Privacy Policy

Data controller

Mediterranean Dream Cyclades I.K.E., registered office at Naxos, 84300, Cyclades, Greece (GEMI No. 195276438000 — VAT EL 803358712), represented by its legal representative Maurizio De Lorenzo.

For any request concerning personal data you may write to mediterraneandream25@gmail.com.

Data we collect

• Contact details you voluntarily provide (name, email, phone number) when you write to us or request a booking.
• Payment-related data, handled directly by our providers (PayPal): we do not store your full card details.
• Browsing data and usage statistics collected through analytics tools (see Cookie Policy).

Purposes of processing

• Handle information requests, bookings and communications with you.
• Process payments and fulfil contractual and tax obligations.
• Send emails (via the Resend service) related to your order or, with your consent, project updates.
• Analyse site usage in aggregate form to improve the experience.

Legal basis

Processing is based on the performance of a contract or pre-contractual measures (Art. 6.1.b GDPR), compliance with legal obligations (Art. 6.1.c), consent (Art. 6.1.a) for non-essential cookies and marketing communications, and legitimate interest (Art. 6.1.f) for site security and improvement.

Third-party services

To provide our services we rely on the following providers, which may process data as processors or independent controllers:

• PayPal — payment processing.
• Resend — transactional email delivery.
• Google Analytics — aggregate usage statistics.
• Meta Pixel — campaign measurement and remarketing.
• Microsoft Clarity — anonymous interaction analysis and heatmaps.

Data transfer

Some providers may be based outside the European Economic Area. In such cases the transfer takes place on the basis of appropriate safeguards (e.g. the European Commission's Standard Contractual Clauses).

Retention

We keep data for as long as necessary for the stated purposes and in compliance with legal (especially tax) obligations. Analytics data is retained in aggregate form according to the respective providers' policies.

Your rights

You may at any time exercise your rights of access, rectification, erasure, restriction, portability and objection, and withdraw your consent, by writing to mediterraneandream25@gmail.com. You also have the right to lodge a complaint with the competent supervisory authority.