What we collect, who else sees it, and what you can do about it, in plain language.
How Loena Luxury Suites in Thessaloniki handles personal data. Google Analytics 4 under Consent Mode v2, the Trustindex review wall, OpenFreeMap map tiles, the reserve-online.net booking engine, and your GDPR rights.
Who is responsible for your data
The data controller for loenasuites.com is ΧΡΗΣΤΟΣ ΑΘΑΝ. ΠΕΤΚΑΚΗΣ ΚΑΙ ΣΙΑ Ε.Ε. (Christos Athan. Petkakis & Co. E.E.), the company operating Loena Luxury Suites, five serviced suites at 13 Ernestou Emprar, in Ladadika, Thessaloniki, registered under AMA number 00002825758. We are a small team: the people who answer your messages are the same people who hold your booking details. This policy explains what we collect, why we collect it, and how to exercise your rights. It covers this website; the booking engine and the platforms you may have booked through publish their own policies.
What we collect, and why
We process only what a stay requires, and nothing on this site collects data for resale, advertising lists, or profiling. Reservations are handled by our booking engine, reserve-online.net (WebHotelier). Rates, availability, and the cancellation terms of each rate live there, and so do the personal details you enter when booking direct. Around the booking itself we hold a small set of information, listed below, for as long as managing the stay and Greek tax and accommodation rules require.
Booking details, the name, contact information, stay dates and rate you selected, received from reserve-online.net or from the platform you booked through
Messages, the WhatsApp and email conversations kept so the team replying to you has the context of your stay
Contact form submissions, the name, email address and text you send from the contact page, delivered to our inbox by Resend
Your IP address at the moment you submit that form, read so repeat submissions can be blocked, and held in the server's memory for sixty seconds
Arrival details, the contact information we use to send photo directions for self check-in before you arrive
Legal records, whatever Greek tax and accommodation law requires us to keep
Analytics, cookies, and consent
This site measures itself with Google Analytics 4 (property G-5FQSEW25BY), loaded through Google Tag Manager (container GTM-W43F934T), under Google Consent Mode v2. Google's scripts are fetched as the page loads, before you answer the banner. A request like that always carries your IP address, your browser and the address of the page you are reading, so Google receives those from the first moment whatever you choose afterwards. No analytics cookie is written until you accept, because all four consent categories start denied. Accepting turns on visit measurement, and it also records clicks on our phone, WhatsApp and booking links together with the page you clicked from. The click that hands you to the booking engine carries the Google Analytics identifier across, so one visit and one reservation count as one person rather than two. Your answer, accept or decline, is saved in your browser's localStorage, and the Cookie choices link in the footer brings the banner back whenever you want to change it. We run no advertising cookies, and declining changes nothing about how the site works.
Other third parties inside our pages
Two more services load content inside our own pages. The Trustindex review wall appears on the home page and on the reviews page, and its script is requested from cdn.trustindex.io only after you accept the banner. The map showing where we are appears on the home page, the suite page and the contact page, and draws its tiles from tiles.openfreemap.org. That map loads the moment you scroll it into view and does not wait for your answer to the banner, so OpenFreeMap receives your IP address and your browser. If you never scroll that far, no request goes out. Neither service gets your name, phone number or email from us.
The booking engine and other recipients
When you press Book, you leave this website for reserve-online.net, the WebHotelier booking engine, where availability, rates, and the cancellation terms of each rate are shown and your reservation details are entered. Cancellation terms vary by season and rate; the terms displayed for your rate at booking are the ones that apply, so read them there rather than looking for a blanket policy here. Beyond the booking engine there are four other companies and one category of recipient. Google receives the analytics described above. Trustindex serves the review wall, OpenFreeMap serves the map tiles, and Resend delivers contact form messages to our inbox. Greek authorities receive what the law requires of us and nothing more. None of it goes to anyone for advertising lists, profiling, or resale, and we never sell it. Reviews you write on Booking.com, Google, or Airbnb remain governed by those platforms' own policies.
Your rights
Under the GDPR you may ask what we hold about you, correct it, have it deleted, restrict or object to its processing, or receive it in a portable format. Message us on the channel you already use with us, WhatsApp included, and the same small team that manages your stay will answer. If you believe we have handled your data wrongly, you can complain to the Hellenic Data Protection Authority (dpa.gr). And if your question is about the stay itself rather than data, the FAQ answers most of it, and the suite page shows exactly what you are booking.
