Privacy Policy | Letovanje Grčka

1. Data controller

The data controller for personal data processed through letovanje-grcka.com is CourtNomad LLC, a Wyoming limited liability company, filing number 2026-002001999, EIN 98-1950507, 30 N Gould St Ste R, Sheridan, WY 82801, United States. Contact: info@letovanje-grcka.com.

2. Data we collect

We process the following categories of personal data:

Inquiry and contact forms - name, email address, phone number, destination, travel dates, message text.
Rating request after your stay - only if you tick that box in the inquiry form yourself: the email address, name, stay dates and property name from your inquiry, and the time you gave consent.
Owner accounts - name, email, company details (if applicable), billing information, property listings.
Usage data - IP address (anonymised), device type, browser language, pages visited, referrer URL, approximate country (derived from IP). Collected via Google Analytics 4 (through Google Tag Manager) and our own analytics system.
Cookies - see our Cookie Policy.

3. Legal basis and purpose

Data	Purpose	Legal basis
Inquiry form data	Forwarding inquiry to property owner, responding to traveler	Consent (form submission)
Email after your stay	One email 3 days after your departure asking whether you stayed, with a link to rate the accommodation	Consent (a separate box in the inquiry form, unticked by default)
Owner account data	Service provision, invoicing, subscription management	Contract performance
Analytics data	Site performance, improving user experience	Legitimate interest / consent (cookie)
Log data	Security, abuse prevention	Legitimate interest

Email after your stay (rating request)

We send it only if you ticked "After my stay, send me a short request to rate the accommodation" when sending the inquiry. Purpose: one email 3 days after the departure date from your inquiry, asking whether you stayed and offering a link to rate the accommodation. Legal basis: your consent from the inquiry form. We send at most one such email per inquiry and at most one per email address in 30 days, without reminders. The email address kept for this purpose is automatically deleted 120 days after the email is sent (or after it is recorded, if the email was not sent). You can withdraw consent at any time before the email is sent by writing to info@letovanje-grcka.com; if the email has already arrived, simply ignore it.

4. Sharing with third parties

We do not sell personal data. We share data only with:

Property owners - inquiry data is forwarded to the owner of the property you enquired about.
Infrastructure providers - Supabase (database, EU region), Vercel (hosting, EU edge), Resend (transactional email), Cloudflare (CDN). These providers act as processors under data processing agreements.
Google - analytics data via Google Analytics 4 / Google Tag Manager.

All infrastructure providers are located in or process data within the European Economic Area or under Standard Contractual Clauses.

5. Retention

Inquiry and contact form data: up to 24 months.
Email address for the rating request after your stay: deleted automatically 120 days after the email is sent (or after it is recorded, if the email was not sent).
Owner account data: for the duration of the account plus 3 years after termination (for legal and tax purposes).
Analytics data: 14 months (Google Analytics default).
Server logs: up to 30 days.

6. Your rights

Under Serbian law (Law on Personal Data Protection, "ZZPL") and the GDPR, you have the right to:

access your personal data;
request correction of inaccurate data;
request erasure ("right to be forgotten");
restrict processing;
data portability;
object to processing based on legitimate interest;
withdraw consent at any time (where processing is based on consent).

To exercise any of these rights, write to info@letovanje-grcka.com. We will respond within 30 days. You also have the right to lodge a complaint with the Serbian supervisory authority: Poverenik za informacije od javnog značaja i zaštitu podataka o ličnosti, Bulevar kralja Aleksandra 15, 11000 Belgrade, www.poverenik.rs.

7. Cookies

We use cookies and similar technologies. For details see our Cookie Policy.

8. Changes to this policy

We may update this policy. The "Last updated" date at the top reflects the most recent revision. For material changes we will make reasonable efforts to notify registered owners by email.

Chat assistant (AI)

The site offers a chat assistant that answers questions about holidays in Greece and recommends accommodation and content from this site. Answers are generated by an AI language model and may be inaccurate, so please verify details before booking.

What we process

Your messages and the earlier messages of the same conversation (at most the last 12), and the page you are writing from (a listing or a destination). Please do not type sensitive personal data into the chat.
Voice recording, only if you use the microphone button: the recording (up to 30 seconds) is sent once to be converted into text, which appears in the input field so you can check it before sending. We do not store the recording and it is not written to chat logs; only the message you actually send is processed as described below.
A session ID in the lg_chat_sid cookie (see the Cookie Policy).
IP address: used only to limit the number of messages (abuse protection). The per-minute counter is short-lived (a few minutes); for the daily counter we store only a one-way computed value (hash) of the IP address, never the address itself. The IP address is not written to chat logs.

Purpose and legal basis

Answering your question and recommending accommodation: legitimate interest in providing the service you started.
Message limits, abuse protection and cost control: legitimate interest.
Improving site content based on questions we could not answer: legitimate interest.
Sending a travel plan and offers by email: your consent (see below).

Processors and transfers

To generate an answer, your messages are sent through Vercel AI Gateway (Vercel Inc.) to the language model provider (for example OpenAI), which also converts the question into a search vector for finding content on this site and, if you use the microphone, converts the voice recording into text. These providers act as processors on the basis of a data processing agreement with the processor. Data may be transferred to the United States; such transfers take place on the basis of a data processing agreement with the processor and the Standard Contractual Clauses.

Retention

Chat logs: the question (email addresses and phone numbers are replaced with [email] and [telefon] before saving), answer length, sources used and model, with the session ID: up to 180 days. The answer text and the IP address are not stored.
Message limit counters (session ID, IP address hash): up to 7 days.
Email from the chat: stored only if you type it yourself in a message and agree to receive a plan and offers. We send a confirmation link (double opt-in) and send the plan and offers only after you confirm; every email has an unsubscribe link. Unconfirmed sign-ups are deleted after 30 days. After you unsubscribe we no longer use the email for offers, and you can ask us to delete it at info@letovanje-grcka.com.

The rights described in the "Your rights" section apply to chat data as well.