The practical part
Privacy & cookies
Last updated: 28 October 2026.
Draft for review: the retention periods and account settings marked below still need confirmation before this notice is finalised.
Who looks after your data?
Eco House Patmos is the website for our holiday rental and retreat space on Patmos, Greece. The data controller is Wayne English, Kampos, 85500 Patmos, Greece. For privacy questions or requests, contact hello [plus] privacy [at] ecohousepatmos [dot] com.
Enquiries and memories
If you send a booking or retreat request, we use your name, email, dates, group details and message to respond and discuss a possible stay. This processing is necessary to take steps at your request before entering into a booking contract. General correspondence is handled on the basis of our legitimate interest in responding to you.
Memory submissions include the details and optional photograph you provide. They are emailed to our website coordinator for review. Booking and retreat requests are also sent to the coordinator. Your email address is not published. We publish a story, name or photograph only where you selected the corresponding permission. Nothing is published automatically. You can withdraw publication permission by contacting us; this does not affect earlier lawful processing.
Photos submitted through the memory form are resized on your device before they are sent. The form handlers do not save enquiry text or photos as permanent website files. Email copies still exist in the receiving mailbox. We retain enquiry and booking correspondence for [confirm periods and any applicable accounting/legal requirements]. Published memories remain while publication permission is in place and the entry is relevant to the guestbook.
Hosting and necessary functions
The website is hosted with Infomaniak. Hosting and email services process technical data needed to deliver pages and correspondence, such as IP addresses and server logs. We use necessary security measures to prevent abuse of the forms. The form rate limits store a hash derived from an IP address and attempt timestamps in temporary server files; the form content is not part of those records. These functions support our legitimate interest in keeping the site safe and working. Server-log retention depends on the hosting configuration and must be confirmed with Infomaniak.
Fonts and photo assets are served from our own website. Loading the typefaces does not require a connection to Google Fonts.
Google Analytics
Only if you accept analytics, we load Google Analytics 4, provided by Google, to understand use of the website. It can process cookie identifiers, page views, interactions, browser/device information and approximate location. Google receives technical information such as an IP address when the service is contacted. Google states that Analytics does not log or store individual IP addresses from EU users. We do not send enquiry or memory text, names, email addresses or photos to Analytics. The initial page address we send excludes query parameters and fragments.
Our website implementation uses basic Consent Mode: the Google Analytics library is not loaded before consent or after rejection. Advertising consent stays denied, and Google signals and advertising personalisation are disabled in the website configuration. Your consent is the basis for optional Analytics processing. The corresponding account settings, including retention and enhanced measurement, must also be reviewed before launch.
Google Analytics event/user-data retention is [confirm the account setting; proposed: 2 months]. Aggregate reports may be retained separately. Cookies are configured with a maximum lifetime of 180 days and may be renewed during use. See Google’s information about Analytics data and its privacy policy.
Google Calendar and Maps
The availability dates shown on this site come from our public Google Calendar. Our own hosting server fetches the feed, removes event text and returns only blocked dates. The availability grid does not load a Google Calendar iframe or contact Google from your browser. It works even when you reject analytics.
If you click “Open the Google Calendar”, you leave our site and open Google’s service. Google can receive technical data, such as your IP address, and may use cookies or your Google account information under its own privacy policy. Opening a Google Maps link likewise opens an external Google service. No Google Maps iframe is currently embedded in this version of the website.
If embedded Google Calendar or Maps views are added, they will be blocked until you separately allow external Google content in the privacy settings. Accepting analytics will not be required to see that content. External services can process information outside the EEA.
Cookies and stored preferences
| Storage | Purpose | Duration |
|---|---|---|
| eco-house-privacy-v1 (local storage) | Remembers your consent choices, notice version and choice date. Necessary. | Choices expire after 180 days; stored data is replaced when you choose again or can be cleared in your browser. |
| _ga and _ga_P7J9J9YL2G | Google Analytics visitor/session statistics. Optional, consent required. | Configured for up to 180 days; may be renewed during use. Deleted by the site when analytics is rejected or withdrawn. |
We do not set advertising cookies through this implementation. Cookies on external Google pages are controlled by Google and depend on the service, account and browser settings.
Your choices and rights
Use at any time to accept or reject optional analytics. Rejecting it does not prevent browsing, availability checks or enquiries. Withdrawing consent disables collection and removes accessible Analytics cookies on this site; data previously collected is not automatically erased from Google’s reports.
Depending on the processing, you can request access, correction, deletion, restriction or portability, and object to processing based on legitimate interests. You can withdraw consent without affecting earlier lawful processing. To exercise your rights, email us. We may need enough information to verify your request. You can complain to the Hellenic Data Protection Authority or another competent EU supervisory authority.
Recipients and international processing
Data is handled by the rental management and the website coordinator where necessary, and by hosting/email providers. Google receives Analytics data only after consent. Processing by Google or other providers may involve countries outside the EEA. Information about Google’s international transfer arrangements is available in its business privacy information. The relevant provider terms and account settings must be kept under review.