Privacy Policy

PLAZA HOTEL acknowledges the importance of the security of your personal data, as well as of your electronic transactions and takes all the necessary steps, using the most modern and advanced methods, to protect your data from unauthorized access, disclosure, modification or deletion.

  • The Controller of your data is the limited company with the name « TOURISTIC ENTERPRISES GEORGAS SA», hotel PLAZA, address Ierou Lohou 7, Rhodes GR85131, Greece, telephone number +302241022631. The legal representative of the Company is: Geogios Georgas, telephone number +302241022501

The security of the online store of PLAZA HOTEL is achieved with the cooperation of the Company with WebHotelier.

This privacy policy explains our practices regarding the personal information we collect with reference to you and the purposes for which we collect it, the methods we use when collecting it, to whom we transfer it and the rights you have.

If you make a room booking in any way at our hotel, you agree to the terms of this data protection policy and you declare that you are at least 16 years of age.


  • first name – last name
  • gender passport or ID number
  • date of birth-age
  • place of birth
  • nationality
  • e-mail address
  • telephone number
  • address
  • booking reference
  • flight number
  • date of your arrival and departure
  • your credit card number
  • MAC address of your connecting device
  • video data
  • client number if you are a member of the loyalty programme Best Western Rewards
  • information regarding allergies in foods, eating habits or medical complaints only if it is voluntarily provided by you. By providing this sensitive data, you declare your explicit consent to its collection and processing in accordance with the terms of this policy.

We do not knowingly collect personal data from individuals under the age of 16 unless provided by a parent or guardian.

As a parent or guardian, you should not allow the submission of personal data on our website by your children.


We may collect your personal data from:

A) Directly from you

  • on this website
  • through a reservation e- mail that you send us
  • by phone
  • upon your arrival and stay at our hotel.


  • If you are a member of the loyalty program Best Western Rewards
  • If you have booked a room to our hotel through the website


D) Travel agencies

E) Online booking platforms


The above personal data are necessary and are intended solely for:

  • your room reservation
  • your check-in and check out
  • registering your preferences and fulfilling them during your stay
  • the provision of hotel services to you
  • safeguarding your health while eating at our hotel
  • the safety of your goods and your safety during your stay in our hotel and the prevention of criminal offences (closed surveillance circuit)
  • ensuring our payment of your stay
  • confirmation of a credit card transaction with credit institutions
  • the repudiation of legal claims by customers and corporate partners
  • supporting our legal claims
  • safeguarding of our legitimate interests
  • our compliance with applicable Greek and European legislation.

The provision of your personal data is mandatory for the conclusion of the contract of room rental and provision of hotel services with you, for the fulfilment of hotel contract with travel agencies, the brokerage contract with electronic booking platforms and our contract with Best Western Greece.

Failure to provide such information would result in the failure or incomplete fulfilment of the above contracts, our inability to comply with Greek and European legislation and possible sanctions against us.


  • We retain your personal information for as long as necessary for the fulfilment of the aforementioned purposes.
  • All your data regarding allergies in foods, eating habits or medical complaints is destroyed the day of your departure from our hotel, unless you have consented to further holding, there is a legitimate interest in further holding or the applicable laws require or permit their retention for a longer period.
  • Τhe video data is deleted within 7 days.
  • The MAC address of your connected device (wifi) is deleted immediately after you have disconnected from the network. Parents or guardians of persons under the age of 16 are responsible for the connection of these persons to the network.
  • The personal data stored to the clouds of Webhotelier and Primal- Res are hold at least for 12 months according to PCI-DSS.


We transfer your personal data to:

  • The travel agencies through which you have booked a room to our hotel, to fulfil the hotel contract
  • To our corporate partners and service providers. In this case, we always require from our partners to provide us guarantees for processing your data lawfully and only within the scope of the purpose for which they were forwarded.
  • To the company AEGEAN AIRLINES, if you are a holder of the card Miles& Bonus and you have used it at our hotel for earning or spending miles.
  • To police, tax and other administrative authorities in accordance with the current applicable laws.


  • We may transfer specific pieces of your personal data to travel agencies with which we cooperate in countries outside the EU, if you made a reservation to our hotel through them, for the purpose of implementing the hotel contract and always in accordance with the provisions of the GDPR. You consent to the aforementioned transfer if you submit your personal data to them or to us and you acknowledge that these countries may provide a different level of data security than in EU.
  • According to our contract with Best Western Hellas, the booking program of our hotel is linked to the booking program of Best Western International Inc. by using two-way interface. Your data provided through your reservation is transferred to the server of Best Western International in Phoenix USA. Best Western International Inc. is certified under the EU-US Privacy Shield.
  • The data collected through online booking channels is also stored in the clouds of Webhotelier and Primal- Res, both using Amazon Web Services in N. Virgina USA, and in Frankfurt Germany.
  • Your data collected through this website is also stored in in the cloud of Webhotelier.
  • Amazon Web Services is certified under the EU-US Privacy Shield

If you don’t agree with the aforementioned transfers, please don’t use our website or book a room to our hotel in any other way.


Α. Right to access your data

  • You have the right to access with absolute security the data you have provided us through our website by entering the passwords used for your identification: your Access Password (e-mail or username) and the Personal Security Password (password).
  • You have the right, at any time, to request that we inform you of the personal data we hold for you. Your requests must be submitted in writing to the hotel reception, by e-mail to: or by registered mail or courier at PLAZA HOTEL, address Ierou Lohou 7, GR85131 RHODES, GREECE. We are required to respond to your requests within one month.

B. Right to correct, to limit the processing, right of portability and of deletion of your data

You are entitled to request, at any time:

  • to correct or limit the processing of your data, when possible.
  • to delete your data if this is not contrary to our legal obligations under National and / or European law, to the fulfilment of our duty in the public interest or to reasons of public interest in the field of public health, to the foundation, exercising and support of our legal claims, and more generally, if this is not contrary to paragraph 3 article 17 and to other provisions of GDPR (EU 679/2016).

In addition,

  • you have the right to object to the processing of personal data
  • as well as the right to receive your data in a structured, commonly used format and the right to forward them to another controller, without our objection.

Your requests must be submitted in writing to the hotel reception, by e-mail to or by registered mail or courier at PLAZA HOTEL, address Ierou Lohou 7, GR85131 RHODES, GREECE. We are required to respond to your requests within one month.


You have the right to file a complaint at the competent supervising authority at


We reserve the right to change, modify, add, or remove portions of this Privacy Policy. We will post the revised version on this web page and change the “last updated date”. You should regularly check this web page for updates to this Privacy Policy. Changes will become effective immediately but will not apply retroactively.

 Your continued engagement with our services after any change in this Privacy Policy will constitute your consent to such change. 

Last updated date: 24/05/2018


0.1 24th May 2018 Creation of document



Join our Plaza Members Club and gain instant discount -5%

  • -5 % via official booking engine
  • 1 point per night