Privacy Policy

AERIS by ENMA operates this website and is the data controller for the personal data described below.

• Operator: [legal entity name — to be provided] (trading as AERIS by ENMA)
• Registered address: [registered address — to be provided]
• Company / registry number: [company number — to be provided]
• VAT number: [VAT number — to be provided]
• Accommodation registry number (ΜΗΤΕ / ΑΜΑ): [registry number — to be provided]
• Contact: administration@aerisbyenma.com

• Booking enquiries: your name, email address, optional phone number, requested arrival and departure dates, number of guests and any message you write.
• Contact messages: your name, email address, optional phone number and your message.
• Marketing consent: if you tick the optional marketing box, we store that you consented and the date and source of that consent.
• Technical data: standard server logs kept for security and to keep the site running. We do not run advertising or third-party tracking.

• To answer your enquiry and to prepare, agree and honour a stay — necessary for the performance of a contract, or for taking steps at your request before one.
• To keep records required of accommodation providers, and to meet tax and accounting obligations — legal obligation.
• To send occasional news or offers about AERIS — only with your separate, freely given consent, which you can withdraw at any time.
• To secure the website and prevent abuse — legitimate interests.

Marketing consent is a separate, unticked checkbox on our forms. Accepting our terms never signs you up to marketing. Every promotional email carries an unsubscribe link, and you can withdraw consent at any time from our unsubscribe page or by writing to us. Withdrawing marketing consent does not affect an existing booking.

We do not sell personal data. We share it only with the service providers needed to run the site and our bookings — website and database hosting, and email delivery — and with public authorities where the law requires it. Where a booking reaches us through a third-party platform, that platform handles your data under its own policy.

Enquiries that do not become bookings are kept only as long as needed to follow up. Booking and payment records are kept for the retention period required by Greek tax and accommodation law. Marketing contacts are kept until you unsubscribe.

Under the GDPR you can ask us for a copy of your data, for corrections, for deletion, for restriction of processing, to object to processing, and to receive your data in a portable form. Write to administration@aerisbyenma.com and we will respond within one month. You may also complain to the Hellenic Data Protection Authority (HDPA), dpa.gr.

Enquiry data is stored in an access-controlled database. Access is limited to the owner and authorised staff accounts, enforced at the database level, and no personal data from bookings or enquiries is exposed to the public website.