Last updated: 25/6/2026
1. Introduction
Welcome to Aspras Terra.
We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website, contact us, or make a booking for one of our experiences.
This website is operated by Aspras Terra, located in Ierapetra, Crete, Greece.
For any privacy-related questions, you can contact us at:
Email: contact@asprasterra.com
2. Information We Collect
We may collect and process the following types of personal data:
Booking Information
When you make a booking through our website, we may collect information such as:
- Full name
- Email address
- Phone number
- Booking details
- Selected experience
- Date and time of the booking
- Number of guests
- Any additional information you choose to provide during the booking process
Bookings are managed through Bókun, our third-party booking system.
Payment Information
Where payment is required, payment information is processed securely by the relevant payment provider connected to Bókun.
We do not store your full credit card or payment card details directly on our website.
Contact Information
If you contact us by email, phone, contact form, or social media, we may collect the information you provide in order to respond to your enquiry.
This may include your name, email address, phone number, message content, and any other information you choose to share with us.
Technical Information
When you visit our website, some basic technical information may be processed automatically for security and website functionality purposes, such as:
- IP address
- Browser type
- Device type
- Server logs
- Date and time of access
This information is used only for website security, maintenance, and technical operation.
3. Cookies and Tracking Technologies
Our website does not use analytics, advertising, remarketing, or behavioural tracking cookies.
We do not currently use:
- Google Analytics
- Google Tag Manager
- Google Ads conversion tracking
- Meta/Facebook Pixel
- TikTok Pixel
- Remarketing or behavioural advertising technologies
We may use only strictly necessary cookies or similar technologies that are required for the proper operation, security, and basic functionality of the website.
These may include cookies or technical storage needed for:
- Website security
- Booking functionality
- Form functionality
- Server performance
- User-requested services
Strictly necessary cookies do not require prior consent because they are needed to provide the service requested by the user.
If we introduce analytics, advertising, remarketing, or other non-essential tracking technologies in the future, we will update this Privacy Policy and request user consent where required.
4. Booking System: Bókun
We use Bókun as our third-party booking system to manage online reservations, availability, customer information related to bookings, and booking communications.
When you make a booking through our website, the personal data you provide during the booking process may be processed by Bókun and/or its connected service providers for the purpose of completing and managing your reservation.
Bókun may process information such as your name, email address, phone number, booking details, selected experience, date and time of booking, number of guests, and any other information you provide during the booking process.
We do not use Bókun for advertising, remarketing, Google Analytics, Google Tag Manager, Google Ads conversion tracking, or Facebook Pixel tracking.
Bókun may use strictly necessary cookies or similar technologies that are required for the booking system to function properly and securely.
5. How We Use Your Data
We use your personal data for the following purposes:
- To manage and process bookings
- To communicate with you about your booking
- To respond to your enquiries
- To provide information about our experiences and services
- To process payments where applicable
- To comply with legal, tax, and accounting obligations
- To protect the security and proper operation of our website
- To manage customer service and support
We do not sell or rent your personal data.
6. Legal Basis for Processing
Under the General Data Protection Regulation (GDPR), we process your personal data based on one or more of the following legal bases:
Performance of a Contract
We process your data when it is necessary to manage your booking or provide the service you requested.
Legal Obligation
We may process and retain certain data where required by law, including tax, accounting, or legal compliance obligations.
Legitimate Interest
We may process limited data for legitimate business purposes, such as website security, customer service, and responding to enquiries.
Consent
Where consent is legally required, such as for marketing communications or non-essential tracking technologies, we will ask for your consent before processing your data for that purpose.
7. Data Retention
We keep your personal data only for as long as necessary for the purposes described in this Privacy Policy.
Booking and transaction records may be retained for the period required by applicable tax, accounting, and legal obligations.
Contact enquiries are retained only for as long as necessary to respond to your request and manage any follow-up communication.
When your personal data is no longer needed, we will delete it or anonymise it where appropriate.
8. Data Sharing and Third Parties
We may share personal data only where necessary with trusted third-party service providers that help us operate our website and provide our services.
These may include:
- Bókun, for booking management
- Payment providers, for secure payment processing
- Website hosting providers
- Email or communication service providers
- Legal, accounting, or tax advisers where required
We do not sell your personal data to third parties.
We do not share your data with advertising platforms for remarketing or behavioural advertising.
9. International Data Transfers
Some of our third-party service providers may process personal data outside the European Economic Area (EEA).
Where this happens, we take appropriate steps to ensure that your personal data is protected in accordance with applicable data protection laws, including the use of appropriate safeguards where required.
10. Data Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, alteration, or disclosure.
Our website uses SSL encryption to help protect data transmitted through the website.
However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.
11. Your Rights Under GDPR
If you are located in the European Union or European Economic Area, you have the following rights regarding your personal data:
- The right to access the personal data we hold about you
- The right to request correction of inaccurate or incomplete data
- The right to request deletion of your personal data
- The right to request restriction of processing
- The right to object to certain types of processing
- The right to data portability
- The right to withdraw consent where processing is based on consent
To exercise your rights, please contact us at:
We may need to verify your identity before responding to your request.
You also have the right to lodge a complaint with your local data protection authority. In Greece, this is the Hellenic Data Protection Authority.
12. Marketing Communications
We do not currently send marketing emails or newsletters unless you have specifically requested or consented to receive them.
If we introduce marketing emails in the future, you will be able to unsubscribe at any time.
13. External Links and Social Media
Our website may include links to third-party websites or platforms, such as Facebook, Instagram, TikTok, YouTube, or Bókun.
When you click these links, you may leave our website. These third-party websites have their own privacy policies and cookie practices.
We are not responsible for the privacy practices, content, or policies of third-party websites.
14. Children’s Privacy
Our services are not directed at children under the age of 16.
If a booking includes children, the booking must be made by a parent, guardian, or responsible adult.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our website, services, legal requirements, or data processing practices.
Any updates will be published on this page with a revised “Last updated” date.
16. Contact Us
If you have any questions about this Privacy Policy or how we handle your personal data, you can contact us at:
Aspras Terra
Ierapetra, Crete, Greece
Email: contact@asprasterra.com