1. Processing Manager

The company Anasa by the Sea, based in Heraklion, Crete, is the controller of personal data. For privacy issues: kostastorodi@gmail.com

---

2. Data we collect

α) Data provided by you

• Name, email, phone number, dates of stay via the checkout form.
• Payment information (e.g. via PayPal or Stripe), which remains only with the payment providers.

b) Automatic data

• IP address, browser type, operating system, pages visited, date & time, all collected via Google Analytics checkoutpage.costripe.com.

---

3. Cookies & Analysis

• We use cookies for statistics (Google Analytics) and technical (e.x. form checkout).
• Cookies are activated only after explicit consent you, in accordance to GDPR.

---

4. Google Analytics

• Be anonymously collected data: pages, time spent, anonymous IP, etc.
• The cookies are installed only with consent and not combined with your personal information.

---

5. Payments: PayPal & Stripe

PayPal
If you choose PayPal, carried only the necessary data (name, email, IP address etc.) for complete payment and fraud prevention onlyonceshop.com.

Stripe

• Payments via Stripe.js. We do not collect card numbers – these remain only on the servers of the Stripe thebasics.devstripe.com.
• The Stripe uses cookies for fraud detection and authentication (e.x. __stripe_mid, __stripe_sid, pay_sid) stripe.com.
• If you are using Stripe Link, you can save your information for future purchases, fully controlled by you stripe.com.

---

6. Legal basis of processing

• Performance of a contract (hold).
• Legal & accounting obligations (e.x. taxation).
• Consent for cookies/analytics.

---

7. Duration of storage

• Data reservation/payment: observed up to 6 years (tax reasons).
• Data Analytics: until revoked the consent or as required by law.

---

8. Your rights

You have the right to request:

• Access and copy.
• Correction or deletion.
• Restriction or objection to processing.
• Withdrawal of consent (e.x. cookies).
• Portability of data.

For requests: kostastorodi@gmail.com. You may be asked for authentication.

---

9. Recipients of data

• Banks / PayPal / Stripe (for payments).
• Google (Analytics).
• Public & regulatory authorities, only if required legally.

---

10. Cross-border data transfer

Data statistics are transferred to servers of Google and Stripe, possibly outside the EU. Ensure appropriate as to the GDPR stripe.comonlyonceshop.com.

---

11. Security

We use HTTPS, encryption, access restrictions and control procedures to protect your data.

---

12. Third-party links

The site may be a link to third platforms (e.x. social media). Read their respective privacy policies.

---

13. Modifications to Policy

Any changes will be posted on the website, indicating the date of modification. In case of material changes, you will be notified via email (if you have given us consent for marketing).

---

14. Communication

For any questions and exercise of rights:
Email: kostastorodi@gmail.com
Phone: +30 694 4440832