Privacy Policy

Who we are

This website is operated by Future Hotels International SMPC, Building C, Monumental Plaza, Kifisias 44, Marousi Attikis 15125, Athens, Greece (“Future Hotels,” “we,” “us”). We are the data controller for the personal data described below, under the EU General Data Protection Regulation (GDPR) and applicable Greek law. Contact us at hello@futurehotels.eu.

What we collect, why, and on what legal basis

We only collect what's needed to run the parts of the site you actually use:

• Travellers’ Club sign-up — your full name, email address, phone (optional) and country, submitted via our sign-up form, to review your request and issue your membership, member number and card. Processed to take steps toward the membership contract you request (GDPR Art. 6(1)(b)). If you tick the marketing checkbox, we'll also email you about newly announced member hotels and offers — that's based on your separate, opt-in consent (Art. 6(1)(a)), which you can withdraw at any time (see “Your rights” below).
• Hotel membership applications — the details you submit in the application form (hotel name, location, your name, role, email, phone and message), sent to our team to review. Processed to respond to your enquiry and take steps toward a contract at your request (Art. 6(1)(b)), or our legitimate interest in evaluating applications (Art. 6(1)(f)).
• Hotelier portal accounts — your hotel name, contact name, email and a password, to create and manage your account and verify you as an approved member before granting access to the opportunities board. Processed to perform the membership contract (Art. 6(1)(b)).
• Embedded video and audio — the About page carries interviews and podcast episodes hosted by YouTube, SoundCloud and Spotify. They are click-to-load: the preview image is served from our own domain, and nothing is requested from those providers unless you press play. If you do, that provider receives your IP address and device information and may set its own cookies, as an independent controller under its own privacy policy. We embed YouTube through youtube-nocookie.com to limit this. No data reaches any of them if you don't press play.
• Google Analytics (consent only) — if, and only if, you accept it on the banner, we use Google Analytics to measure how the site is used. It sets its own cookies and Google acts as our processor, with IP anonymisation on and advertising and personalisation signals disabled. This is based on your consent (Art. 6(1)(a)), which you can withdraw at any time by clearing this site's data in your browser and choosing “Decline”. Declining means no Google script loads and no data leaves your browser. Google may process this data outside the EU/EEA under the safeguards described below.
• Site analytics — for every visitor, not just those who fill in a form, we use Vercel Web Analytics to see aggregate traffic patterns: page views, referring site, approximate country and device type. It’s cookieless and doesn’t identify you individually, based on our legitimate interest in understanding and improving the site (Art. 6(1)(f)). See our Cookie Policy for more detail.

We do not sell your personal data, do not use it for third-party advertising, and don't carry out automated decision-making that produces legal or similarly significant effects on you.

Where it's processed, and international transfers

Depending on which parts of the site you use, your data may be processed by infrastructure providers acting on our behalf, under data processing agreements: Vercel (hosting and analytics), Supabase (account and application data), Resend (transactional email, where used), and — only where you have accepted analytics cookies — Google (Google Analytics). Both the hotel membership application and the Travellers’ Club sign-up form are processed via Formspree.

Some of these providers may process data outside the EU/EEA, including in the United States. Where that happens, we rely on the safeguards recognised under GDPR Chapter V — the EU Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework — to make sure your data stays protected to the same standard.

Your rights

If you are in the EU/EEA, UK or a jurisdiction with similar protections, you have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent (e.g. marketing emails) at any time without affecting the lawfulness of processing before withdrawal. To exercise any of these rights, email hello@futurehotels.eu — we’ll respond within one month, as GDPR requires.

You also have the right to lodge a complaint with a supervisory authority. In Greece, that's the Hellenic Data Protection Authority, or the data protection authority in your own EU/EEA member state.

How long we keep it

We keep account and membership data for as long as your account or membership is active, or as needed to comply with our legal obligations. Travellers’ Club sign-ups that never confirm their email are of no use to us and are deleted periodically. You can ask us to delete your data at any time, subject to any legal retention requirements (for example, records we must keep for tax or accounting purposes).

Keeping your data secure

We use industry-standard safeguards — encrypted connections (HTTPS), access controls on our databases, and service-role credentials that never reach your browser — to protect the data described above. No method of transmission or storage is perfectly secure, but we work to keep your data safe and to limit access to those who need it to run the site.

Children

This site is not directed at children, and we don't knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we'll delete it.

Cookies

See our Cookie Policy for details on the cookies this site uses.

Changes to this policy

We may update this policy as the site evolves. Material changes will be reflected by updating the date above.