Privacy Policy
Last updated: April 25, 2026
This policy explains what personal data Discover Lesvos collects, why we collect it, and the rights you have under the EU General Data Protection Regulation (GDPR) and Greek law (Law 4624/2019).
Who we are
Discover Lesvos is an independent tourism directory for the island of Lesvos, Greece. The site is operated from Greece. For privacy questions, contact hello@discover-lesvos.com.
What we collect
We collect only what is necessary to operate the site:
• Technical data — your IP address, browser, and device, logged automatically by our hosting provider (Cloudflare) for security and abuse prevention.
• Analytics data — anonymous, aggregated usage data via Google Analytics 4, only if you give consent. This includes pages visited, approximate region, and device type. We do not enable Google Signals, advertising features, or cross-site tracking.
• Listing claim form — if you submit a claim to manage a business listing, we collect the name, email address, optional phone number, and message you provide so we can verify ownership and respond.
• Authentication cookies — a hashed session cookie if you log in to the password-protected preview or admin area.
Why we use it (legal basis)
• Security and operations — legitimate interest (Art. 6(1)(f) GDPR) in keeping the site working and free from abuse.
• Analytics — your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
• Listing claims — performance of a request initiated by you (Art. 6(1)(b) GDPR).
How long we keep it
• Server logs: up to 30 days (Cloudflare default).
• Analytics data: 14 months in Google Analytics, then automatically deleted.
• Listing claim records: kept until the claim is resolved, then up to 12 months for our records.
Who we share it with
We do not sell your data. We share it only with infrastructure providers acting as data processors:
• Cloudflare, Inc. — hosting, CDN, security (data may transit through EU and US data centers).
• Google LLC (Google Analytics) — only if you consent. Data is processed in the EU and US under EU Standard Contractual Clauses.
Your rights
Under GDPR you have the right to:
• Access your personal data and ask for a copy.
• Have inaccurate data corrected.
• Have your data erased.
• Restrict or object to processing.
• Receive your data in a portable format.
• Withdraw analytics consent at any time by clearing your cookies or revisiting the cookie banner.
To exercise any of these rights, email hello@discover-lesvos.com. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (dpa.gr).
Children
The site is not directed to children under 16 and we do not knowingly collect data from them.
Changes to this policy
We may update this policy as the site evolves. Material changes will be reflected in the “Last updated” date at the top of this page.