Skip to content

🛡️ GDPR – Data Protection Notice

Nostos Mykonos Suites


1. GDPR Compliance Statement

Nostos Mykonos Suites processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Greek and European data protection laws.


2. Scope of This Notice

This GDPR Notice applies to all personal data collected through:

  • Our website

  • Contact and inquiry forms

  • Email communication


3. Categories of Personal Data

We may process the following categories of personal data:

  • Identification data (name, surname)

  • Contact details (email address, phone number)

  • Communication content (messages sent via forms or email)


4. Lawful Grounds for Processing

Personal data is processed based on one or more of the following legal grounds:

  • Consent provided by the data subject

  • Legitimate interest in responding to inquiries and managing communication

  • Legal obligations where applicable


5. Data Storage and Protection

Personal data is stored securely and accessed only by authorized personnel.
Appropriate technical and organizational measures are in place to prevent unauthorized access or disclosure.


6. Data Subject Rights

In accordance with GDPR, you have the right to:

  • Be informed about how your data is processed

  • Access your personal data

  • Rectify inaccurate or incomplete data

  • Request erasure (“right to be forgotten”)

  • Restrict processing

  • Object to processing

  • Lodge a complaint with a supervisory authority


7. Exercising Your Rights

You may exercise your GDPR rights by contacting us at:

Email: info@nostosmykonossuites.com

We will respond to your request within the timeframe required by law.


8. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the relevant data protection authority in your country of residence.


9. Updates to This GDPR Notice

This GDPR Notice may be updated periodically to reflect changes in legislation or our data processing practices.