Last Updated: 6 August 2026
Introduction
Welcome to moya Signature Experience (“we”, “our”, “us”). We are committed to protecting your privacy and ensuring that your personal data is processed in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable data protection laws.
This Privacy Policy explains what personal information we collect, how we use it, the legal basis for processing it, who we share it with, and the rights you have regarding your personal data.
By using our website, https://moyaexperience.gr, you acknowledge that you have read and understood this Privacy Policy.
Data Controller
The Data Controller responsible for the processing of your personal data is:
Kapnisakis Konstantinos
moya Signature Experience
Zimvrakidon 171
73300 Chania, Crete, Greece
Email: info@moyaexperience.gr
Website: https://moyaexperience.gr
If you have any questions regarding this Privacy Policy or the processing of your personal data, you may contact us using the email address above.
What Personal Data We Collect
Depending on how you interact with our website, we may collect the following categories of personal data.
Information You Provide Voluntarily
When you contact us through our website, we may collect:
- Full name
- Email address
- Telephone number
- Subject of your enquiry
- Message content
Providing this information is voluntary. However, certain information may be required in order for us to respond to your enquiry.
Website Usage Information
When you visit our website, certain technical information may be collected automatically, including:
- IP address
- Browser type and version
- Device information
- Operating system
- Pages visited
- Date and time of your visit
- Referral source
- Website interaction data
- Approximate geographic location derived from your IP address
Some of this information may be collected through cookies or similar technologies after obtaining your consent where required.
Information Collected Through Analytics
With your consent, we use Google Analytics 4 (GA4) to better understand how visitors use our website.
This information may include:
- Pages viewed
- Time spent on pages
- Navigation paths
- Device type
- Browser information
- Country or region
- Anonymous usage statistics
Google Analytics does not allow us to directly identify individual visitors.
How We Use Your Personal Data
We process your personal data only for legitimate purposes, including:
- Responding to enquiries submitted through our contact form
- Providing customer support
- Improving our website and services
- Monitoring website performance
- Understanding visitor behaviour through analytics
- Protecting the security and integrity of our website
- Complying with legal obligations
We do not sell, rent, or trade your personal information to third parties.
Legal Basis for Processing
Under the GDPR, we process your personal data on one or more of the following legal bases.
Consent
Where required, we process your personal data based on your consent.
Examples include:
- Acceptance of analytics cookies
- Optional marketing technologies, if introduced in the future
You may withdraw your consent at any time.
Legitimate Interests
We process certain personal data where it is necessary for our legitimate business interests, including:
- Maintaining website security
- Preventing fraud
- Responding to enquiries
- Improving website performance
- Understanding visitor interactions
We ensure that these interests do not override your fundamental rights and freedoms.
Legal Obligations
In certain circumstances, we may process personal data where required to comply with applicable laws, regulations, or legal requests.
Contact Forms
When you submit an enquiry through our contact form, we collect only the information necessary to respond to your request.
This includes:
- Name
- Email address
- Telephone number
- Subject
- Message
We use this information solely for communication regarding your enquiry.
We do not use contact form submissions for marketing purposes and we do not subscribe you to mailing lists.
Data Retention for Contact Requests
Information submitted through our contact form is retained for up to 12 months from the date of your enquiry unless a longer retention period is required by law or necessary to resolve an ongoing matter.
After this period, the information is securely deleted or anonymised.
Children’s Privacy
Our website and services are intended for individuals aged 18 years or older.
We do not knowingly collect personal data from children. If we become aware that personal data relating to a child has been submitted to us, we will take appropriate steps to delete such information without undue delay.
Bookings Through WebHotelier
Accommodation reservations made through our website are processed exclusively via the secure WebHotelier online booking platform.
When you click on “Check Availability”, “Book Your Stay”, or any booking-related button, you are redirected to WebHotelier to complete your reservation.
Booking information is collected and processed directly by WebHotelier according to its own Privacy Policy and Terms of Use.
Moya Signature Experience does not store or process payment card information through its website.
We encourage you to review WebHotelier’s Privacy Policy before completing your reservation.
Google Analytics
Our website uses Google Analytics 4 (GA4) to better understand how visitors use our website and to improve user experience.
Google Analytics may collect information such as:
- Pages visited
- Time spent on the website
- Browser and device information
- Operating system
- Approximate geographic location
- Website interactions
This information is aggregated and used exclusively for statistical and analytical purposes.
Google Analytics is activated only after you provide your consent through our cookie banner where required by applicable law.
For more information, please visit:
https://policies.google.com/privacy
Google Tag Manager
We use Google Tag Manager to manage website tags and scripts efficiently.
Google Tag Manager itself does not collect personal data. It simply facilitates the loading of services such as Google Analytics or other tools that may process data after obtaining your consent.
Additional information is available at:
https://support.google.com/tagmanager
Google Maps
Our website may display interactive Google Maps to help visitors locate Moya Signature Experience.
When viewing an embedded Google Map, Google may collect technical information such as:
- IP address
- Browser information
- Device information
- Location-related information
The processing of this information is governed by Google’s own Privacy Policy.
More information is available at:
https://policies.google.com/privacy
Google Fonts
Our website uses Google Fonts to ensure a consistent and visually appealing appearance.
Depending on your browser configuration, requests to Google servers may occur when loading fonts. These requests may include technical information such as your IP address.
For additional information, please refer to Google’s Privacy Policy.
https://policies.google.com/privacy
Cloudflare
Our website uses Cloudflare to improve website security, reliability, and loading speed.
Cloudflare may process technical information including:
- IP address
- Browser information
- Security-related logs
- Network performance data
This processing is necessary for detecting malicious traffic, preventing attacks, and ensuring the secure operation of our website.
For more information please visit:
https://www.cloudflare.com/privacy-policy
WhatsApp and Viber
Our website provides quick contact options through WhatsApp and Viber.
If you choose to contact us using these services, your communication will be processed according to the privacy policies of the respective providers.
We recommend reviewing their privacy policies before using these services.
WhatsApp:
https://www.whatsapp.com/legal/privacy-policy
Viber:
https://www.viber.com/privacy/
Third-Party Services
Our website may include links or integrations with third-party services.
These third parties operate independently from Moya Signature Experience and have their own privacy policies.
We are not responsible for the privacy practices, content, or security of third-party websites or services.
We encourage users to review the privacy policies of any third-party websites they visit.
Cookies
Our website uses cookies and similar technologies to improve functionality, analyse website traffic, and enhance your browsing experience.
Some cookies are essential for the proper operation of the website, while others are used only with your consent.
You can manage your cookie preferences at any time through our Cookie Consent settings.
For detailed information about the cookies used on this website, please refer to our Cookie Policy.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.
Contact form enquiries are retained for up to 12 months.
Analytical information is retained according to the retention settings configured within Google Analytics.
Technical logs may be retained for security purposes where necessary.
When personal data is no longer required, it is securely deleted or anonymised.
Your GDPR Rights
Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:
- The right to access your personal data.
- The right to request correction of inaccurate or incomplete information.
- The right to request deletion of your personal data where applicable.
- The right to restrict the processing of your personal data.
- The right to object to certain types of processing.
- The right to data portability.
- The right to withdraw your consent at any time where processing is based on consent.
- The right to lodge a complaint with your local Data Protection Authority if you believe your rights have been violated.
To exercise any of these rights, please contact us using the contact details provided below.
Data Security
We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.
These measures include:
- Secure website hosting
- SSL encryption
- Firewall and security monitoring
- Restricted access to personal information
- Regular software updates
Although we strive to protect your information, no method of electronic transmission or storage is completely secure. Therefore, we cannot guarantee absolute security.
International Data Transfers
Some of the third-party service providers we use, including Google and Cloudflare, may process personal data outside the European Economic Area (EEA).
Whenever such transfers occur, they are carried out using appropriate safeguards in accordance with the GDPR, including the European Commission’s Standard Contractual Clauses or other legally recognised transfer mechanisms.
Automated Decision-Making
We do not use automated decision-making or profiling that produces legal or similarly significant effects on visitors to our website.
Third-Party Links
Our website may contain links to third-party websites for your convenience.
Once you leave our website, this Privacy Policy no longer applies.
We are not responsible for the privacy practices, security, or content of external websites and encourage you to review their privacy policies before providing any personal information.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data processing practices.
The latest version will always be published on this page together with the “Last Updated” date shown at the top of this Privacy Policy.
We encourage visitors to review this page periodically.
Contact Us
If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact:
Kapnisakis Konstantinos
moya Signature Experience
Zimvrakidon 171
73300 Chania, Crete, Greece
Email: info@moyaexperience.gr
Website: https://moyaexperience.gr
Governing Law
This Privacy Policy is governed by the laws of Greece and the applicable legislation of the European Union, including the General Data Protection Regulation (EU) 2016/679 (GDPR).
Any disputes arising in connection with this Privacy Policy shall be subject to the jurisdiction of the competent courts of Greece.
Acceptance of This Privacy Policy
By accessing and using this website, you acknowledge that you have read, understood, and accepted this Privacy Policy.
If you do not agree with the terms of this Privacy Policy, please discontinue the use of this website.
Thank you for trusting Moya Signature Experience.
We are committed to protecting your privacy and handling your personal information responsibly, transparently, and securely.
