Privacy policy

Who controls your data

The controller of the personal data described in this policy is Hotelday — legal entity details will be added before launch.

What we collect

• Booking contact details, such as your name, email address and phone number.
• Payment details, handled by our payment provider — Hotelday never stores your full card number.
• Messages you send us through a form on the site.
• Contact details for the hotel partners we work with.
• Sender and recipient details for gift cards.
• If your party includes children, how many — not their individual names or ages.

If you’re the recipient of a gift card, we get your name and email from the person who bought it for you, not from you directly.

Why we use it, and our legal basis

• To fulfil your booking — necessary to perform our contract with you.
• To work with the hotel partners who list on Hotelday — necessary to perform our contract with them.
• To process and deliver gift card orders — necessary to perform our contract with the buyer.
• To answer questions and provide support — our legitimate interest in helping you.
• To meet our legal obligations, for example around accounting.
• To send marketing emails, but only if you’ve given consent.

Who we share it with

The hotel you book with receives your name and booking details, so they can welcome you on the day. We also use processors who help us run Hotelday, described here by role rather than by name: a payment provider, an email provider and a hosting provider. If we ever transfer personal data outside the European Economic Area, we only do so with the safeguards data protection law requires.

How long we keep it

We keep personal data only for as long as we need it for the purposes above, or as long as the law requires. Exact retention periods are still being confirmed and will be added before launch.

Your rights

Under data protection law, you have the right to:

• Access the personal data we hold about you
• Correct it if it’s wrong
• Ask us to delete it
• Ask us to restrict how we use it
• Receive a copy of it in a portable format
• Object to certain uses
• Withdraw consent at any time, where we rely on it

You can also complain to the Hellenic Data Protection Authority, or to the data protection authority in the EU country where you live or work. To use any of these rights, email info@hotelday.co.

Cookies

Today, Hotelday only uses strictly necessary cookies — the kind needed to run the site and keep your booking session working. If we introduce analytics cookies later, we’ll ask for your consent first.

Maps

A hotel’s location page can show an embedded OpenStreetMap map. It only loads if you tap “View on map” — nothing is requested from OpenStreetMap before then. Once it loads, OpenStreetMap (OpenStreetMap Foundation) receives your IP address and browser details, under its own privacy policy.

Contact

Questions about this policy? Email info@hotelday.co.