Last updated: 06/07/2026

Eterna Collection (“we,” “our,” or “us”) respects and protects your privacy. This Privacy Policy explains how we collect, use, and safeguard the personal information of clients, property owners, guests, and website visitors.

Eterna Collection is based in Kassiopi, Corfu, Greece, and acts as the data controller for the personal data described in this policy.

Contact: [email protected] | +30 694 633 7227 | Kassiopi, Corfu, Greece 49100

1. Information We Collect

We collect and process only the information necessary to provide our services, including:

• Contact details (name, phone number, email address) when you contact us or fill in a form.
• Property information, for owners who collaborate with us on sales, rentals, or property management.
• Booking and transaction data when you make or manage a reservation.
• Identification documents (such as passport or ID copies) where required for guest registration under Greek tourism law, or for standard buyer/seller due diligence in a property transaction.
• Financial details for owners (bank account details, tax identification numbers) where necessary to disburse rental income or complete a sale.
• Technical data (such as IP address, device type, and browsing behaviour) collected automatically through cookies.
• Any additional information you choose to share with us, such as special requests, dietary needs, or accessibility requirements related to your stay.

We do not collect or store credit card information on our website. Payments made through third-party platforms (Booking.com, Airbnb, payment processors) are handled directly by those providers under their own security standards.

2. How We Use Your Information

We use your data for:

• Managing property listings, rentals, sales, and communications with owners, guests, and buyers.
• Sending booking confirmations, property updates, or relevant service information.
• Completing guest registration as required by Greek tourism accommodation rules.
• Supporting standard due diligence on property sales, where legally required (e.g. identity verification requested by a notary or lawyer involved in the transaction).
• Complying with legal obligations under Greek and EU law (tax, accounting, AADE reporting).
• Improving our website and services for a better user experience.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Legal Basis for Processing

We process your personal data under one or more of the following lawful bases:

• Your consent (e.g., when you submit a form or subscribe to updates).
• The performance of a contract (e.g., a rental, sale, or management agreement).
• Legal compliance with Greek or EU regulations (tax law, tourism registration).
• Our legitimate business interest in providing efficient and personalised service, balanced against your right to privacy.

4. Marketing Communications

If you opt in to receive property updates, newsletters, or promotional content from us, we do so on the basis of your consent. You can withdraw this consent and unsubscribe at any time by clicking the unsubscribe link in any email, or by contacting us directly at [email protected]. Withdrawing consent does not affect any communications necessary to manage an existing booking, enquiry, or transaction.

5. Who We Share Data With

We do not sell or rent personal data. We do share it, only where necessary, with:

• Co-broker agents, lawyers, notaries, engineers, and accountants involved in a specific property transaction.
• Booking and payment platforms (e.g. Booking.com, Airbnb, payment processors), strictly to process your reservation or payment.
• Website and IT service providers (hosting, email, analytics), under confidentiality obligations.
• Greek authorities, where legally required — for example, tourism registration, tax reporting, or a lawful request from law enforcement.

Anyone we share data with is only given the minimum necessary to perform their specific role.

6. International Data Transfers

Because many of our clients are based outside Greece, some data may be processed or stored outside the European Economic Area (for example, through email or booking platforms used internationally). Where this happens, we take reasonable steps to ensure your data receives an equivalent level of protection, in line with GDPR requirements.

7. Data Retention

We retain personal data only as long as necessary for the purpose it was collected, or as required by Greek tax and legal obligations. As a general guide:

• Enquiries that don’t result in a booking or transaction: retained for up to 24 months, then deleted.
• Completed transaction and guest registration records: retained for the period required under Greek tax, accounting, and tourism law (typically up to 10 years for tax-relevant documents).
• Marketing consent: retained until you unsubscribe or withdraw consent.

When data is no longer needed, it is securely deleted.

8. Data Security

We apply appropriate technical and organisational measures to protect your personal data from unauthorised access, alteration, or disclosure. This includes:

• SSL encryption on our website to secure data transmission.
• Restricted access to sensitive documents (such as passport copies and financial details) to those directly involved in your transaction.
• Secure storage of identification and financial documents separate from general correspondence.

In the event of a data breach likely to result in a risk to your rights, we will notify the Hellenic Data Protection Authority and affected individuals as required by law.

9. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on you. All enquiries, bookings, and transactions are reviewed and handled personally.

10. Your Rights (GDPR)

Under the EU General Data Protection Regulation (GDPR), you have the right to:

• Access the personal data we hold about you.
• Request correction or deletion of your data.
• Restrict or object to certain processing.
• Withdraw consent at any time.
• Request a copy of your data in a portable format.
• Lodge a complaint with the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα, www.dpa.gr) if you believe your rights have been violated.

To exercise any of these rights, contact us at [email protected]. We will respond within one month, as required by law.

11. Cookies

Our website uses cookies to improve performance, understand site usage, and personalise your experience — including features such as the currency switcher, saved/favourited properties, and interactive map. You can disable cookies at any time through your browser settings; this may affect some site features but won’t prevent you from browsing or contacting us.

12. Third-Party Links and Embedded Content

Our website may include links to third-party booking platforms (e.g., Airbnb, Booking.com), social media (e.g., Instagram, TikTok), or embedded content from external sites. We are not responsible for the privacy practices or content of these external sites, and we encourage you to review their own privacy policies.

13. Children

Our services are not directed at children. We do not knowingly collect personal data from anyone under 18, except where a minor’s details appear incidentally within a family booking made by a parent or guardian.

14. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated “Last Updated” date. Material changes affecting how your data is used will be communicated directly where required.

15. Contact Us

If you have any questions about this Privacy Policy or how we process your data, please contact us:

Eterna Collection
Kassiopi, Corfu, Greece 49100
[email protected]
+30 694 633 7227