
Tour in Mykonian Land & Wine Tasting
Privacy Policy
How we use your data, including CaptainBook and Stripe.
Privacy Policy for Website tourinmykonos.gr
Last updated 30 August 2026
1. Who we are
This privacy policy applies to the website tourinmykonos.gr, operated by Gerasimos Sykiniotis trading as Tour in Mykonian Land & Wine Tasting Mykonos (the “estate”, “we”, “us”).
Controller: Gerasimos Sykiniotis, Marathi, Mykonos 846 00, Greece. Email: tourinmykonos@gmail.com. Phone: +30 6948 681434 / +30 22890 26645.
We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Greek law. You may lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).
2. What this site does (and does not) do
This website presents our tour, lets you contact us, and lets you book a visit. We do not run Google Analytics, advertising pixels, or a newsletter. We do not operate user accounts on this website.
Bookings and card payments are not processed on our own servers. They are handled by CaptainBook (our booking platform) and Stripe (CaptainBook’s payment processor). We never receive or store your card number.
3. Data we collect
Contact form. If you write to us, we receive your name, email address, optional subject, message, and your confirmation that we may store that data to reply. A hidden field is used only to block automated spam; humans should leave it empty.
Bookings (CaptainBook & Stripe). When you book, CaptainBook collects the details needed for the reservation (typically name, email, phone, party size, date and time, payment status). Stripe processes the payment. CaptainBook then makes the booking details available to us so we can host your visit. Card data is handled by Stripe under PCI-DSS; we do not see full card numbers.
Technical logs. Our hosting provider (Vercel) may record standard server logs such as IP address, browser type, and the page requested, for security and to deliver the site. These logs are not used for marketing.
Cookie choice. If you use the cookie banner, we store your choice in your browser (local storage) so we can respect it on later visits.
4. Why we process data (lawful bases)
Contract (GDPR Art. 6(1)(b)). To answer a booking or a message you sent us, and to provide the tour you reserved.
Legal obligation (Art. 6(1)(c)). Tax, accounting and similar duties for completed bookings.
Legitimate interests (Art. 6(1)(f)). Running and securing the website (hosting logs, spam protection on the form).
Consent (Art. 6(1)(a) and ePrivacy). Loading CaptainBook and Stripe in an iframe on this website, and loading Google Maps, only after you allow those categories — or after you clearly ask for them (Book Now, or “Load map”). You can withdraw cookie consent at any time via Cookie settings in the footer. Withdrawing consent does not affect a booking already made.
5. Cookies and similar technologies
Necessary. We store your cookie preference in your browser. The site itself does not set advertising or analytics cookies.
Booking (optional on this website). If you allow it, Book Now opens CaptainBook in an on-site window. CaptainBook and Stripe may then set their own cookies inside that window so you can complete payment. If you refuse this category, Book Now takes you to CaptainBook’s own website instead; their privacy policy applies there.
Maps (optional). The contact page does not load Google Maps until you allow Maps cookies or click “Load map”. Google may then set cookies.
CaptainBook: www.captainbook.io/legal/privacy-policy — Stripe: stripe.com/privacy — Google: policies.google.com/privacy
6. Processors and transfers
CaptainBook (booking software). Privacy policy: www.captainbook.io/legal/privacy-policy
Stripe, Inc. (payments, used through CaptainBook). Privacy policy: stripe.com/privacy
Vercel Inc. (website hosting). Privacy policy: vercel.com/legal/privacy-policy
Google Ireland / Google LLC (Maps embed, only if you load the map).
Our email delivery provider, used only to send contact-form messages to tourinmykonos@gmail.com.
Some of these organisations use servers outside the EEA (including the United States). Where that happens, they rely on an adequacy decision and/or Standard Contractual Clauses. We do not sell your personal data.
7. How long we keep data
Contact-form emails: as long as needed to handle your request, then deleted unless a legal claim or accounting duty requires us to keep them.
Bookings: kept as required to run the tour and to meet tax and accounting rules in Greece (generally up to 10 years for financial records).
Cookie preference: until you change it or clear your browser storage.
Hosting logs: according to our host’s retention, typically a short period for security.
8. Your rights
You may request access, rectification, erasure, restriction, objection, or data portability, and you may withdraw consent where processing is based on consent. These rights are free of charge unless a request is manifestly unfounded or excessive.
Write to tourinmykonos@gmail.com. We will respond within one month. You also have the right to complain to the Hellenic DPA (www.dpa.gr).
9. Security
The website is served over HTTPS. Payments go through Stripe. No method of transmission is completely secure; please do not send payment card numbers by email.
10. Children
The site is aimed at adults booking a tour. We do not knowingly collect data from children under 16 through this website.
11. Changes
If we change this policy in a material way, we will update the date above. The current version is always published at tourinmykonos.gr/privacy-policy/

