Privacy & Cookie Policy
Last updated: 27 October 2026
This policy explains how Villa Aeterna ("we", "us") handles personal data when you visit www.villaaeterna.com or send us an enquiry. We are a private holiday villa above Sidonia, South Crete, Greece, and we follow the EU General Data Protection Regulation (GDPR).
For any privacy question or request, email us at info@villaAeterna.com.
What we collect
Information you give us. When you use the booking enquiry form on our Contact Us page, we receive:
• first name and last name
• nationality
• phone number
• email address
• arrival date
• number of adults and number of kids
• anything you write in "Comments or Special requests" (optional)
If you email or phone us directly, we receive whatever you choose to tell us.
Technical information. Our website is built and hosted on Wix. When you visit, Wix automatically processes technical data such as your IP address, browser and device type, the pages you view and the time of your visit, and sets the cookies listed below. This keeps the site secure and working, and gives us basic, aggregated visit statistics through Wix's built-in site tools.
We do not use Google Analytics, Facebook/Meta pixels, advertising cookies or newsletters, and we do not sell your data.
Why we use it and our legal basis
Answering your enquiry, checking availability and arranging your stay: Steps taken at your request before entering into a contract, and performing that contract (Art. 6(1)(b))
Keeping records we are required to keep, e.g. for tax and accounting: Legal obligation (Art. 6(1)(c))
Running the website securely, preventing fraud and abuse, and seeing basic visit statistics: Our legitimate interest in a safe, working website (Art. 6(1)(f))
Any non-essential cookies, if used: Your consent (Art. 6(1)(a)), which you can withdraw at any time
Who processes your data
Your form submissions and website data are stored and processed by Wix.com as our website hosting provider, acting on our behalf. You can read how Wix handles data in its privacy policy: https://www.wix.com/about/privacy
We may also use your contact details with ordinary email and phone services to reply to you. We do not share your data with anyone else unless the law requires it.
International transfers
Wix is part of a group of companies with offices and service providers worldwide, so your data may be processed outside the European Economic Area. According to Wix's privacy policy, when personal data from Europe is transferred outside Europe, Wix makes sure that either the European Commission considers the destination to give an adequate level of protection, or that the relevant EU Standard Contractual Clauses are in place.
How long we keep it
We keep enquiry details only for as long as we need them to handle your enquiry and any resulting booking, and afterwards only as long as needed to meet our legal obligations (for example, tax and accounting rules). After that, we delete them.
Your rights
Under the GDPR you have the right to:
• access the personal data we hold about you and get a copy of it
• correct data that is wrong or incomplete
• delete your data, where we have no legal reason to keep it
• restrict how we use your data in certain cases
• object to processing based on our legitimate interests
• data portability: receive data you gave us in a common format, or have it sent to someone else
• withdraw consent at any time, where we rely on consent (this does not affect what we did before)
To use any of these rights, email info@villaAeterna.com. We will reply within one month.
If you think we have not handled your data properly, you can complain to the Hellenic Data Protection Authority (www.dpa.gr), or to the data protection authority in the EU country where you live.
Cookies
Cookies are small files stored in your browser. Our site uses only the cookies that Wix itself places on Wix websites. Wix classifies all of these as essential: they are needed for security, stability and core site function, so they cannot be switched off. We have not added any third-party, marketing or advertising cookies.
The cookies we saw on our site are below. Names, purposes and durations come from Wix's official list ("Cookies and Your Wix Site", support.wix.com).
XSRF-TOKEN: Fraud detection of calls. Session. Essential.
hs: Security cookie for Hive (legacy). Session. Essential.
svSession: Security, stability and core site function. 12 months. Essential.
SSR-caching: Performance cookie for rendering. 24 hours. Essential.
bSession: System effectiveness measurement. 24 hours. Essential.
server-session-bind: API protection. Session. Essential.
sec-fetch-unsupported: Indicates browser limitations preventing site security features. Session. Essential.
Wix may also set other essential cookies from its list (for example TS*, fedops.logger.sessionId or wixSession). Full list: https://support.wix.com/en/article/cookies-and-your-wix-site
These cookies are essential and set automatically. You can block or delete them in your browser settings, but parts of the site, including the enquiry form, may then not work properly.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed.