How we handle your data

Who we are. Solo Travelers Greece is a trade name of [company name], a company registered in Athens, Greece (GEMI [number], VAT EL[number]). We are the controller of the personal data described here. You can reach us at hello@solotravelersgreece.com.

What we collect and why. When you join a list on this site, we collect your email address, the list you chose (for example “trips that include Milos”), the page you were on and any campaign tags in its address, the country your connection comes from, the time of the submission and, for spam protection, your IP address. We use the email address to send you what the form said: the dates, hotels and prices of our trips, and for the newsletter list, about one email a month about our trips. We do this with your consent, which you give by submitting the form (GDPR article 6(1)(a)), and you can withdraw it at any time with the unsubscribe link in every email. We use the IP address at the moment of submission to block automated sign-ups and to read the country you are in, which is our legitimate interest in keeping the lists clean (article 6(1)(f)). Only the country is stored, with your subscription. The site itself keeps no copy of your IP address: a scrambled version is held for ten minutes to limit repeated submissions, and nothing else. We do not use what you give us in a form for anything else, and we do not sell it or share it for advertising.

Who handles it for us. Our email lists run on MailerLite (UAB MailerLite, Vilnius, Lithuania), which stores your email address and sends the emails on our behalf under a data processing agreement. The site is hosted on servers run by Bluehost (Newfold Digital, USA); form submissions pass through that server on their way to MailerLite. Cloudflare (Cloudflare, Inc., USA) sits in front of the site to deliver it quickly and block attacks: every request passes through its network, which sees your IP address and adds the country it comes from. Where data leaves the European Economic Area, we rely on the EU-US Data Privacy Framework with the providers certified under it (Cloudflare, Google) and on the standard contractual clauses with the others (Bluehost). If you message us on WhatsApp, the conversation is also processed by WhatsApp (Meta) under its own terms.

Analytics and cookies. We use Google Analytics 4 (Google LLC, USA) to count visits and see which pages are read. It does not store IP addresses, and we have turned off Google’s advertising features. We don’t act on the browser’s Do Not Track signal, because there is no agreed standard for it; the banner and your browser’s cookie settings are the controls. If you are in the European Economic Area, the United Kingdom or Switzerland, analytics cookies are set only after you accept them in the banner, and you can change your choice from the Cookie settings link in the footer. Our cookie page lists every cookie we set. We also count how many times each page is opened, with a short request to our own server. It carries the page address, the campaign tags in that address and the country of the connection, nothing else: no cookie, no identifier, and no IP address is stored. To stop one browser from being counted many times in a row, a scrambled version of the IP address is held for ten minutes and then discarded, as with the forms. Your cookie choice does not affect it, because it cannot recognize you.

How long we keep it. Your email address stays on the list until you unsubscribe or ask us to delete it. When you unsubscribe, we keep only the record of the unsubscribe itself, your address on a do-not-email list, so that we don’t email you again by mistake; tell us if you’d rather we erased that too. When you ask us to delete your data, we erase it within 30 days. Server logs that include IP addresses are kept by our hosting provider for a short time, typically no more than a month, and by Cloudflare for a limited period under its own policy.

Your rights. You can ask us what data we hold about you, correct it, delete it, restrict or object to its use, receive a copy in a portable format, and withdraw your consent at any time. Email hello@solotravelersgreece.com and we’ll answer within a month. You can also complain to the Hellenic Data Protection Authority (dpa.gr) or to the authority in your own country.

Children. This site and our trips are for adults. We don’t knowingly collect data from anyone under 18.

Changes. If this policy changes, the date at the top changes with it. Last updated: October 25, 2026.