Privacy Policy
Last updated: 10 June 2026
This policy explains how Lasmari Vineyard (“we”, “us”), a family estate in Loutses, Corfu, Greece, handles personal data collected through lasmarivineyard.gr. We act as the data controller for the processing described here. You can reach us at info@lasmari.gr.
What we collect, and why
Bookings. When you reserve an experience we collect your name, email address, phone number (optional), any special requests you write, and the details of your reservation (experience, date, time, number of guests). We use this to provide the experience you booked, to send your confirmation email, and to contact you about your visit. The legal basis is the performance of our contract with you.
Payments.Payment is processed by Stripe on Stripe’s own secure checkout pages. We never receive or store your card number; we receive only a confirmation of payment and a payment reference.
Contact form. When you write to us we collect your name, email, optional phone number, and your message, and we use them solely to reply. The legal basis is our legitimate interest in responding to your inquiry.
Analytics.We use Google Analytics to understand how the site is used. In the European Economic Area, analytics cookies are set only after you accept them in the cookie banner. Your choice is stored in your browser and you can change it at any time via “Cookie Preferences” in the footer. The legal basis is your consent.
Where your data lives
Booking and reservation data is stored in our own database on a server located in Germany (European Union). The website itself is delivered by Vercel, and email is sent through Google’s Gmail service. Some of these providers may process limited technical data outside the EU under the European Commission’s standard contractual clauses.
Who we share data with
- Stripe Payments Europe — payment processing.
- Google — analytics (with your consent) and email delivery.
- Vercel — website hosting.
- Hetzner Online — database server hosting (Germany, EU).
We never sell your data, and we never share it for advertising.
How long we keep it
Booking records are kept for as long as Greek tax and accounting law requires. Contact messages are kept only as long as needed to handle your inquiry. Analytics data is retained according to Google Analytics’ standard retention settings.
Your rights
Under the GDPR you can ask us for access to, correction of, or deletion of your personal data; ask us to restrict or object to processing; and ask for a copy of your data in a portable format. Where processing is based on consent, you can withdraw it at any time. Write to info@lasmari.gr and we will respond. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (dpa.gr).
Changes to this policy
If we change how we handle personal data, we will update this page and the date at the top.