1. Who controls your data
D.S. SUNRISE VILLAS4RENT LTD is the controller of personal data described in this policy. Our contact address is 134, Arch. Makarios III Avenue, Office 201, 3021 Limassol, Cyprus. Privacy and booking enquiries may be sent to booking@villas4rent.eu.
This policy covers villas4rent.eu, direct booking enquiries, online check-in, guest support and the administration of stays at Sunrise Villas4Rent properties.
2. Data we collect
We may collect identity and contact data, booking dates, villa and guest details, payment and security-deposit status, travel or check-in information, messages, special requests, complaints and records relating to damage or house-rule incidents.
When you use the website, our hosting and security providers may process technical data such as IP address, device, browser, request time and security logs. We do not receive or store your full card number.
3. Why we use data and our legal bases
We process data to answer enquiries, take and manage bookings, collect payment, complete online check-in, provide access and guest support, protect the villas, handle deposits, resolve disputes and meet accounting, tax, registration and other legal obligations.
The legal bases are performance of a contract or steps requested before a contract, compliance with legal obligations, our legitimate interests in operating and protecting the accommodation, and consent where required for optional analytics.
4. Cookies and optional analytics
The website uses local storage for necessary preferences such as language, booking dates and your cookie choice. These functions do not require optional analytics.
GetYourGuide partner analytics is loaded only after you select “Allow cookies”. If you reject cookies, the website and activity links still work. You can reopen cookie settings from the footer at any time; rejecting after earlier consent prevents the analytics script from loading on future page views.
5. Who receives data
We share only the data needed with staff and contractors who operate or maintain the villas, Smoobu and connected booking services, our payment and security-deposit providers, website hosting and security providers, accountants and professional advisers, and public authorities when legally required.
GetYourGuide receives website analytics data only if you consent. A third party that you open from our website applies its own privacy policy to activity on its service.
6. International transfers
Some service providers may process data outside Cyprus or the European Economic Area. Where GDPR requires it, transfers are protected by an adequacy decision, approved contractual safeguards or another lawful transfer mechanism.
7. How long we keep data
Booking, payment and invoicing records are kept for the period required by applicable accounting and tax law. Guest communications and operational records are kept only as long as reasonably needed to manage the stay, respond to claims and protect our legal rights. Optional analytics and cookie preferences are controlled through your browser and the providers’ own retention settings.
When data is no longer needed, we delete or anonymise it unless a legal duty or an active claim requires continued retention.
8. Your rights
Subject to GDPR conditions, you may request access, correction, deletion, restriction, portability or object to processing based on legitimate interests. You may withdraw consent at any time without affecting processing that was lawful before withdrawal.
Send a request to booking@villas4rent.eu. We may need to verify your identity. You also have the right to complain to the Office of the Commissioner for Personal Data Protection in Cyprus at dataprotection.gov.cy.
9. Security and children
We use reasonable organisational and technical safeguards and limit access to people who need the data for their work. No internet service can guarantee absolute security.
A lead guest must be at least 18 years old. Information about children staying in a villa should be provided only by a parent, guardian or authorised adult and only when needed for the booking or a legal requirement.
10. Changes to this policy
We may update this policy when our services, providers or legal obligations change. The date at the top shows the latest revision. Material changes affecting an existing booking will be communicated when required.