Privacy Policy.

The data controller is Touristas Technologies, based in Sifnos, Greece.

We send encrypted partners information to gain and increase visibility and rankings on Search engines.

The Company may collect and process the following data:

a) Business Data

• Business name
• Contact details (email, phone)
• Address, area of activity
• Descriptive content, photos, prices
• Billing information

b) User Data

• Technical data (IP address, browser, device)
• Search preferences
• Cookie and similar identifiers (with your consent where the law requires it, for analytics and advertising)
• Your cookie and consent choices
• Account details you provide, including name, email and profile image
• Private saved trips, favourites, PostCards and selected photos when you use account synchronisation
• Public profile details and PostCards you explicitly submit to the community
• Likes, follows, private block lists and content reports needed to operate the community

Data is collected exclusively for:

• provision and operation of the Platform
• promotion of businesses
• increasing visibility and rankings on Search engines
• billing and accounting compliance (B2B only)
• improvement of services via AI training
• measuring how the Platform is used (analytics, with your consent)
• showing advertising that keeps the Platform free to use (Google AdSense)
• operation of private collections and review of public community submissions and reports

Processing of data is based on:

• data subject's consent (for example for analytics and advertising cookies), which can be withdrawn at any time
• performance of a contract
• legitimate interest of the Company
• legal obligation

Data is retained for as long as necessary for the purpose of processing and as required by tax and commercial legislation.

Upon termination or request, data is deleted or anonymized, provided no legal obligation exists.

We do not sell personal data. We share it only with:

• service providers that host and run the Platform (for example Vercel and Supabase)
• analytics providers, with your consent (Google Analytics, provided by Google Ireland Limited, and Microsoft Clarity)
• advertising partners: Google AdSense and the ad technology providers Google works with (see section 7.3)
• official partners, where needed to provide our services (e.g. for visibility); booking partners you choose to visit apply their own privacy policies
• public authorities, where the law requires it

Some of these providers process data outside the European Economic Area, for example in the United States. These transfers rely on the EU-U.S. Data Privacy Framework or on the European Commission's Standard Contractual Clauses.

Touristas AI is well trained in our dedicated servers to ensure data security.

The Platform uses cookies and similar technologies such as local storage. Strictly necessary ones are always active; analytics and advertising ones depend on your choices.

Data subjects have the right to:

• access
• rectification
• erasure (right to be forgotten)
• restriction of processing
• data portability
• object
• withdraw consent at any time, without affecting processing carried out before the withdrawal

For any questions, please contact us directly at hello@discovercyclades.gr.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority.

Hellenic Data Protection Authority (dpa.gr)↗

The Company takes all necessary technical and organizational measures to protect data from loss, alteration, or unauthorized access. Touristas AI uses dedicated servers and encryption.

The Company reserves the right to modify this Policy. Changes are effective from their publication on the Platform.

For matters concerning this Privacy Policy, please email us at hello@discovercyclades.gr.

By using the Platform you acknowledge this Privacy Policy. Where processing relies on your consent, we ask for it separately and you can withdraw it at any time.