Privacy
Policy.

Who We Are

NOMAS Property Management is a professional short-term rental management company based in Corfu, Greece. This Privacy Policy explains how we collect, use, store, and protect your personal data in connection with our website, services, and any other interactions you have with us.

The Legal Framework

We operate in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Greek national legislation. The GDPR establishes the conditions under which personal data may be processed and protects the rights of natural persons with respect to that data.

By using our website or services, you acknowledge that you have read and understood this Privacy Policy. By providing your data, you confirm that you are 16 years of age or older. If you are under 16, please do not submit personal information without the consent of a parent or legal guardian.

What Personal Data We Collect

Non-personal information

Technical and aggregated data that does not identify you individually. This includes browser type, operating system, screen resolution, pages visited, session duration, and similar usage data collected automatically when you interact with our website.

Personal information

Information that identifies you or could reasonably be used to do so. This includes your name, email address, postal address, telephone number, VAT number, and any other information you provide to us when using our services, completing enquiry forms, or contacting us directly.

Why We Collect It — Lawful Basis

We process your personal data only when we have a lawful basis to do so:

• Contractual necessity — To provide the property management services you have engaged us for and to fulfil our obligations under our management agreement.
• Legitimate interests — To manage and improve our services, respond to enquiries, and protect the legal and commercial interests of both NOMAS and our clients.
• Legal obligation — To comply with applicable regulations, including tax reporting obligations and the DAC7 directive of the European Union.
• Consent — Where you have explicitly agreed to receive marketing communications. You may withdraw consent at any time.

How We Use Your Data

We use the personal data we collect to:

• Provide and manage the services we have agreed to deliver.
• Communicate with you about your property, bookings, performance reports, and any changes to our services.
• Send you invoices, billing information, and financial documentation related to your management agreement.
• Respond to enquiries and provide client support.
• Comply with our legal and regulatory obligations, including DAC7 reporting.
• Detect and prevent fraud or unlawful activity.
• Improve and develop our services over time.

We will never sell your personal data to third parties.

How We Collect Data

We collect personal data in three ways: directly from you when you complete a form, make an enquiry, or enter into an agreement with us; automatically when you use our website through cookies and similar technologies; and occasionally from third-party sources where permitted by law.

Cookies

Our website uses cookies to improve your browsing experience and to analyse site usage. You may control cookie settings through your browser. Note that disabling certain cookies may affect the functionality of the site.

Data Retention

We retain your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by law. Client data related to management agreements is retained for a minimum of five years following the end of the agreement, in accordance with Greek tax law. Marketing data is retained until you withdraw consent or request deletion.

Your Rights

Under the GDPR, you have the following rights with respect to your personal data:

• Right of access — You may request confirmation of whether we hold personal data about you and receive a copy.
• Right to rectification — You may request correction of any inaccurate or incomplete data we hold.
• Right to erasure — You may request deletion of your personal data in certain circumstances, subject to legal limitations.
• Right to restriction — You may request that we limit the processing of your data in certain circumstances.
• Right to data portability — You may request your personal data in a structured, machine-readable format.
• Right to object — You may object to the processing of your personal data where we rely on legitimate interests.

To exercise any of these rights, please contact us at info@nomas.gr. We will respond within 30 days. We may ask you to verify your identity before fulfilling a request.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA) at www.dpa.gr.

Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. No system is entirely without risk, and we cannot guarantee absolute security. In the event of a data breach likely to affect your rights, we will notify you as soon as practicable.

Marketing Communications

We may send you information about our services, market insights, and news we believe may be of interest to you. You may opt out of marketing communications at any time by contacting us at info@nomas.gr or by following the unsubscribe link in any email we send.

Opting out of marketing does not affect service-related communications, which we must send you as part of our management agreement.

Changes to This Policy

We may update this Privacy Policy from time to time. The most current version will always be available on our website. We will notify active clients of material changes by email.

Contact