Guest Portal Privacy Policy

This Privacy Policy explains how Plus Hotels S.A. uses personal data when you access and use the Guest Portal during your stay, including online guest services, guest requests, online charges, and optional assistance notifications.

Last updated: 4 May 2026

Who We Are

Controller: Plus Hotels S.A.

Legal name: PLUS HOTELS ΞΕΝΟΔΟΧΕΙΑΚΗ ΑΝΩΝΥΜΗ ΕΤΑΙΡΕΙΑ

Registered address: Eparchiaki Odos Falirakiou Kalythies 0, 85100, Rodos, Greece

AFM: 801027571

Tax office (DOY): RODOU

Contact email: accounts@plushotels.gr

Telephone: +30 22410 24015

What This Policy Covers

The Guest Portal is an operational service used to support your stay. Depending on the services you choose, it may display reservation information, show check-in and checkout dates, collect registration details, receive assistance or maintenance requests, show room or accommodation charges, receive reviews, and support online payment redirection and optional closed-app assistance notifications.

The mandatory Guest Portal acceptance screen records that the notice was presented and accepted for the reservation on a specific device. It is not the only legal basis for all personal-data processing that takes place during your stay.

What Personal Data We Process

Reservation and identity details

  • Name, reservation ID, room assignment, stay dates, and reservation status.
  • Guest registration and contact details that you submit through the portal.

Guest service interactions

  • Assistance requests, maintenance issues, service history, and staff updates.
  • Guest reviews, comments, and related operational notes.

Payment and billing data

  • Charge summaries, payment status, order identifiers, and reservation-linked transaction metadata.
  • We do not ask you to type payment card details directly into the Guest Portal page.

Portal and device data

  • Device identifier cookie values, consent records, IP address, browser information, and audit logs.
  • Notification subscription data if you choose to enable browser push notifications.

Why We Use Your Data and Our Legal Bases

To provide your stay and requested guest services

We use reservation, guest-service, and charge information to operate the Guest Portal and deliver the services you request during your stay. This includes viewing reservation information, handling guest requests, showing charges, and supporting online payment steps. The main legal basis is performance of a contract or steps taken at your request before or during the stay.

To meet legal and accounting obligations

Certain hospitality, invoicing, tax, and accounting records must be maintained to comply with applicable laws. The legal basis for this processing is compliance with legal obligations.

To protect the portal and keep operations running smoothly

We use device recognition, audit trails, service logs, fraud-prevention checks, debugging records, and operational security controls to keep the portal reliable, detect misuse, and support continuity of service. The legal basis is our legitimate interests in secure and efficient hotel operations.

To record Guest Portal notice acknowledgement and device continuity

The portal records when a device accepts the mandatory privacy and cookie notice so the same device can continue using the reservation-specific service during the stay without being interrupted repeatedly. This supports the requested online service, helps demonstrate notice delivery, and supports operational continuity.

To send optional assistance notifications

If you enable browser or device notifications, we process notification subscription details so the portal can alert you when hotel staff updates one of your assistance requests. This feature depends on your separate browser-level choice and can be switched off from your browser or device settings.

How Viva Smart Checkout Fits In

When you choose to pay an eligible hotel charge online, the Guest Portal redirects you to Viva Smart Checkout, which is a hosted payment page operated by Viva. Your payment card details are entered on Viva's checkout environment and are not entered into the Guest Portal page itself.

Plus Hotels S.A. receives the payment result, order identifiers, supported transaction metadata, and reservation-linked references needed to reconcile the charge, update the reservation, issue fiscal or accounting records where required, and investigate disputes or duplicate transactions.

Who Receives the Data

International Processing

Some technology or payment providers may process data outside your country or outside the European Economic Area. Where this happens, Plus Hotels S.A. expects appropriate safeguards to be used under applicable data-protection law, such as adequacy decisions, contractual safeguards, or another lawful transfer mechanism.

How Long We Keep the Data

Your Rights

Subject to applicable law, you may have the right to request access, correction, deletion, restriction, objection, or portability of personal data processed about you. You may also object to processing based on legitimate interests in certain circumstances.

If you have a concern about how your data is handled, please contact Plus Hotels S.A. first so we can try to resolve it. You also have the right to lodge a complaint with the competent supervisory authority, including the Hellenic Data Protection Authority where applicable.

Contact

For privacy questions relating to the Guest Portal or your stay, contact Plus Hotels S.A. at accounts@plushotels.gr or call +30 22410 24015.

For information about portal cookies and related browser storage, please also read our Guest Portal Cookie Policy.

This Privacy Policy is written specifically for the Guest Portal as currently implemented. If the portal adds analytics, marketing technology, or new guest-facing functions, this page may be updated to reflect those changes.