Privacy Notice for Hotel Reservation and Accommodation
Introduction
Promethium PropCo Chania Single Member Société Anonyme (“Promethium,” “We,” or “Us”) with a business registry number 162105441000 and VAT number 996983338, values your privacy and is committed to protecting and processing your personal data in accordance with the applicable data protection laws, including the guidelines and directions of the Hellenic Data Protection Authority. This Privacy Notice explains how We collect, use, share, transfer, and safeguard the personal data you provide to Us —whether through registration forms at check-in, other communication methods, or as otherwise needed to fulfill our obligations to you.
-
Collection and Use of Personal Data
We collect your personal data when you make a reservation or request accommodation at our hotel, “Domes Zeen Chania”. Such data may include your name, contact details, payment information, government-issued identification, and any other data necessary to administer or facilitate your stay, provide our services, and communicate with you. If you do not provide the requested data, We may be unable to confirm your reservation or fulfill our contractual and legal obligations.
We use your personal data to:
• Manage your reservation, fulfill service requests, and maintain relevant documentation during your stay.
• Facilitate and monitor your access to hotel rooms and our services.
• Communicate with you, either upon your request or when required for our legitimate business interests or legal obligations.
• Comply with legal obligations, such as maintaining accounting records and reporting to local authorities where required.
-
Sharing and Disclosure of Personal Data
In accordance with the principle of necessity and proportionality, We grant access to your personal data only to individuals or entities that require such access to perform tasks on our behalf or where mandated by law. Internal authorized personnel at Promethium, including hotel staff, reservation teams, IT departments, marketing services, and legal advisors, may process your data as needed to fulfill our contractual and legal obligations. Any such personnel are subject to confidentiality obligations and relevant data protection requirements.
We also share your personal data with Domes of Attica Société Anonyme (“Hotel Manager”), acting as a data processor on behalf of Promethium.You may contact them at dpo@domesresorts.com.
Domes Zeen Chania is an Autograph Collection hotel affiliated with Marriott International, Inc. (“Marriott”). When you stay at Domes Zeen Chania your personal data will be shared with and processed by Marriott International, Inc. and its affiliates (headquartered in the United States of America) as an independent data controller in accordance with Marriott’s own privacy statement, available at www.marriott.com/about/privacy.mi.
Additionally, We may rely on external service providers (e.g., IT vendors, security services providers, research and analytics entities) to assist us with data processing tasks. These third parties process your personal data only on our instructions, under required contractual safeguards, and strictly for the purposes set forth herein. They are not permitted to use or disclose your data for any other purpose unless required by law.
If We sell or transfer all or part of our business, We reserve the right to transfer your personal data to the interested party or authorized third parties involved in the transaction. In any event, We will ensure continued compliance with applicable data protection laws throughout such a process.
We may further disclose your personal data where required by law, in response to government or judicial requests, or for the protection of our legal rights, interests, or the safety of our customers, employees, and the public.
-
International Transfers
Your personal data may be transferred outside your country of residence, potentially to jurisdictions that do not provide the same level of data protection. In any such case, We comply with applicable data protection requirements by implementing appropriate safeguards, such as Standard Contractual Clauses (SCCs) under EU regulations, and by conducting relevant assessments to determine whether additional technical, contractual, or organizational measures are necessary. You may request a copy of these contractual safeguards by contacting Us at dpo-zeenhotel@potamitisvekris.com
-
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it is collected, or for such other periods as mandated by law. Once these purposes are satisfied or the legally required period lapses, We securely delete or anonymize your personal data in accordance with our internal policies and applicable legal requirements.
-
Your Rights under Data Protection Law
Under the circumstances and conditions set forth by applicable data protection legislation, including Greek Law and the General Data Protection Regulation (GDPR), you have the right to:
- Access: Request confirmation of whether We process your personal data and, if so, receive a copy of that data and other relevant information.
- Rectification: Ask Us to correct or update any inaccurate or incomplete personal data.
- Erasure: Request the deletion of your personal data if continued processing is not justified or required by law.
- Restriction: Seek restricted processing of your personal data while We assess your request or if you contest the accuracy or lawfulness of our processing.
- Portability: Obtain your personal data and transfer it to another controller where required by applicable law.Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
To exercise your rights, please contact Us at dpo-zeenhotel@potamitisvekris.com. We may request reasonable proof of your identity before fulfilling certain requests to ensure the security and privacy of your data. We will endeavor to respond within the timelines required by law.
-
Contacting Us and Lodging a Complaint
Promethium has appointed a Data Protection Officer (DPO) responsible for overseeing our compliance with EU and local data protection laws. If you have any questions or concerns about the processing of your personal data or wish to exercise any of your rights, please contact our DPO at dpo-zeenhotel@potamitisvekris.com
If you are not satisfied with our response, you have the right to lodge a complaint with the Hellenic Data Protection Authority (1–3 Kifissias Avenue, Ampelokipi, Athens, Greece, www.dpa.gr).
We are dedicated to handling your personal data in a transparent and secure manner. We aim to maintain the highest standards of protection, ensuring that your privacy rights are honored and safeguarded in accordance with the directives and guidelines of the Hellenic Data Protection Authority. If you have any further questions, please reach out to our DPO at the contact details above. We appreciate your trust and look forward to welcoming you Domes Zeen Chania.
August 2026