PRIVACY POLICY

Last updated: 12 August 2026

This Privacy Policy explains how Naxos Intermediate collects, uses, stores and protects personal data when you visit naxosintermediate.com, contact us or use our travel, accommodation and property-management services.

1. Data Controller

The data controller responsible for your personal data is:

OIKONOMOU D. – NIGRETTI F. G.P.
Trading as Naxos Intermediate
Registered Office: Naxos, Greece
VAT Number: 802799949
GEMI Number: 183006238000
Email: info@naxosintermediate.com
Telephone: +30 22850 23190

2. Personal Data We May Collect

Depending on how you interact with us, we may collect the following information.

Contact Information

When you contact us through the Website, email, telephone, WhatsApp, Viber or another communication method, we may collect:

  • your name;

  • email address;

  • telephone number;

  • country or telephone prefix;

  • the content of your message; and

  • any other information you voluntarily provide.

Booking and Travel Information

When you request or arrange accommodation or another travel-related service, we may collect information necessary to process your request, such as:

  • guest names;

  • contact information;

  • arrival and departure dates;

  • number of guests;

  • accommodation preferences;

  • transportation information;

  • requested activities or services; and

  • other information necessary to organise the requested service.

Where information concerning another person is provided to us, you should ensure that you are authorised to provide that information.

Property-Management Information

Where you use our property-management services, we may process information necessary to administer the relevant property and services, including owner, tenant, guest, supplier and property-related contact information.

Account and Security Information

Where Website account, login or verification functionality is available, we may process information such as:

  • username;

  • email address;

  • login information;

  • verification information; and

  • security or authentication records.

Technical and Usage Information

When you visit the Website, certain technical information may be collected automatically, including:

  • IP address;

  • browser type;

  • device type;

  • operating system;

  • date and time of access;

  • pages visited;

  • technical logs; and

  • cookie or similar technology identifiers.

Further information is provided in our Cookie Policy.

Newsletter Information

If you subscribe to a newsletter or marketing communications, we may process your name and/or email address and information relating to your subscription preferences.

3. Why We Process Personal Data

We may process your personal data for the following purposes:

  • responding to enquiries;

  • providing quotations and availability information;

  • processing accommodation and service requests;

  • organising bookings and reservations;

  • communicating with accommodation owners and service providers;

  • providing travel-planning services;

  • providing property-management services;

  • managing customer relationships;

  • providing customer support;

  • maintaining Website functionality and security;

  • preventing fraud and abuse;

  • complying with accounting, tax and other legal obligations;

  • establishing, exercising or defending legal claims;

  • improving our Website and services; and

  • sending marketing communications where legally permitted.

4. Legal Bases for Processing

Under the General Data Protection Regulation (GDPR), we rely on one or more of the following legal bases:

Performance of a Contract or Pre-Contractual Measures

We may process personal data where necessary to respond to a booking request, provide a quotation, organise a service or perform an agreement with you.

Consent

We may rely on your consent for certain activities, including optional cookies, certain marketing communications or other processing where consent is legally required.

You may withdraw your consent at any time.

Legal Obligation

We may process information where necessary to comply with obligations imposed by Greek or European Union law, including accounting, taxation and regulatory requirements.

Legitimate Interests

We may process information where necessary for our legitimate business interests, provided that those interests are not overridden by your rights and freedoms.

Examples may include Website security, fraud prevention, customer-service administration and the establishment or defence of legal claims.

5. Sharing Personal Data

We do not sell your personal data.

Where necessary, information may be shared with third parties including:

  • hotels, villas, accommodation owners and property managers;

  • transport and transfer operators;

  • vehicle rental providers;

  • ferry companies;

  • cruise and sailing providers;

  • tour and activity providers;

  • event, catering or hospitality providers;

  • IT, website-hosting, email and security providers;

  • payment and financial-service providers where applicable;

  • accountants, professional advisers and legal advisers; and

  • government, regulatory, judicial or law-enforcement authorities where legally required.

Only information reasonably necessary for the relevant purpose will be shared.

Third-party travel or accommodation providers may act as separate data controllers for personal data that they process in connection with their services. Their own privacy policies may therefore also apply.

6. International Data Transfers

Some technology or service providers may process information outside Greece or outside the European Economic Area.

Where personal data is transferred internationally, we take appropriate measures as required by applicable data-protection law, such as relying on an adequacy decision, approved safeguards or the European Commission’s Standard Contractual Clauses where appropriate.

7. Data Retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and to comply with applicable legal, accounting, contractual and regulatory obligations.

The applicable retention period may vary depending on:

  • the type of information;

  • the nature of the service;

  • whether a booking or contractual relationship was established;

  • legal and accounting requirements; and

  • whether information is required for the establishment or defence of legal claims.

When personal data is no longer required, it will be deleted, anonymised or otherwise securely disposed of where reasonably possible.

8. Marketing Communications

Where required by law, we will send electronic marketing communications only with the appropriate consent.

You may unsubscribe from marketing communications at any time by using an unsubscribe link where available or by contacting us at:

info@naxosintermediate.com

Withdrawal from marketing communications does not prevent us from sending essential communications relating to an enquiry, booking, contract or service.

9. Cookies

Our Website may use cookies and similar technologies for Website functionality, preferences, security, analytics and other purposes.

Cookies that are not strictly necessary will be used only in accordance with applicable consent requirements.

Further information can be found in our Cookie Policy.

10. Third-Party Services and Websites

Our Website may include or link to third-party services, such as maps, social-media platforms, security/CAPTCHA services, booking providers or tourism-service providers.

These third parties may process personal data in accordance with their own privacy policies.

We encourage users to review the privacy information provided by any third-party website or service they use.

11. Security

We take appropriate technical and organisational measures intended to protect personal data against accidental or unlawful loss, alteration, disclosure, access, destruction or misuse.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

12. Your GDPR Rights

Subject to the conditions and limitations provided by applicable law, you may have the right to:

  • Access the personal data we hold about you;

  • Rectify inaccurate or incomplete information;

  • Request erasure of your personal data;

  • Request restriction of processing;

  • Object to certain processing;

  • Receive your data in a portable format where applicable;

  • Withdraw consent at any time where processing is based on consent; and

  • Lodge a complaint with the competent data-protection supervisory authority.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

To exercise your rights, contact:

info@naxosintermediate.com

We may request reasonable information to verify your identity before processing a data-protection request.

13. Complaints

You also have the right to lodge a complaint with the:

Hellenic Data Protection Authority (HDPA)

You may contact or visit the official website of the Hellenic Data Protection Authority for information concerning complaints and data-protection rights.

14. Children’s Personal Data

Our services are generally arranged by adults.

Where information concerning children is necessary for an accommodation or travel booking, such information should be provided by a parent, guardian or other person legally authorised to provide it.

We do not intentionally request unnecessary personal information from children.

15. Changes to This Privacy Policy

We may update this Privacy Policy when necessary to reflect changes in our services, Website technology or legal requirements.

The most recent version will be published on this page together with its revision date.

16. Contact Us

For any question about this Privacy Policy or the processing of your personal data, contact:

Naxos Intermediate
OIKONOMOU D. – NIGRETTI F. G.P.
Naxos, Greece
Email: info@naxosintermediate.com
Telephone: +30 22850 23190

  • enEnglish