Legal
Privacy Policy
Last updated: 2 April 2026
1. Who we are
It's All Greek To Me is a brand operated by XIKE Travel, a licensed Greek travel agency (GNTO Reg. No 0206E60000614201, Company Reg. No 143755201000), located at 27 Zinonos Street, Chalandri, Athens, Greece.
For data-protection matters, contact us at info@itsallgreek2me.tours.
2. Data we collect and why
| Source | Data | Purpose |
|---|---|---|
| Contact form | Name, email, phone (optional), subject, message | To respond to your enquiry |
| Transfer form | Name, email, phone, pick-up/drop-off locations, flight details, passenger count, dates, special requests | To arrange and confirm your private transfer |
| Tour bookings | Booking details as entered in the Bokun widget | Processed directly by Bokun; see their privacy policy |
| Server logs | IP address, browser, timestamps | Security, rate-limiting, abuse prevention |
We do not collect data for marketing or profiling purposes, and we do not sell your data to third parties.
3. Legal basis (GDPR)
- Contractual necessity — processing transfer and booking requests.
- Legitimate interests — responding to contact enquiries and preventing abuse.
- Consent — for non-essential cookies (where applicable).
4. Cookies
We use the following types of cookies:
| Cookie | Type | Purpose |
|---|---|---|
cookie_consent | Essential | Stores your cookie preference (localStorage) |
| Bokun widgets | Functional | Enable the tour booking widget; set by bokun.io |
You can reject non-essential cookies at any time using the cookie banner or by clearing your browser storage.
5. Third-party processors
- Resend — transactional email delivery for form submissions. Data is processed within the EU/EEA.
- Bokun (Viator) — online booking platform. Subject to Bokun's own privacy policy.
- Vercel — web hosting; server logs (IP, timestamps) are retained for up to 30 days.
6. Data retention
Enquiry and transfer request emails are retained in our mailbox for as long as operationally necessary and deleted within 2 years. Server logs are deleted after 30 days.
7. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data (“right to be forgotten”).
- Object to or restrict processing.
- Lodge a complaint with the Hellenic Data Protection Authority (HDPA) at www.dpa.gr.
To exercise any right, email us at info@itsallgreek2me.tours.
8. Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top of this page will reflect any changes. We encourage you to review this page periodically.