Privacy Policy
Privacy Policy – Lithos Studios Cyprus
Last Updated: September 2025
1. Introduction
Your privacy is important to us. This Privacy Policy (“Policy”) explains how Lithos Studios Cyprus (“we”, “us”, “our”) collects, uses, stores, and protects your personal data when you interact with our website, make a booking, or stay with us. We are committed to complying with applicable data protection laws, including the GDPR.
2. Personal Data We Collect
We may collect the following personal data:
• Contact information: Name, email address, telephone number, physical address, and country of residence.
• Booking details: Dates of stay, room or studio preferences, number of guests, special requests.
• Payment information: Credit or debit card details (processed securely; not retained beyond necessary use).
• Usage data: How you use our website, services, and preferences.
• Optional info: Participation in loyalty or promotional programs, if applicable.
Source of Data
Data is collected directly from you through our website, booking forms, or during your stay. We may also receive data from third-party booking platforms, agents, or service providers, when authorized.
3. How We Use Your Personal Data
We process your personal data for purposes including:
• Managing and confirming bookings.
• Processing payments and delivering services.
• Personalizing your stay based on preferences (e.g., room setup, special requests).
• Email communications (confirmation, service updates, newsletters) — only where you’ve consented.
• Internal analysis and improvement of our services.
• Fulfilment of legal, tax, or accounting obligations.
• Exercising legitimate interests—such as enhancing guest safety and hospitality—so long as your rights don’t override them.
4. Legal Basis for Processing
Our processing is based on one or more of the following:
• Consent — for marketing communications and newsletters.
• Contractual necessity — to secure and manage bookings.
• Legal obligation — to comply with Cyprus/EU regulations.
• Legitimate interests — enhancing guest experience, managing property safely, and preventing fraud.
5. Marketing & Communications
With your consent, we may send you offers, updates, or promotions via email. You can opt-out anytime using the unsubscribe link in emails or by contacting us directly.
6. Data Sharing & Disclosure
We may share your personal data with:
• Service providers (e.g., payment processors, property management platforms).
• Related business partners, when explicitly permitted (with consent for marketing purposes).
• Legal or regulatory authorities, to comply with legal requirements.
We ensure all third parties protect your data under appropriate agreements and applicable data protection standards.
7. International Data Transfers
If your data is processed outside the EEA, we use EU-approved safeguards (like Standard Contractual Clauses) to ensure your data remains protected in line with GDPR.
8. Data Retention
We retain personal data only as long as necessary for the purposes it was collected:
• Booking and billing records for statutory compliance.
• Marketing opt-ins until you withdraw consent.
• Data needed to protect our legal interests or resolve disputes.
Once no longer needed, your data will be securely deleted or anonymised.
9. Your Rights Under GDPR
You have the following rights:
• Access — request a copy of your personal data.
• Rectification — correct inaccuracies or incomplete data.
• Erasure (“right to be forgotten”) — in certain circumstances.
• Restrict processing — limit how we use your data.
• Object — to processing based on our legitimate interests or marketing.
• Data Portability — receive your data in a transferable format.
• Withdraw consent — applicable to marketing communications.
To exercise any rights, contact us at info@lithosstudioscyprus.com.
We may request proof of identity before processing your request. Responses will be issued within applicable legal timeframes.
10. Security Measures
We implement reasonable technical and organizational safeguards—such as data encryption, access controls, and secure storage—to protect your data from unauthorized access, loss, or misuse.
11. Cookies & Tracking Tools
We use cookies and similar tools on our website to:
• Improve site functionality and user experience.
• Track analytic metrics.
• Collect marketing data, where permissible.
For detailed information on how we use cookies, refer to our separate Cookies Policy.
12. Children’s Privacy
Our services are not intended for individuals under 18. We do not knowingly collect data from minors. If you believe your child’s data has been collected, please contact us immediately.
13. Changes to This Privacy Policy
This Policy may be updated periodically. The “Last Updated” date reflects the latest revision. Major changes will be communicated via our website or directly via email.
14. Contact Us
For privacy inquiries, data requests, or concerns, please contact:
Lithos Studios Cyprus
Email: info@lithosstudioscyprus.com
Address: Antonis G Hotel, Oroklini 7040, Cyprus.