Last Updated: March 4, 2026

ANASTASIS MOULAZIMIS LTD / WINDMILLS HOTEL APTS (“we”, “us”, “our”) is committed to protecting and respecting your privacy in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable data protection laws.

This Privacy Policy explains how we collect, use, process, and protect personal data when you visit our website, contact us, or make reservations through our booking system.

1. Identity of the Data Controller

The data controller responsible for processing your personal data is:

ANASTASIS MOULAZIMIS LTD
Windmills Hotel Apartments
75 Pernera Avenue
5296 Paralimni
Cyprus

Email: info@windmillshotel.com
Phone: +357 XXXXXXXX

2. Scope of This Privacy Policy

This Privacy Policy applies to:

  • the official Windmills Hotel Apartments website
  • the online booking system
  • all digital services, platforms, and applications connected to our website

When this policy refers to:

  • “website”
  • “booking system”
  • “booking engine”
  • “platform”
  • “services”

it includes all pages and functionality related to our online presence and reservation system.

3. Booking System Data Processor

Our booking system is operated by a third-party provider acting as a Data Processor on our behalf.

WebHotelier (Revplus Hellas S.A.)
5th Km Rhodou-Lindou Avenue
85100 Rhodes
Greece

WebHotelier processes personal data only according to our instructions and in compliance with GDPR requirements.

WebHotelier is a PCI-DSS Level 2 certified service provider.

Data Protection Officer:
dpo@webhotelier.net

4. Personal Data We Collect

Depending on how you interact with our services, we may collect the following information.

Information you provide directly

When making a reservation or contacting us:

  • full name
  • email address
  • telephone number
  • address and country
  • booking details
  • guest names
  • special requests

Payment information

For reservation payments or guarantees:

  • credit/debit card details
  • transaction information
  • billing information

Payment data is processed securely through certified payment providers.

Website usage information

When visiting our website we may automatically collect:

  • IP address
  • browser type
  • device type
  • operating system
  • pages visited
  • visit date and time
  • referring website

5. Cookies and Tracking Technologies

Our website may use cookies and similar technologies to improve functionality and analyze website usage.

Cookies may be used for:

  • website functionality
  • analytics and performance
  • remembering preferences

You may control or disable cookies through your browser settings.

6. Purpose of Processing Personal Data

We process personal data for the following purposes:

Reservation management

  • processing bookings
  • confirming reservations
  • managing accommodation services

Customer communication

  • responding to inquiries
  • providing booking assistance
  • handling guest requests

Payment processing

  • confirming transactions
  • preventing fraud
  • processing refunds

Marketing communications

Where you have provided consent, we may send:

  • promotional offers
  • hotel updates
  • newsletters

Website improvement

  • analytics
  • service improvement
  • website performance monitoring

Legal compliance

  • compliance with legal obligations
  • accounting and regulatory requirements

7. Legal Basis for Processing

The legal bases for processing personal data include:

  • contractual necessity (for bookings and services)
  • legal obligations (tax and regulatory requirements)
  • legitimate interest (service improvement and system security)
  • consent (for marketing communications)

You may withdraw consent at any time.

8. Third-Party Data

If you provide personal data about another person (for example when booking for a guest), you confirm that you have obtained their consent to share their information.

9. Sensitive Personal Data

We do not intentionally collect sensitive personal data such as:

  • health information
  • religious beliefs
  • political opinions
  • biometric data

unless explicitly required and consent is provided.

10. Use of Services by Minors

Our services are not directed to individuals under the age of 16 years, and we do not knowingly collect personal data from minors without parental consent.

11. Data Retention

Personal data is retained only for as long as necessary to:

  • provide services
  • comply with legal obligations
  • resolve disputes
  • enforce agreements

Booking and financial records may be retained according to tax and accounting regulations.

12. Disclosure of Personal Data

We may share personal data with:

  • booking technology providers
  • payment service providers
  • IT service providers
  • regulatory authorities where required by law

All third parties are required to maintain appropriate security and confidentiality.

13. International Data Transfers

Some service providers may process data outside the European Economic Area (EEA).

Where this occurs, appropriate safeguards are implemented, including:

  • Standard Contractual Clauses
  • GDPR-compliant data processing agreements

Our data may be stored in secure cloud infrastructure including Amazon Web Services (AWS).

14. Your Rights Under GDPR

Under GDPR you have the right to:

  • access your personal data
  • request correction of inaccurate data
  • request deletion of personal data
  • restrict processing
  • object to processing
  • withdraw consent
  • request data portability

Requests may be submitted by contacting us.

15. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you may lodge a complaint with the supervisory authority:

Office of the Commissioner for Personal Data Protection – Cyprus
https://www.dataprotection.gov.cy

16. Security Measures

We implement appropriate technical and organizational security measures to protect personal data against:

  • unauthorized access
  • alteration
  • disclosure
  • loss or destruction

These measures include secure servers, encryption, and restricted system access.

17. Changes to This Privacy Policy

We may update this Privacy Policy periodically.

The most recent version will always be available on our website with the updated revision date.

18. Contact Information

For questions regarding this Privacy Policy or your personal data, please contact:

Windmills Hotel Apartments
ANASTASIS MOULAZIMIS LTD
75 Pernera Avenue
5296 Paralimni
Cyprus

Email: info@windmillshotel.com