elenitzinakou.com · Last updated: 11 October 2026

This Privacy Policy explains how I, Eleni Tzinakou, collect and use personal data when you visit elenitzinakou.com, contact me, or work with me on property management, Airbnb set-up, property branding, home staging or interior styling. It also explains your rights and how to use them.

I process personal data in line with the EU General Data Protection Regulation (Regulation (EU) 2016/679, the “GDPR”) and Greek Law 4624/2019.

1. Who is responsible for your data

The controller of your personal data is:
Eleni Tzinakou
Doiranis 62, 17672, Kallithea, Greece
VAT number (ΑΦΜ): 156111380
Email: elenitzinakou@gmail.com
For any question about your data, write to me directly at the email above.

2. Summary

Here is an overview. Sections 3 to 8 explain each point in more detail.
You visit the website. Data: IP address, browser and device type, pages visited, date and time. Purpose: To show the website and keep it secure. Legal basis: Legitimate interests, Art. 6(1)(f).
You send an enquiry. Data: Name, email, phone, details about your property, your message. Purpose: To reply and prepare a proposal. Legal basis: Steps before a contract, Art. 6(1)(b); legitimate interests, Art. 6(1)(f).
You subscribe to my newsletter. Data: Email address, name (if given), subscription date, email opens and clicks. Purpose: To send you the newsletter you asked for. Legal basis: Consent, Art. 6(1)(a).
You become a client. Data: Identity and contact details, VAT number, bank details, property and financial records. Purpose: To deliver the service, pay you and keep records. Legal basis: Contract, Art. 6(1)(b); legal obligation, Art. 6(1)(c).
You stay at a home I manage. Data: Booking details, contact details, messages, passport number of Greek AFM. Purpose: To host your stay and protect the home. Legal basis: Contract, Art. 6(1)(b); legal obligation, Art. 6(1)(c); legitimate interests, Art. 6(1)(f).

3. What data I collect and why

a) When you visit the website
When you browse elenitzinakou.com, the website platform automatically records technical data: your IP address, browser and device type, the pages you visit, the referring page, and the date and time of your visit. This is needed to deliver the website to your device, to keep it secure and to fix errors. The legal basis is my legitimate interest in running a secure, working website (Art. 6(1)(f) GDPR).
Cookies and similar technologies are explained in section 7.

b) When you contact me
You can contact me by email or through the “Discuss a Project” form. I then process the data you choose to share, usually:

• your name, email address and phone number;
• details about your property, such as its area, type, size, current use and listing link;
• the content of your message and our correspondence.

I use this data to answer your enquiry, assess your property and prepare a proposal. The legal basis is taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR) and my legitimate interest in replying to messages I receive (Art. 6(1)(f) GDPR).

c) When you become a client
If you are a property owner and we work together, I process the data needed to deliver the agreed service, for example:

• identity and contact details, postal address and VAT number (ΑΦΜ);
• bank account details for owner payouts and payments;
• property details, such as address, short-term rental registration number (ΑΜΑ), ownership information, keys and access codes;
• financial records, such as bookings, revenue, costs, receipts, invoices and owner statements;
• our contract and communications, including photos and reports about the property.

The legal basis is the performance of our contract (Art. 6(1)(b) GDPR) and compliance with my legal obligations, especially tax, accounting and short-term rental rules (Art. 6(1)(c) GDPR).

d) Suppliers and partners
If you work with me as a supplier or partner (for example cleaning, maintenance, photography or furnishing), I process your name, business details, contact details, bank details and invoices to manage our cooperation and meet my accounting obligations (Art. 6(1)(b) and 6(1)(c) GDPR).

e) Guests at homes I manage
If you stay at a property I manage, I receive your booking details from the booking platform (for example Airbnb) or from you directly: name, contact details, booking dates, number of guests, messages and payment status. Where the law requires it, I may also process passport numbers and Greek AFMs. If an incident happens, I may keep notes, photos and reports about it.
I use this data to prepare and host your stay, to communicate with you, to protect the property and other residents, and to comply with legal obligations. The legal bases are the contract for your stay (Art. 6(1)(b) GDPR), legal obligations (Art. 6(1)(c) GDPR) and my legitimate interest, and that of the property owner, in protecting the property (Art. 6(1)(f) GDPR). The booking platform processes your data under its own privacy policy.

f) Email newsletter
If you sign up for my newsletter, I process your email address, your name if you give it, the date and source of your sign-up, and whether you open my emails and click their links. I send the newsletter through Kit and MailerLite.
I use this data only to send you the newsletter and to see which content is useful to readers. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time through the unsubscribe link in every email or by writing to me.

g) Social media and Substack
The website links to my profiles on Instagram, YouTube and Substack. These platforms are separate services and process your data under their own privacy policies. If you message me there, I use your message only to reply.

4. Where your data comes from

Most data comes directly from you. Other sources are: booking platforms (guest and booking data), property owners (data about their property and co-owners), and the website platform (technical data collected automatically when you visit).

5. Who receives your data

I share personal data only where it is needed for the purposes above, and only the data the recipient needs. Recipients are:

• Tilda Publishing (Tilda Platform Cloud Services Co.): Website builder and hosting; processes technical data and any website form data on my behalf.
• Typeform, S.L. (Spain): Runs the “Discuss a Project” form; stores your answers on my behalf.
• Google (Gmail): Email service used to receive and answer your messages.
• Kit (ConvertKit LLC, United States): Newsletter and email sign-up forms; stores subscriber data and sends emails on my behalf.
• MailerLite (MailerLite Limited, Ireland): Newsletter and email sign-up forms; stores subscriber data and sends emails on my behalf.
• Airbnb: Booking platforms for the homes I manage.
• Cleaning, maintenance and other service partners: Receive only what they need for a job, such as an address, access details or arrival times.
• My accountant and banks: Bookkeeping, tax filings, invoices, payments and payouts.
• Public authorities (for example AADE, the Greek tax authority): Where Greek or EU law requires it.
• Lawyers and other advisers: Only where needed to establish, exercise or defend a legal claim.

Service providers that process data on my behalf do so under a data processing agreement and only on my instructions. I do not sell your personal data, and I do not use it for automated decision-making or profiling that has legal or similarly significant effects on you.

6. Transfers outside the European Economic Area

Some of the providers listed above, or their sub-processors, may process data outside the European Economic Area (EEA), for example in the United States, where Kit is based. In that case, the transfer relies on an adequacy decision of the European Commission (including the EU–US Data Privacy Framework, for certified companies) or on the European Commission’s Standard Contractual Clauses (Art. 45 and 46 GDPR). You can ask me for more information about these safeguards.

7. Cookies

Cookies are small files stored on your device when you visit a website. This website uses only essential cookies, which it needs to work and stay secure. Essential cookies do not require your consent.
This website does not use analytics or advertising cookies, such as Google Analytics or the Meta Pixel. If that changes, I will update this policy and ask for your consent before any such cookie is set.
You can block or delete cookies in your browser settings. If you block essential cookies, parts of the website may not work.

8. How long I keep your data

I keep personal data only as long as needed for the purpose it was collected for, then I delete or anonymise it.

• Website technical data: 12 months
• Enquiries that do not lead to a contract: 24 months after our last contact.
• Client data and contracts: For the duration of our contract, then for as long as Greek tax and accounting law requires (generally five years from the end of the relevant tax year)
• Invoices and accounting records: As required by Greek tax law
• Guest booking data: As required by Greek tax law
• Data needed for a legal claim: Until the claim is resolved and limitation periods have expired.
• Newsletter subscribers: Until you unsubscribe; then I keep only a record of the unsubscribe, so you are not emailed again.

9. Your rights

Under the GDPR you have the right to:

• access the personal data I hold about you and receive a copy (Art. 15);
• correct inaccurate or incomplete data (Art. 16);
• erase your data, where there is no longer a valid reason to keep it (Art. 17);
• restrict processing in certain cases (Art. 18);
• receive your data in a structured, machine-readable format and have it sent to another controller (Art. 20);
• object to processing based on legitimate interests, and to direct marketing at any time (Art. 21);
• withdraw your consent at any time, without affecting processing that took place before (Art. 7(3)).

To use any of these rights, email elenitzinakou@gmail.com. I will reply within one month. For complex or numerous requests, this period can be extended by two further months; I will tell you if that happens. I may ask you to confirm your identity before I act on a request. Requests are free of charge unless they are clearly unfounded or excessive.

10. Your right to complain

If you believe your data has been processed unlawfully, you can lodge a complaint with the Greek supervisory authority:
Hellenic Data Protection Authority
Kifisias 1–3, 115 23 Athens, Greece · Tel. +30 210 6475600
Email: complaints@dpa.gr · Website: www.dpa.gr
You can also complain to the supervisory authority in the EU country where you live or work. I would appreciate the chance to resolve your concern first, so please feel free to contact me.

11. Do you have to provide your data?
You can browse the website without giving me any personal data. If you send an enquiry, I need your contact details to reply. If we work together, some data, such as your VAT number and bank details, is required by the contract or by law; without it, I cannot provide the service.

12. How I protect your data
I use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), strong passwords and two-factor authentication on the accounts I use, access limited to people who need it, and confidentiality from service partners. No method of transmission or storage is completely secure. If a personal data breach is likely to put your rights at risk, I will notify the Hellenic Data Protection Authority and, where required, you (Art. 33 and 34 GDPR).

13. Children

My services and this website are intended for adults. I do not knowingly collect personal data from children under 15 (the age of digital consent in Greece). Where a booking includes children, I process their details only as part of that booking.

14. Links to other websites

This website links to other websites and platforms, such as Airbnb, Typeform, Kit, MailerLite, Instagram, YouTube and Substack. I am not responsible for their privacy practices. Please read their privacy policies before sharing data with them.

15. Changes to this policy
I may update this policy when my services, tools or the law change. The date at the top shows the latest version. If a change significantly affects how I use your data, I will tell you before it takes effect, where I have your contact details.

16. Contact

For any question about this policy or your personal data, contact Eleni Tzinakou at elenitzinakou@gmail.com.