Privacy Policy
Last updated: November 6, 2026
1. Who we are
Erosandpsyche.travel is operated by GREEKING ME TOURISTIKES YPIRESIES P.C., 35 Syngrou Avenue, 117 43 Athens, Greece. VAT number EL800779840, General Commercial Registry (G.E.MI.) number 140680501000. We are the data controller for the personal data described in this policy.
You can exercise your rights with either company, and the easiest way is to email [email protected]. For any privacy question, contact Nikolaos Theodoris at [email protected] or +30 210 9567326. Our Data Protection Officer is Eleni Dede, lawyer, member of the Athens Bar Association (reg. no. 34461), contact: [email protected].
2. What data we collect
- Contact and enquiry details you send us: name, email, phone, country, travel dates, number of travellers, budget, preferences and messages.
- Booking details: names of all travellers (including children, whose details we accept only from a parent or guardian), dates of birth, flight and accommodation details and passport details.
- Special requirements you choose to share, such as dietary needs, allergies or mobility needs. We only use these with your explicit consent and only to arrange your trip safely.
- Call data: if we call you, our AI assistant or our team may record and transcribe the call (see section 6).
- Billing details: invoice details and payment references. Card payments are handled by our payment providers (Stripe, Flywire). We do not see or store card numbers.
- Website data: cookies, IP address, device and browsing information (see section 9).
3. Why we use it and our legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Answer your enquiry and prepare a proposal | Steps prior to a contract, Art. 6(1)(b) |
| Plan and deliver your trip | Performance of a contract, Art. 6(1)(b) |
| Special requirements (health, dietary) | Explicit consent, Art. 9(2)(a) |
| Invoicing, accounting, tax | Legal obligation, Art. 6(1)(c) |
| Follow-up calls and service quality | Legitimate interest, Art. 6(1)(f) |
| Newsletters and offers | Consent, Art. 6(1)(a), or our legitimate interest for existing clients. You can unsubscribe at any time. |
| Analytics and advertising cookies | Consent, Art. 6(1)(a) |
4. Who we share it with
We share only what is needed with: hotels, guides, drivers and local partners who deliver your trip; partner agencies that booked your trip on your behalf; and service providers that work for us under data processing agreements. These include website hosting and maintenance providers, forms (Fillout), booking software (FareHarbor), trip records (Airtable), email and CRM (Google Workspace, Streak, ActiveCampaign), phone and AI calling (JustCall, which runs our AI assistant Athena, set up and maintained by AI Operator), scheduling (Calendly), automation (Zapier), payments (Stripe, Flywire), an AI assistant our team uses for trip planning and internal work (Claude, by Anthropic) and our accountant. We never sell your data. Our team may use AI tools (Claude) to help plan trips. We share with them only the trip details needed for that, never payment details, passport data or health information.
5. Transfers outside the EU
Some of these providers are based in the United States. Transfers rely on the EU-US Data Privacy Framework or on the European Commission’s Standard Contractual Clauses.
6. Calls and our AI assistant
After you send an enquiry, our AI assistant “Athena” or a member of our team may call you. Athena is an AI, and it will tell you so at the start of the call. Athena only calls people who have sent us an enquiry or already work with us. Calls may be recorded and transcribed so that our team can follow up accurately. You can ask to speak to a person, or not to be recorded, at any time.
7. How long we keep it
- Enquiries that do not lead to a booking: 24 months after our last contact.
- Booking records: 5 years after your trip.
- Passport details: deleted 30 days after your trip.
- Health or dietary information: deleted 30 days after your trip.
- Call recordings: 6 months.
- Invoices: as long as Greek tax law requires.
- Marketing: until you unsubscribe.
8. Your rights
You can ask us to access, correct, delete or export your data, to restrict or object to its use, and to withdraw your consent at any time. Email [email protected] and we will reply within one month. To protect your data, we may first ask you to confirm your identity. You can also complain to the Hellenic Data Protection Authority (www.dpa.gr).
9. Cookies
We use strictly necessary cookies to run the site. With your consent, we also use analytics and advertising cookies. These are blocked until you click “Accept” in the cookie banner, and you can change your choice at any time via “Cookie settings” in the footer. You can also block or delete cookies in your browser settings, although some parts of the site may then not work. Our marketing emails contain a small tracking pixel that tells us whether an email was opened.
| Cookie | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
| Session cookie | erosandpsyche.travel website | Keeps the site and forms working | Strictly necessary | Session |
| Cookie consent | erosandpsyche.travel website | Remembers your cookie choice | Strictly necessary | 12 months |
| _ga, _ga_* | Google Analytics 4 | Counts visits and how the site is used | Analytics | Up to 2 years |
| _gcl_au | Google Ads | Measures conversions from Google ads | Advertising | 90 days |
| _fbp | Meta (Facebook, Instagram) | Measures and personalises Meta ads | Advertising | 90 days |
10. Security
We use two-factor authentication, access controls, encrypted connections (HTTPS) and regular updates and backups to protect your data.
11. Changes
We will post any changes on this page with a new “Last updated” date. Our sites link to other websites, which have their own privacy policies.