Privacy policy

Protecting your personal data matters to us. This policy explains what data we collect when you visit nexuslodges.com, make a booking or contact us, why we collect it, and what rights you have under the General Data Protection Regulation (EU) 2016/679 (GDPR) and Greek Law 4624/2019.

1. Data controller

ΚΕΒΕΖΙΤΙΔΗΣ ΠΡΟΔΡΟΜΟΣ ΗΛΙΑΣ (KEVEZITIDIS PRODROMOS ILIAS), trading as “Nexus Lodges” (short-term rental services), VAT no. 165829625, Ampelokipoi Tax Office, Ari Konstantinidi 31, Evosmos, Thessaloniki, Greece. Email: info@nexuslodges.com, tel. +30 694 584 4474.

2. What data we collect

• Booking details: full name, email, phone, country, dates of stay, number of guests, messages and special requests.
• Payment details: payments are processed by secure providers (Stripe via Lodgify). We do not store card numbers ourselves.
• Identification and tax details: where required by law (e.g. short-term rental declarations to the Greek tax authority AADE, issuing receipts), tax ID or passport/ID number.
• Contact form: name, email, phone, dates and your message.
• Browsing data: technical data (e.g. IP address, device type) and, only with your consent, data from the Meta Pixel. See our Cookie policy.

3. Purposes and legal basis

• Carrying out your booking and communicating about your stay: performance of a contract (Art. 6(1)(b) GDPR).
• Tax and other legal obligations (AADE, myDATA, Short-Term Rental Registry): compliance with a legal obligation (Art. 6(1)(c)).
• Replying to enquiries through the form: steps taken at your request before a contract (Art. 6(1)(b)) and your consent (Art. 6(1)(a)).
• Security and proper operation of the site: legitimate interest (Art. 6(1)(f)).
• Measuring ads with the Meta Pixel: only with your consent (Art. 6(1)(a)), which you can withdraw at any time.

4. Recipients

We share data only as needed, with providers that process data on our behalf:

• Lodgify (booking and property management system)
• Stripe (payment processing)
• Netlify (website hosting and security)
• Netlify (receiving contact form messages)
• Wrapp / e-invoicing provider (issuing receipts)
• Meta Platforms (only if you consent to marketing cookies)
• Elfsight (displaying reviews)
• Public authorities (e.g. AADE), where required by law

If you book through Airbnb or Booking.com, their privacy policies also apply.

5. Transfers outside the EU

Some providers (e.g. Stripe, Meta, Netlify) may process data outside the European Economic Area. In those cases, transfers are made with appropriate safeguards, such as the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.

6. How long we keep data

• Booking and receipt data: as long as tax law requires (as a rule up to 5 years from the end of the financial year, or as the law provides).
• Contact form messages: up to 2 years, unless they lead to a booking.
• Cookie data: as described in the Cookie policy.

7. Your rights

You have the right of access, rectification, erasure, restriction, portability, objection and to withdraw your consent, without affecting the lawfulness of processing before withdrawal. To exercise them, email us at info@nexuslodges.com. We will reply within one month.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (Kifisias 1-3, 115 23 Athens, www.dpa.gr).

8. Security

We take appropriate technical and organisational measures to protect your data, such as an encrypted connection (HTTPS) and restricted access.

9. Minors

Bookings are made only by adults. We do not knowingly collect data from minors through the site.

10. Changes

We may update this policy. The date of the last update is shown at the top of the page.