookie choice, and the owners’ login cookies are used only by us. Nothing from Google or Meta loads unless you agree. “Reject all” is as easy as “Accept all”, and you can change your mind at any time with Cookie settings at the foot of every page.
If you agree, these may be set:
| Cookie | Set by | What for | Kept for |
|---|---|---|---|
| ss_consent | This website | Remembers your cookie choice (essential) | 6 months |
| wordpress_*, wp-settings-* | This website | Owners’ login only; visitors never get them (essential) | Session to 14 days |
| _gcl_au | Google Ads | Advertising: tells us which Google adverts lead to enquiries, and lets us show our adverts to people who have visited | 90 days |
| _ga, _ga_* | Google Analytics (only if we use it) | Measurement: counts visits and pages read | Up to 2 years |
| _fbp, _fbc | Meta | Advertising: tells us which Facebook and Instagram adverts lead to enquiries, and lets us show our adverts to people who have visited | 90 days |
We do not use fonts, maps or videos that contact other companies when a page loads: the fonts are served from this website. Our own visitor statistics use no cookies: they keep a random visit code in the browser tab’s temporary storage (sessionStorage), which disappears when the tab is closed.
Your rights
You can ask to see the information we hold about you, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable form. Where we rely on your consent you can withdraw it at any time, without affecting what was done before. Write to our e-mail address; we reply within a month.
If you are not satisfied, you can complain to the Hellenic Data Protection Authority, Kifissias 1–3, 115 23 Athens, www.dpa.gr, or to the authority in your own country.
Changes
We will update this page if anything changes, with the date below.
Last updated: 11 November 2026 (visitor statistics added).