Policy on the Protection

of Personal Data

Last updated: [October 2026]

At Asty Living we respect privacy and protect the personal data of the visitors, customers, partners and users of our services.
This Personal Data Protection Policy explains which personal data we may collect and process through the website astyliving.com, for what purposes we use them, in which cases we may transfer them to third parties, and what your rights are.
Personal data are processed in accordance with applicable Greek and European legislation, in particular the General Data Protection Regulation (EU) 2016/679 – GDPR, as well as the applicable framework for the protection of privacy in electronic communications.
1. Data Controller

The data controller of the personal data collected and processed through the website astyliving.com and the related services is:

ATHENEAN AGENCY Μονοπρόσωπη Ι.Κ.Ε. (Single-Member Private Company)
Tax ID No. (VAT No.): 801074603
General Commercial Registry (G.E.MI.) No.: 148481901008
Registered office: 17 Al. Panagouli Street, 16675 Glyfada, Attica
Telephone: +30 210 894 8394
Website: astyliving.com
In this Policy the company is referred to as “Asty Living”, the “Company”, “we” or “us”.
Asty Living is the data controller for the personal data collected through the contact forms, the expressions of interest, the booking system, the transactions carried out through the website, the newsletter/CRM services and, where applicable, through analytics, statistical measurement and digital advertising tools.
2. What personal data we collect
The data we collect depend on the way you use the website and on the service you request.
The following may be collected:
  • full name
  • e-mail address
  • telephone number
  • booking details
  • arrival and departure dates
  • number of guests or other details necessary for the booking
  • information you submit through contact forms or expressions of interest
  • details required to complete or manage a transaction
  • details relating to the services you request or use
  • information about your communications and interactions with us
  • technical data about your device and your visit to the website
  • data arising from the use of cookies and similar technologies, where the required consent has been given.
We do not ask for more personal data than are necessary for the respective purpose of processing.
3. Contact forms and expressions of interest
When you use the contact forms or other forms of the website, we may collect the details you fill in, such as:
  • full name
  • email
  • telephone
  • subject or content of the message
  • details about the property or service you are interested in
  • any other information you choose to provide to us.
These data are used to respond to your request, to communicate with you and to provide the relevant information or services.
The data provided through a form should be limited to the details necessary to handle the specific request.
4. Bookings and short-term stay services
The website uses a booking system to manage requests and bookings for short-term stays.
When you make or request a booking, details such as the following may be collected and processed:
  • full name
  • contact details
  • arrival and departure dates
  • number of guests
  • details of the accommodation
  • details relating to the booking
  • information necessary to manage changes or cancellations
  • other information necessary to provide the service.
These data are used for:
  • creating and managing the booking
  • sending confirmations
  • communicating about the booking
  • managing changes or cancellations
  • providing the accommodation service
  • fulfilling contractual and legal obligations.
The processing of the data necessary to make and perform a booking is based, as the case may be, on the performance of a contract or on taking steps at your request prior to entering into a contract.
5. Online payments
A payment gateway / online payment provider service is used to complete online transactions through the website.
When a payment is made, the data necessary to process and complete the transaction may be transferred to the relevant provider.
Card details or other sensitive payment details are processed in accordance with the procedure and technical infrastructure of the respective payment provider. Where the payment is made directly in the provider’s secure environment, payment details are not stored by Asty Living, unless this is expressly provided for by the relevant service and procedure.
The payment provider may process your data in accordance with its own personal data protection policy and its own terms of use.
6. Newsletter and CRM
If you choose to subscribe to the newsletter or to receive updates from Asty Living, we may collect and process:
  • name
  • email
  • contact details
  • communication preferences
  • details relating to your subscription
  • information about your interaction with the communications sent, where this function is supported by the system used.
These data are used to send updates, offers, information about services or other communications you have chosen to receive.
Where sending marketing communications requires consent, such consent is obtained before the relevant processing begins.
You may withdraw your consent or unsubscribe from the relevant communications at any time, using the unsubscribe mechanism included in the messages or by contacting us.
7. Google Analytics
The website may use Google Analytics to collect statistical data on the use of the website, such as, by way of example:
  • visits and page views
  • interactions with the website
  • type of device and browser
  • general technical details
  • details about the performance and use of the website.
Google Analytics is used to analyse traffic and to improve the operation, content and services of the website.
Where the use of the relevant cookies or trackers requires consent, the relevant tools are activated only after the required consent has been given through the cookie management mechanism.
8. Google Tag Manager
The website may use Google Tag Manager for the technical management and activation of tags and related tools used on the website.
Google Tag Manager is a tag management mechanism and does not in itself mean that all the tools it manages are activated without prior consent.
Tags and services that require consent are activated in accordance with the choices you make through the cookie management mechanism.
9. Meta Pixel
The website may use the Meta Pixel, a technology of Meta Platforms, to measure users’ actions and interactions with the website and, where applicable, to measure and optimise advertising activities.
Depending on the technical implementation, information may be collected about:
  • visits to and interaction with pages
  • actions taken on the website
  • technical details of the device or browser
  • information linked to advertising or measurement functions.
The relevant technologies are activated only in accordance with the consent choices you make, where such consent is required by applicable law.
For more information on the processing of data by Meta, you may consult Meta’s relevant personal data protection policy.
10. Google Search Console
Asty Living may use Google Search Console to monitor the presence and technical performance of the website in Google Search results.
Search Console is used mainly for purposes of technical monitoring, indexing, detecting technical problems and improving the website’s presence in search engines.
The use of Search Console is not equivalent to the use of analytics tools or advertising trackers placed on the visitor’s terminal equipment.
11. Cookies and similar technologies
The website uses cookies and similar technologies for its proper operation, for managing your choices and, where permitted and the required consent has been given, for statistical, analytical and advertising purposes.
Cookies may originate from Asty Living or from third-party providers of the services used on the website.
By way of example, the relevant technologies may be linked to:
  • the operation and security of the website
  • the booking system
  • the management of cookie choices
  • Google Analytics
  • Google Tag Manager
  • the Meta Pixel
  • other services that may be activated on the website.
Strictly necessary cookies
Strictly necessary cookies are used only when they are technically necessary for the operation of the website, security, maintaining a session, the booking function or another service expressly requested by the user.
No consent is required for these cookies where they genuinely fall within the category of technically necessary cookies.
Optional cookies
Statistical analysis, measurement, marketing or advertising cookies are used only in accordance with your choices and applicable law.
The user must be able to accept or reject optional cookies and to change their choices at a later time.
For detailed information on the cookies used on the website, their providers, their purposes and their storage period, please refer to the separate Cookie Policy.
12. Cookie consent management
The website uses a cookie consent management mechanism (cookie-consent mechanism), through which you can choose which categories of optional cookies you wish to allow.
Non-essential cookies should not be activated before the required consent has been given.
You may also modify or withdraw your consent at a later time through the available cookie preference management mechanism.
Asty Living applies the consent procedure in accordance with the requirements of applicable law on cookies and electronic communications. The Hellenic Data Protection Authority (HDPA) points out that consent to non-essential cookies must take the form of a clear affirmative action and that the user must be able to reject or withdraw their consent with equal ease.
13. Purposes of processing
Your personal data may be processed for the following purposes:
a. Handling of requests and communications
To respond to questions, expressions of interest and communications you submit.
Legal basis:
Taking steps at your request prior to entering into a contract, the performance of a contract or, where applicable, the legitimate interest of the Company.
b. Booking management
To create, confirm, manage and perform bookings and to provide the related services.
Legal basis:
Performance of a contract or taking steps at your request prior to entering into a contract.
c. Payment processing
To complete and manage payments and transactions.
Legal basis:
Performance of a contract and compliance with legal obligations.
d. Compliance with legal obligations
To fulfil obligations imposed by tax, accounting or other applicable legislation, as well as by competent public or judicial authorities.
Legal basis:
Compliance with a legal obligation.
e. Security and operation of the website
To ensure the security of information systems, address technical problems, prevent malicious actions and ensure the smooth operation of the website.
Legal basis:
The legitimate interest of the Company, where permitted.
f. Statistical analysis and improvement
To analyse the use of the website, evaluate performance and improve the content and services.
Legal basis:
Consent, where required for the use of the relevant cookies or trackers, or another legal basis where applicable.
g. Marketing and advertising
To measure and, where applicable, optimise advertising activities and to display relevant content.
Legal basis:
Consent, where required by applicable law.
h. Newsletter and informational communications
To send updates, newsletters and information about the services, offers or news of Asty Living.
Legal basis:
Consent or another legal basis where permitted by applicable law.
i. Exercise and protection of legal rights
To establish, exercise or defend legal claims and to protect the rights and legitimate interests of the Company.
Legal basis:
The legitimate interest of the Company or another legal basis provided for by law.
14. Legal bases for processing
Asty Living processes personal data only where there is an appropriate legal basis, such as:
  • your consent
  • the need to perform a contract or to take steps prior to entering into a contract
  • compliance with a legal obligation
  • the legitimate interest of Asty Living, where permitted by applicable law and not overridden by your rights and freedoms
  • another legal basis provided for by the GDPR or applicable legislation.
The specific legal basis depends on the purpose for which each processing operation is carried out.
15. With whom we may share personal data
In the context of operating the website and providing our services, personal data may be transferred, where necessary and lawful, to:
  • hosting and technical support providers
  • booking system providers
  • online payment providers
  • e-mail and newsletter service providers
  • CRM providers
  • analytics service providers
  • advertising and marketing service providers
  • technical and IT service providers
  • partners involved in providing the services you request
  • accountants, legal advisers or other professionals, where required
  • public authorities, courts or other competent bodies, where there is a relevant legal obligation.
Third-party providers that process data on behalf of Asty Living are selected and used in accordance with the requirements of applicable law and, where required, on the basis of appropriate contractual arrangements.
16. Third-party services
Certain functions of the website are provided using third-party services, such as:
  • online payment services
  • Google Analytics
  • Google Tag Manager
  • Google Search Console
  • Meta
  • newsletter/CRM
  • hosting services
  • booking services
These providers may process personal data in accordance with their own data protection policies and their contractual obligations.
The use of third-party services may also involve the transfer of data outside the European Economic Area, where this is provided for by the respective service.
17. Transfers outside the European Economic Area
If any of the providers used by Asty Living processes personal data outside the European Economic Area, the relevant transfers are carried out in accordance with the requirements of the GDPR.
Where required, appropriate safeguards are applied, such as an adequacy decision of the European Commission or the appropriate contractual or other safeguards provided for by the GDPR.
18. Retention of personal data
Asty Living retains personal data only for as long as is necessary for the purpose for which they were collected or for as long as required by applicable law.
The retention period depends, among other things, on:
  • the nature of the data
  • the purpose of the processing
  • the existence of an active contractual relationship
  • legal retention obligations
  • the need to establish, exercise or defend legal claims.
When the data are no longer necessary, they are erased or anonymised, where this is technically and legally feasible.
19. Security of personal data
Asty Living takes appropriate technical and organisational measures to protect personal data against:
  • loss
  • destruction
  • alteration
  • unauthorised access
  • unauthorised disclosure
  • unlawful processing.
Despite the adoption of appropriate security measures, no transmission or storage of data over the internet can be considered completely secure.
20. Your rights
Subject to the conditions and limitations laid down by applicable law, you have the right:
  • of access to your personal data
  • to rectification of inaccurate or incomplete data
  • to erasure of your personal data
  • to restriction of processing
  • to data portability
  • to object to processing
  • to withdraw your consent, where the processing is based on consent.
The withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.
The above rights are not absolute and may be subject to legal restrictions or exceptions.
21. Exercising your rights

To exercise your rights, you may contact us:

ATHENEAN AGENCY Μονοπρόσωπη Ι.Κ.Ε.
17 Al. Panagouli Street
16675 Glyfada, Attica
Tel.: +30 210 894 8394
E-mail for personal data matters:
[to be completed]
In your request, you are advised to state clearly the right you wish to exercise.
Where required for the protection of personal data, we may ask for additional information to confirm your identity.
22. Right to lodge a complaint
If you consider that the processing of your personal data infringes applicable law, you may first contact us so that we can look into the matter.
You also have the right to lodge a complaint with the competent supervisory authority:
Hellenic Data Protection Authority (HDPA)
Website: www.dpa.gr
The HDPA is the competent Greek supervisory authority for the protection of personal data.
23. Links to third-party websites
The website may contain links to third-party websites or services.
Asty Living is not responsible for the personal data protection practices, security or content of websites under the control of third parties.
We recommend that you review the relevant personal data protection policy of each third-party website before providing any personal data.
24. Social networks
Asty Living may have a presence on, or links to, social networking services.
Your interaction with social networking services is governed by the terms and personal data protection policies of the respective providers.
Where third-party functions or content using cookies or trackers are embedded in the website, these are handled in accordance with the consent choices provided through the cookie management mechanism.
25. Personal data of minors
The website and services of Asty Living are not specifically directed at children.
Where processing is based on consent and applicable law requires parental or other legal authorisation on account of age, the relevant consent must be given in accordance with the applicable legal requirements.
If we find that data of a minor have been collected in a manner not permitted by applicable law, we will take the appropriate measures.
26. Amendments to the Policy
Asty Living may amend this Policy where required due to changes:
  • in the services it provides
  • in the technologies it uses
  • in its partners or service providers
  • in the applicable legislative framework.
The most recent version of the Policy is published on the official website of Asty Living and states the date of its last update.
We recommend that you check this Policy periodically for any amendments.
27. Contact

For any matter relating to the protection and processing of your personal data, you may contact:

ATHENEAN AGENCY Μονοπρόσωπη Ι.Κ.Ε.
17 Al. Panagouli Street
16675 Glyfada, Attica
Tel.: +30 210 894 8394
Website: astyliving.com
E-mail for personal data matters:
info@astyliving.com