Legal

Privacy Policy

How we protect your personal data on mainaloski.gr.

Protecting your personal data matters to us. Here you will find, in plain words, what happens to your data when you visit mainaloski.gr.

1. Who we are

The website mainaloski.gr belongs to Mainalo Ski Center (Ostrakina, Mainalo, 220 02, Arcadia, Greece), which is the controller of the personal data collected through the website.

For any matter concerning your data you can contact us:

This policy explains what data we collect, why, how long we keep it and what rights you have, under the General Data Protection Regulation (EU) 2016/679 (GDPR) and Greek Law 4624/2019.

2. What data we collect

Contact form. When you send us a message from the Contact page, we collect your full name, email, phone (if you fill it in), the subject and the text of your message. These details are sent by email to contact@mainaloski.gr. The website does not store them in a database.

Email and phone. If you contact us directly, we process the details you give us only in order to reply to you.

Technical data. Like every website, the server automatically logs technical details of each visit: IP address, date and time, the page requested and browser type. These are used only for the security and proper operation of the website, for example to block malicious traffic.

We do not use analytics tools, advertising cookies or tracking tools.

3. Purpose and legal basis

  • Replying to your messages: based on your consent (Art. 6(1)(a) GDPR), which you give by ticking the relevant box in the form, and in order to handle your request (Art. 6(1)(b)).
  • Security and operation of the website: based on our legitimate interest in protecting the website and its visitors (Art. 6(1)(f)).

We do not sell your data or share it with third parties for commercial purposes.

4. How long we keep your data

  • Contact messages: for as long as needed to complete our communication with you, and for no more than 2 years. They are then deleted.
  • Server and firewall logs: for a limited period, usually a few weeks, unless they are needed to investigate a security incident.

5. Cookies

The website only uses cookies that are strictly necessary for it to work:

  • pll_language: remembers the language you chose (Greek or English), for 1 year.
  • WordPress login cookies (wordpress_*, wp-settings-*): set only for the site administrators when they log in.

Strictly necessary cookies do not require consent. You can always delete or block them in your browser settings.

6. Third-party services

To show you maps, fonts and the mountain camera, some pages load content from third parties. When this happens, your browser connects to their servers and sends them at least your IP address:

  • Google Maps (maps and directions), Google Ireland Ltd. Google may use its own cookies. See the Google Privacy Policy.
  • Google Fonts (the website fonts), Google Ireland Ltd.
  • Meteocam (camera videos on the Live Feed page).
  • Cloudflare (content delivery network and attack protection), Cloudflare Inc. See the Cloudflare Privacy Policy.

The weather data on the website comes from the Norwegian Meteorological Institute (MET Norway). It is requested by our server, so none of your data is sent.

The Facebook and Instagram buttons, as well as the share buttons (WhatsApp, Viber, Facebook, email), are plain links. They send no data until you click them. Once you click, the privacy policy of each service applies.

The website is hosted on a server in Germany, inside the European Union. Where a provider transfers data outside the EU, the transfer is made with the safeguards of the GDPR, for example standard contractual clauses or the EU-US Data Privacy Framework.

7. Your rights

You have the right:

  • to know what data we hold about you (access)
  • to correct it
  • to ask for it to be deleted
  • to restrict its processing
  • to object to its processing
  • to receive it in a portable format
  • to withdraw your consent at any time. Withdrawal does not affect processing carried out before it

To exercise any of these rights, email contact@mainaloski.gr. We will reply within one month at the latest.

If you believe that the processing of your data breaches the law, you can lodge a complaint with the Greek Hellenic Data Protection Authority (1-3 Kifisias Ave., 115 23 Athens).

8. Security

The website runs over an encrypted connection (HTTPS) and is protected by a firewall. We carry out regular updates and backups. The website is not aimed at children under 15 and we do not knowingly collect data from children.

9. Changes to this policy

We may update this policy, for example if we add new services to the website. You will always find the current version on this page.

Last updated: 7 November 2026

Our ski center is located at Ostrakina on Mount Mainalo and is the closest to Athens. Operating since 1965, it is one of the three oldest ski centers in Greece.

Contact

Getting here

Get directions →
Scroll to Top