GDPR

1.Your rights

• Access: ask for a copy of the personal data we hold about you.
• Rectification: ask us to correct inaccurate or incomplete data.
• Erasure: ask us to delete your data when there is no longer a reason to keep it.
• Restriction: ask us to limit how we use your data while a question is resolved.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on our legitimate interest.
• Withdraw consent: where we rely on consent, withdraw it at any time, without affecting earlier processing.

2.How to exercise your rights

Write to support@lodgeloom.com and tell us which right you want to use. We may ask you to confirm your identity before acting on the request. We answer within one month; for complex requests this can be extended by two more months, and we will tell you if that happens.

Exercising your rights is free of charge.

3.If you are a hotel guest

Your hotel is the controller of your booking data, so please contact the hotel directly. LodgeLoom acts as its processor and gives every hotel built-in tools to export or erase a guest’s data on request. If you write to us instead, we will forward your request to the hotel and help it respond.

4.How LodgeLoom helps hotels comply

• A data processing agreement with every hotel, listing our sub-processors.
• EU hosting, encryption in transit (TLS) and encryption at rest for identity document numbers.
• Role-based access, optional two-factor authentication and a full audit log of who changed what.
• Guest data export and erasure tooling, and consent capture with timestamps on the booking engine.
• Regular backups, and notification to the hotel without undue delay if a personal data breach occurs.

5.Retention

• Contact and demo requests: up to 24 months.
• Hotel account data: for the duration of the contract, then deleted or returned within 30 days.
• Guest data: according to the hotel’s instructions and Greek legal obligations.

6.Complaints

If you believe your data is not handled lawfully, you can lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr). We would appreciate the chance to address your concern first at support@lodgeloom.com.