
Last updated: June 2026
1. Who We Are
The Kodrian (“we”, “us”, “our”) operates a boutique aparthotel at Kodrou 14, Plaka, 105 58 Athens, Greece. We are the data controller responsible for the personal data collected through this website and during your stay. For any privacy question, contact us at stay@thekodrian.com.
2. Information We Collect
We collect: (a) identity and contact details you provide (name, email, phone, postal address, nationality and, where legally required for check-in, identification document details); (b) booking and stay information (dates, apartment, number of guests, preferences and special requests); (c) payment information, which is processed by our secure booking and payment partners — we do not store full card numbers; (d) the communications you send us; and (e) technical and usage data collected automatically when you browse the site (IP address, device and pages viewed) via cookies and similar technologies.
3. How We Use Your Information
We use your information to manage and confirm your reservation, communicate with you before, during and after your stay, meet our legal obligations (including guest registration required by Greek law), take payment, keep our property and guests safe, improve our website and services, and — only where you have opted in — send you occasional news and offers.
4. Legal Bases for Processing
We rely on the following legal bases under the EU General Data Protection Regulation (GDPR): performance of our contract with you (your booking); compliance with legal obligations; our legitimate interests in operating and improving our business securely; and your consent, where required (for example, for marketing emails), which you may withdraw at any time.
5. Sharing Your Information
We share personal data only where necessary: with our reservation and payment processors; with trusted service providers who help us operate the property; and with public authorities where the law requires it. We never sell your personal data.
6. Data Retention
We keep your personal data only for as long as needed to fulfil the purposes above and to satisfy legal, accounting and tax requirements. When it is no longer required, it is securely deleted or anonymised.
7. Cookies
Our site uses essential cookies to function and may use analytics cookies to understand how the site is used. You can control or delete cookies through your browser settings; disabling some cookies may affect how the site works.
8. International Transfers
Your data is primarily processed within the European Economic Area (EEA). Where a provider processes data outside the EEA, we ensure appropriate safeguards — such as European Commission approved standard contractual clauses — are in place.
9. Your Rights
You have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent at any time. To exercise these rights, email stay@thekodrian.com. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).
10. Contact
For any question about this policy or your personal data, please contact us at stay@thekodrian.com or write to The Kodrian, Kodrou 14, Plaka, 105 58 Athens, Greece.

