1. Introduction

Welcome to Hotel Macedon (https://hotel‑macedon.com). We, Hotel Macedon, respect your privacy and are committed to protecting your personal data.
This Privacy Policy explains what information we collect through our website, how we use it, and your rights regarding that data.

By using our website or booking a stay with us, you consent to the practices described in this policy.

2. Who we are

We are Hotel Macedon, a hotel located on the island of Thasos, Greece, managing our official website at https://hotel‑macedon.com.
Our website provides information about our rooms, facilities, and booking options and allows you to contact us and learn more about your stay with us.

3. What personal data we collect

Through our website and third‑party booking partners, we may collect the following types of information:

  • Booking information: name, email, phone number, dates of stay, number of guests, special requests.
  • Payment information: card details (processed via secure gateways), bank‑transfer or cash payment data, as needed, handled in accordance with payment‑processing providers’ rules.
  • Contact‑form submissions: name, email, message text and any additional details you choose to share.
  • Technical data: your IP address, browser type and user agent, approximate location, pages visited, and other usage data collected via Google Analytics.
  • Comments or forms you submit on our site (for example, via internal forms or possible blog‑style areas).

We do not sell your personal data to third parties.

4. How we use your data

We use your information to:

  • Process and confirm your booking (including through our channel manager Siteminder, our PMS Little Hotelier, and partners like Booking.com, Expedia, and Hotels.com / Hotelbeds).
  • Help you complete your booking flow, send you confirmation emails, and communicate with you about your stay.
  • Reply to messages you send through our Contact page https://hotel‑macedon.com/contact‑us/.
  • Improve your experience on our website using Google Analytics to understand how visitors use the site and optimize performance.
  • Respond to comment submissions or feedback you choose to leave through our site (see section below).
  • Comply with legal, accounting, and tax obligations where required (e.g. invoicing, local tourism regulations).

5. Cookies

Our website may use cookies and similar tracking technologies for functionality, security, and analytics.

  • If you submit a comment or inquiry, you may be offered the option to save your name, email address, and website in a cookie to avoid re‑typing this on future submissions. These cookies typically last for about one year.
  • When you visit our website, we may place temporary cookies to check whether your browser accepts cookies. This cookie does not contain personal data and is cleared when you close your browser.
  • You can manage or disable cookies via your browser settings, but this may limit some site features.

6. Embedded content and third‑party services

Articles, galleries, or pages on our website may include embedded content (e.g. videos, photos, maps, third‑party booking widgets). Embedded content behaves as though you visited that external website directly.

These third‑party websites (such as Booking.com, Expedia, Hotelbeds, or trip‑advisor widgets) may collect data about you, use cookies, embed tracking scripts, and monitor your interactions, especially if you have an account with them and are logged in.
We recommend that you review the privacy policies of any third‑party services you interact with directly.

7. Comments and user‑generated content

If you leave a comment or send feedback via forms on our site, we collect the data shown in the form, your IP address, and your browser user agent string to help detect and prevent spam.

  • An anonymized string created from your email address (sometimes called a “hash”) may be sent to the Gravatar service to check whether you have a profile picture with them.
  • If your comment is approved, your profile picture may be displayed publicly along with your comment on our site.
  • Once created, your comment and its metadata are typically stored indefinitely so we can process follow‑up comments automatically and maintain site moderation history.

If you have a user account on our system (for example as a returning or logged‑in visitor), you may be able to view, edit, or delete your personal information at any time, except for your username (which cannot be changed). Site administrators will also be able to view and edit this data as needed.

8. Media uploads

If you upload images to our website, please avoid uploading photos with embedded location data (EXIF GPS coordinates).
Visitors to our website may download and extract location information from any images that contain such data, potentially revealing the places where those photos were taken.

9. Who we share your data with

We share your personal data only when necessary and in a secure way:

  • Booking and guest‑management platforms: Your name, contact details, stay dates, and payment information are shared with and processed by third‑party systems such as Siteminder, Little Hotelier, Booking.com, Expedia, Hotels.com / Hotelbeds, and their associated payment processors, solely for the purposes of confirming and managing your reservation.
  • Email and messaging channels: Data entered through the Contact form may be sent to our hotel email address so that our staff can reply to you.
  • Analytics service: We use Google Analytics to analyze how our visitors use the site; Google may collect anonymous usage data and use cookies as described in their own privacy policy.
  • Security and administrative purposes: In limited cases (for example, if you request a password reset via our booking or email channels), your IP address may be included in the reset confirmation email for security verification.

We require these partners to keep your data secure and to process it only for the tasks we define.

10. How long we retain your data

  • Booking and reservation data is kept for the duration required by our local laws, accounting rules, and valid agreements (typically several years after your stay for fiscal and tax‑related compliance). After this period, it is securely archived or deleted.
  • Website comments and their metadata are generally retained indefinitely so we can recognize and approve follow‑up comments automatically and maintain site moderation history.
  • Contact‑form submissions may be stored electronically or in our internal email and hotel systems for as long as needed to respond and keep records, after which they are securely disposed if no longer required for legal or operational reasons.

You can always contact us if you would like to know the specific retention periods for a particular type of data.

11. What rights you have over your data

If you have an account with our site or related systems (or if you have left comments, bookings, or messages), you have the following rights under applicable data‑protection rules (such as the GDPR):

  • The right to access the personal data we hold about you.
  • The right to receive an exported file of your personal data if you request it.
  • The right to correct any inaccurate information you provide.
  • The right to request the erasure of your personal data in certain circumstances (subject to legal or security‑related exceptions).
  • The right to restrict or object to certain types of processing (for example, direct marketing or certain analytics profiling).
  • The right to withdraw consent for data processing where that consent is the legal basis (for example, for marketing emails).

Please note that some data must be kept for administrative, legal, or security reasons, even if you ask for deletion. To exercise any of these rights, please contact us using the details in section 13 below.

12. Where your data is sent

Your booking and guest data may be transmitted securely to:

  • Our channel manager (Siteminder) and Property Management System (Little Hotelier).
  • Third‑party booking channels such as Booking.com, Expedia, Hotels.com / Hotelbeds and their ticket‑ing and payment processors.
  • Our internal email and property‑management tools hosted inside or outside the European Economic Area, always with appropriate safeguards.

Visitor comments and usage data may be checked through automated spam‑detection services (for example, built‑in WordPress tools or third‑party anti‑spam solutions).

Whenever data is transferred outside the EEA, we make sure the transfer is covered under suitable data‑protection agreements (such as EU‑standard contractual clauses) and that your rights are protected.

13. How to contact us

If you have any questions about this Privacy Policy, wish to exercise any rights, or want to request more information about the data we hold about you, please contact us at:

Hotel Macedon
Thasos 64004, Greece
Website: https://hotel‑macedon.com
Email: relax@macedon OR hotel.macedon@hotmail.com

We will respond to your request within the time limits required by local data‑protection laws.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, new services, or legal requirements.
Any material changes will be clearly posted on our website, and if required by law, we may notify you directly (for example by email). We encourage you to review this page periodically to stay informed about how we protect your data.

Last updated: 11/02/2026