Last Updated: 26/08/2026

1. Who we are

Mathraki Resort (“Mathraki Resort”, “we”, “us” or “our”) operates the Mathraki Messaging Bridge, which connects our WhatsApp Business communications with our customer relationship management system.

Data Controller: Mathraki Resort
Address: Gouvia, Corfu, Greece, 49100
Email: info@mathrakiresort.com
Telephone: +30 26610 99380

If Mathraki Resort is a trading name, the registered legal business name should also be inserted here.

2. Scope of this policy

This policy applies when you communicate with Mathraki Resort through WhatsApp and your communication is processed by the Mathraki Messaging Bridge.

WhatsApp and Meta also process information under their own privacy policies and terms. Their processing is outside our direct control.

3. Information we process

Depending on how you use WhatsApp to contact us, we may process:

• Your telephone number and WhatsApp identifier.

• Your WhatsApp profile name.

• Messages and replies exchanged with Mathraki Resort.

• Information that you voluntarily include in a message, such as booking details, dates, preferences or requests.

• Attachments or descriptions of media you send.

• Message identifiers, timestamps and delivery-status information.

• Related customer, enquiry or booking information already held in our EspoCRM system.

Please do not send sensitive personal information through WhatsApp unless it is necessary for your request.

4. How we use your information

We process this information to:

• Answer questions and provide customer support.

• Handle accommodation, restaurant and service enquiries.

• Prepare, manage and follow up on bookings.

• Maintain an accurate history of our communications.

• Send service-related messages and booking updates.

• Protect our systems, prevent misuse and troubleshoot technical problems.

• Comply with applicable legal, accounting and regulatory obligations.

We do not sell your personal information.

5. Legal bases

Depending on the circumstances, we rely on one or more of the following legal bases under the General Data Protection Regulation:

• Contract or pre-contractual steps: when responding to a booking request or providing a requested service.

• Legitimate interests: for customer service, communication history, system security and the efficient operation of our business.

• Consent: where you have voluntarily agreed to receive optional marketing communications.

• Legal obligation: where records must be retained or disclosed under applicable law.

You may withdraw consent for marketing at any time by contacting us or replying STOP.

6. How the integration works

Incoming WhatsApp messages are received through Meta’s official WhatsApp Business Platform. The Mathraki Messaging Bridge may match your telephone number with an existing contact in our EspoCRM system and store the communication as an internal customer-service note.

Automatic creation of new EspoCRM contacts is disabled. An authorised staff member may create or update a contact when necessary to handle your request.

The bridge does not make decisions that produce legal or similarly significant effects using solely automated processing.

7. Who may receive your information

Access may be provided only where necessary to:

• Authorised Mathraki Resort personnel.

• Meta and WhatsApp, which provide the messaging platform.

• Cloudflare, which provides secure connectivity and network protection.

• Hosting, infrastructure or technical-support providers working on our behalf.

• Professional advisers or public authorities where required by law.

Service providers must process information only for the relevant service and subject to applicable contractual and legal protections.

8. International transfers

Some service providers, including Meta or Cloudflare, may process information outside Greece or the European Economic Area. Where required, transfers are made using recognised safeguards, such as adequacy decisions or approved contractual protections.

9. Retention

WhatsApp communications and associated CRM notes are retained only for as long as reasonably necessary for customer service, booking administration, dispute handling and security.

Ordinary enquiries will generally be reviewed for deletion after 24 months from the last meaningful interaction. Information connected with a confirmed booking, payment, legal claim or accounting record may be retained longer where required by applicable law.

10. Security

We use appropriate technical and organisational safeguards intended to protect personal information, including encrypted HTTPS transmission, access controls, authentication, restricted administrative access and a self-managed CRM environment.

No internet transmission or storage system can be guaranteed to be completely secure.

11. Your rights

Subject to the conditions provided by applicable law, you may request:

• Information about how we process your data.

• Access to your personal data.

• Correction of inaccurate or incomplete data.

• Deletion of your data.

• Restriction of processing.

• Data portability.

• Objection to processing based on legitimate interests or direct marketing.

• Withdrawal of consent at any time.

12. Data deletion requests

To request deletion of information associated with your WhatsApp account, email info@mathrakiresort.com with the subject:

WhatsApp Data Deletion Request

Include the WhatsApp telephone number concerned and enough information for us to identify the relevant communication. We may request reasonable verification before acting on the request.

We will delete or anonymise eligible information unless retention is required for a booking, payment, legal claim, security investigation or another legal obligation.

13. Complaints

Please contact us first so that we can investigate your concern.

You also have the right to lodge a complaint with the:

Hellenic Data Protection Authority
1–3 Kifisias Street
115 23 Athens, Greece
Website: https://www.dpa.gr/

14. Changes to this policy

We may update this policy when our services, technology or legal obligations change. The latest version and its effective date will always be published on this page.

15. Contact

For privacy questions or to exercise your rights:

Email: info@mathrakiresort.com
Postal address: Mathraki Resort, Gouvia, Corfu, Greece, 49100