Data Protection

Last Updated: 2026

At GTA Beds P.C., we recognize that protecting personal data is an essential part of building trust with our customers, hotel partners, tour operators, travel agencies, and international B2B partners.

As a Greece-based company operating in the international travel and accommodation sector, GTA Beds is committed to handling personal data responsibly and in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (GDPR) where applicable.

1. Our Commitment

GTA Beds is committed to:

Processing personal data lawfully, fairly, and transparently
Collecting only information that is necessary for legitimate business purposes
Keeping personal data accurate and appropriately up to date
Protecting information against unauthorized access, loss, misuse, or disclosure
Retaining information only for as long as reasonably necessary
Respecting individuals' applicable data protection rights
Working with trusted service providers that maintain appropriate security standards

2. Personal Data We Handle

Depending on the nature of our relationship, GTA Beds may process information relating to:

B2B Partners

This may include information about employees, representatives, and business contacts of:

Tour operators
Charter operators
Travel agencies
DMCs
Wholesalers
OTAs
Hotels and resorts
Other travel and hospitality companies

Examples include names, business contact details, job titles, company information, correspondence, contracts, and commercial records.

Hotel Guests and Travelers

Where necessary to provide accommodation services, we may process information such as:

Guest names
Booking details
Arrival and departure information
Room requirements
Contact information
Special requests
Relevant information required to provide the requested accommodation services

Where special-category or sensitive information is provided, such information will be handled only where there is an appropriate legal basis and where necessary for the relevant service.

3. Purpose of Processing

Personal data may be processed to:

Manage hotel and resort reservations
Provide accommodation services
Process group and series bookings
Support charter and back-to-back programs
Communicate with B2B partners
Manage commercial agreements
Process invoices and payments
Provide customer and partner support
Respond to enquiries
Maintain business records
Improve our services and systems
Protect against fraud and unauthorized activity
Meet legal, tax, accounting, and regulatory obligations

4. Legal Basis

Where GDPR applies, GTA Beds relies on appropriate legal bases for processing personal data, which may include:

Contractual necessity
Legal obligation
Legitimate interests
Consent

5. Data Minimization

GTA Beds aims to collect and process only the personal information reasonably necessary for the relevant business or accommodation service.

We do not seek to collect personal information that is unnecessary for the purpose for which it is being processed.

6. Data Security

We use appropriate technical and organizational measures designed to protect personal data.

Depending on the system and nature of the information, these measures may include:

Access controls
Authentication procedures
Restricted access to personal information
Secure systems and communications
Data backup and recovery procedures
Staff awareness and confidentiality measures
Monitoring and security controls
Appropriate supplier and technology controls

Access to personal data is limited to individuals and service providers who reasonably require it for legitimate business purposes.

7. Data Sharing

In order to provide our services, GTA Beds may share relevant information with trusted parties, including:

Hotels and resorts
Accommodation suppliers
Tour operators
Travel agencies
DMCs
Booking and distribution platforms
Technology providers
Payment providers
IT and hosting providers
Professional advisers
Public authorities where legally required

We aim to share only information that is reasonably necessary for the relevant purpose.

8. International Data Transfers

GTA Beds operates internationally and may work with hotels, resorts, travel companies, and service providers located in different countries.

Where personal data is transferred outside the European Economic Area and GDPR applies, GTA Beds will take appropriate steps to ensure that the transfer is carried out in accordance with applicable data protection requirements.

Depending on the circumstances, this may include an adequacy decision, appropriate contractual safeguards, or another legally recognized transfer mechanism.

9. Data Retention

Personal data is retained only for as long as reasonably necessary for the relevant purpose or as required by applicable law.

Retention periods may depend on:

The nature of the business relationship
Booking and travel requirements
Contractual obligations
Accounting and tax requirements
Legal obligations
Dispute resolution
Legitimate business requirements

When information is no longer required, it will be deleted, anonymized, or otherwise securely disposed of where appropriate.

10. Data Subject Rights

Where applicable under GDPR, individuals may have the right to:

Request access to their personal data
Request correction of inaccurate information
Request deletion of personal data in certain circumstances
Request restriction of processing
Object to certain processing
Request data portability where applicable
Withdraw consent where processing is based on consent

These rights may be subject to legal limitations and conditions.

Requests should be submitted using the contact details provided below.

11. Data Breaches

GTA Beds maintains procedures designed to identify, assess, manage, and respond to personal data security incidents.

Where required by applicable law, GTA Beds will notify the relevant supervisory authority and/or affected individuals within the legally applicable timeframe.

12. Responsibilities of B2B Partners

Where a tour operator, travel agency, DMC, wholesaler, hotel, or other B2B partner provides personal data to GTA Beds, the Partner is responsible for ensuring that it has a lawful basis and the necessary authority to provide that information.

Partners should provide only information reasonably necessary for the relevant booking or service.

Where the parties act as separate controllers or where a controller-processor relationship exists, the respective responsibilities will be determined according to the applicable circumstances and contractual arrangements.

13. Children’s Data

Our services may involve accommodation bookings for families and minors.

Where information concerning children is required for a booking, it should be provided by a parent, guardian, authorized travel professional, or other person legally entitled to provide the information.

GTA Beds processes such information only for legitimate accommodation, operational, contractual, or legal purposes.

14. Third-Party Services

GTA Beds may use third-party technology, booking, payment, communication, hosting, analytics, and other service providers.

Where such providers process personal data on behalf of GTA Beds, we aim to select appropriate providers and implement suitable contractual and security measures consistent with applicable law.

15. Privacy & Cookie Policies

This Data Protection section should be read together with the GTA Beds:

Privacy Policy
Cookie Policy
Applicable booking and commercial Terms & Conditions

These documents together explain how GTA Beds manages personal data and related technologies.

16. Contact & Data Protection Requests

For questions about data protection, privacy, or the exercise of applicable data protection rights, please contact:

GTA Beds P.C.

Charokopou 2, Kallithea

Athens 17671, Greece

Registration Number: 133357201000

Tax Number (AFM): 800636330

Established: 06/02/2015

GTA Beds — Protecting data. Building trust. Supporting global travel partnerships.