Privacy Policy

The controller of your personal data is Stavros Gerolymatos, owner of the Xenia Assist service.

For any matter relating to the processing of your data, you can contact us at:

Through our website, we collect data only when you provide it to us yourself by filling in the contact form or the registration form:

• Contact form: full name, email, phone (optional), hotel/property name, message.
• Registration form: business details (property name, number of rooms, contact person details, email, phone) and billing details (company name, VAT number, tax office, address, city, postal code, country, business activity).

We do not use cookies, analytics or any tracking technology on our website — we do not collect browsing data.

• Responding to a contact request — based on our legitimate interest in responding to enquiries (Article 6§1(f) GDPR).
• Creating an account/subscription and issuing invoices — based on the performance of a contract or pre-contractual measures at your request (Article 6§1(b) GDPR), as well as a legal tax obligation (Article 6§1(c) GDPR).
• Communication regarding the free trial/account activation — based on legitimate interest and/or the performance of pre-contractual measures.

We do not use your data for automated decision-making or profiling.

Your data is not sold or disclosed to third parties for their own purposes. The following may have access to it, exclusively to support our operation and bound by corresponding confidentiality obligations:

• Hosting and email delivery providers we use for the operation of the website.
• Accounting/tax services, where required for issuing invoices.

Contact request details are retained for up to 12 months from the last communication, unless a collaboration arises. Registration/billing details are retained for as long as your subscription lasts, and thereafter for as long as tax legislation requires (up to 5 years). After these periods expire, the data is deleted or anonymized.

Under the GDPR, you have the right to:

• Access your data.
• Rectify inaccurate data.
• Erasure ("right to be forgotten"), where there is no legal obligation to retain it.
• Restrict processing.
• Data portability.
• Object to processing.
• Lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr), if you consider that your rights are being infringed.

To exercise any of the above rights, contact us at .

We take reasonable technical and organizational measures (encrypted HTTPS connection, restricted access) to protect your data from unauthorized access, loss or disclosure.

The xenia-assist.com website does not use cookies or similar tracking technologies, so cookie consent is not required.

This section concerns exclusively the Xenia Assist software itself (the property management panel at xenia-assist.com/adminpanel and the guest page at xenia-assist.com/room), not this presentation website.

When using the management panel, we use the following cookies, all strictly necessary for the operation of the application (they do not require consent, as they serve exclusively a technical/functional necessity, Article 5§3 of Directive 2002/58/EC):

• session: maintains your login session in the management panel.
• XSRF-TOKEN: protection against CSRF attacks.
• remember_web_...: keeps you signed in when you select "Remember me", so you do not have to log in again on every visit.

On the guest page (no account, access via QR/PIN), no cookies are used; the room session code and the preferred language are stored locally on your device (localStorage), for the same functional necessity, so that the PIN does not have to be re-entered on every page load.

We do not use cookies or local storage for analytics, advertising or behavioral tracking.

We may update this policy from time to time. The date of the last update is shown at the top of the page.