Privacy Policy & GDPR Compliance

The company "PROIOU AFI» which owns Small Paradise and the smallparadiseandros.gr website, established and operates under the provisions of Greek law and is based in Andros, maintains and processes the following personal data of each user which they voluntarily provide, either to communicate with the company or to materialize a reservation.
The user is entitled, whenever he wishes, to ask the company to delete its personal and sensitive data from its records.
The company makes every effort and has taken all necessary measures to ensure the safer collection, transfer and storage of the registered personal data of each user. Data are collected and processed only when absolutely necessary. We will never sell, rent or distribute in any other way or disclose personal user information.
We collect and use personal information for the following reasons:

1. Monitoring site traffic
   Like most sites, we also use Google Analytics (GA) to track user activity. We use this data to determine the number of people who use our site, to better understand how they find and use our web pages and to see their progress on the site. Although Google Analytics records data such as your location, your device, your web browser, and your operating system, none of this information makes you personally familiar to us. The Google Analytics also record the IP address of your computer, which could be used to identify you, but Google does not give us access to it. We believe that Google is a third data processor. Disabling cookies on your browser will prevent Google Analytics from tracking any part of your visit to pages within that site.
2. Reservation request via the web form on the website
   We collect only the necessary information we need to send reservation offers and communicate only with those who voluntarily wish. If you choose to contact us by using the contact form, none of the data you provide will be transferred or processed by any third party data provider.

About the server of this site

All web traffic (file transfer) between this site and your browser is encrypted and transferred through the HTTPS protocol. HTTPS is virtually the same as HTTP, except that it has an additional security layer, the SSL (Secure Sockets Layer), part of a wider security protocol called Transport Layer Security (TLS). TLS's job is to check whether the site you load in your browser is really the one you want to visit, and also encrypts all real-time data, providing privacy and security to transactions and to transfer user data.

Relevant legislation

Along with our business and internal IT systems, this site is designed to comply with the following national and international legislation on data protection and privacy of users.

Data breaches

We will report any potentially unlawful violation of the database of this website or database of any third party data provider to anyone involved and to the appropriate authorities within 72 hours of the violation, if it is obvious that any personal data stored in recognizable form, are stolen.

If you want more information on any of the above or any clarification, do not hesitate to contact us.