Privacy policy

Last updated: 12 October 2026

Data controller

This Privacy Policy describes how personal data is handled when you use the Kotle.gr platform (the “Service”), including the client portal, property websites, QR codes, bookings, analytics, and related features.

The Service is operated by:

ΠΑΝΑΓΙΩΤΗΣ ΛΕΑΝΔΡΟΣ ΚΩΤΣΙΟΥΡΟΣ ΤΟΥ ΚΩΝΣΤΑΝΤΙΝΟΥ

  • Trade name: Kotle.gr
  • Address: Klazomenon 50, 16121 Kaisariani, Greece
  • VAT / ΑΦΜ: EL169645110
  • Tax office (Δ.Ο.Υ.): ΙΖ ΑΘΗΝΩΝ

In this policy, “Kotle,” “we,” “us,” and “our” mean the business above. Please also read our Terms of Service.

If you do not agree with this policy, do not use the Service.

1. Introduction

We process personal data to run Kotle.gr for hosts and, where relevant, to support guests who visit property sites or make direct bookings. We aim to process only what we need, keep it secure, and respect applicable data-protection law, including the GDPR where it applies.

2. Information we collect

2.1 Information you provide

We may collect personal data you give us when you:

  • create or manage an account
  • add business or billing details
  • publish property content (text, photos, amenities, pricing, policies)
  • enable calendars, channels, or direct bookings
  • connect a payment account
  • contact support
  • take part in referrals or optional surveys

Depending on what you use, this may include:

  • name, email address, and phone number
  • business name, address, and tax identifiers
  • property descriptions, photos, location details, and registration numbers you choose to store
  • reservation and guest details processed through the Service
  • billing and subscription information
  • messages or files you send to support

Card payments are handled by Stripe or another payment provider you connect. Kotle does not store full payment card numbers.

2.2 Information collected automatically

When you or visitors use the Service, we may collect:

  • IP address, browser type, and device information
  • log data related to sign-in and security
  • usage analytics for the portal and property sites
  • QR-code scan and link-click statistics
  • cookies or similar technologies needed to operate or measure the Service

3. How we use information

We use personal data to:

  • provide, operate, and improve the Service
  • authenticate users and keep accounts secure
  • display property sites and generate QR codes
  • sync calendars and connect external booking channels you enable
  • process subscriptions and host billing
  • facilitate direct booking requests or guest payments where enabled
  • send service notices (for example verification, security, billing, or reservation updates)
  • provide customer support
  • detect abuse, fraud, or technical problems
  • meet legal and accounting obligations
  • send product or marketing messages only where allowed (and you can opt out of marketing)

Where required, we rely on contract performance, legitimate interests (such as securing and improving the Service), consent, and/or legal obligations.

4. Sharing and disclosure

We do not sell personal data.

We may share information in these situations:

4.1 Service providers

We use processors that help us run Kotle.gr, which may include:

  • hosting, database, and file-storage providers
  • email delivery providers
  • Stripe for subscription billing and/or guest card payments
  • analytics or mapping providers, where used
  • other vendors strictly needed to deliver a feature you use

These providers may process data only as needed to perform their services for us, under appropriate contracts.

4.2 Hosts and guests

If a guest inquires or books through your property site, relevant details (such as name, contact information, stay dates, and booking notes) are made available to you so you can fulfill the stay. Guests see the host/property information you publish.

We may disclose information if required by law, regulation, court order, or competent authority, or where reasonably necessary to protect rights, safety, or the integrity of the Service.

5. Hosts processing guest data

If you are a host, you decide what guest information you collect through your listings and bookings. You are responsible for complying with applicable privacy rules for your guests (including notices and requests). Kotle processes guest data as needed to operate the features you enable.

6. Data security

We apply technical and organizational measures appropriate to the risk, which may include:

  • encrypted connections (HTTPS)
  • access controls and authentication
  • secure handling of passwords (hashed)
  • reliance on PCI-aware payment providers for card data
  • operational safeguards for our systems

No online service can promise perfect security. Please protect your login credentials and tell us promptly at support@kotle.gr if you suspect unauthorized access.

7. Your privacy rights

Depending on applicable law (including the GDPR), you may have the right to:

  • Access — ask what personal data we hold about you
  • Rectification — ask us to correct inaccurate data
  • Erasure — ask us to delete data in certain cases
  • Restriction — ask us to limit certain processing
  • Portability — receive data you provided in a commonly used format
  • Objection — object to certain processing based on legitimate interests
  • Withdraw consent — where processing is based on consent
  • Marketing opt-out — stop marketing emails at any time
  • Complaint — lodge a complaint with the Hellenic Data Protection Authority (https://www.dpa.gr)

To exercise these rights, contact support@kotle.gr. We may need to verify your identity before responding.

8. Cookies and similar technologies

We use essential cookies or similar technologies to keep you signed in and make the Service work. We may also use limited analytics technologies to understand how the Service is used. You can control cookies through your browser settings; blocking some cookies may affect parts of the Service.

The Service may integrate with or link to third parties such as Airbnb, Booking.com, Stripe, mapping tools, or other sites. Their privacy practices are governed by their own policies. We are not responsible for those third-party practices.

10. Children’s privacy

The Service is intended for users aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will take appropriate steps to delete it.

11. International transfers

Personal data may be processed in Greece and in other countries where our providers operate. Where data leaves the European Economic Area, we use safeguards required by applicable law (such as appropriate contractual clauses with processors), unless another lawful transfer mechanism applies.

12. Retention

We keep personal data only as long as needed for the purposes in this policy, including:

  • while your account is active
  • for booking, billing, and support history as reasonably required
  • for periods required by tax, accounting, or other law
  • for security and dispute-resolution needs

When data is no longer needed, we delete or anonymize it where practicable.

13. Changes to this policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new “Last updated” date. For material changes, we may also notify you by email or through the Service. Continued use after the effective date means you accept the revised policy, to the extent permitted by law.

14. Contact

Questions about this Privacy Policy or your personal data:

Related: Terms of Service