Privacy & Cookie policy
nomadia.athens respects visitor privacy and is committed to protecting personal data in accordance with the GDPR.
1. Data Controller
nomadia.athens
Agiou Markou 16, 105 60 Athens, Greece
info@nomadiaathens.com
2. Data Collected
The following data may be collected:
- email address
- access data and entry timestamps
- locker usage data
- basic device and browser technical data
- access logs
- website usage statistics
- cookie data
The space operates CCTV systems for security and incident prevention purposes.
nomadia.athens does not know the contents of lockers.
3. Purpose and Legal Basis
Data is processed only for the following purposes:
Service operation
(GDPR Art. 6(1)(b) – contract performance)
- sending access codes
- managing locker use
- technical operation of the service
Security
(GDPR Art. 6(1)(f) – legitimate interest)
- access logs
- misuse prevention
- protection of persons, property and equipment
- CCTV operation
Quality feedback
(GDPR Art. 6(1)(f) – legitimate interest)
- a single, one-time request for feedback or review regarding the service used, sent shortly after the end of the booking
- no further communication is sent unless separately requested by the user
- users may object to this processing at any time by contacting info@nomadiaathens.com
Analytics
(GDPR Art. 6(1)(a) – consent)
- Google Analytics
- aggregated website usage data
Marketing cookies
(GDPR Art. 6(1)(a) – consent)
- Google Ads
- advertising cookies
Newsletter
(GDPR Art. 6(1)(a) – consent)
- email communications about offers and updates — only with separate explicit opt-in
4. Technology Providers (Processors)
Trusted service providers used in the operation of this service:
- Pareva – locker management system (sub-processor: DigitalOcean)
- TTLock – access control system
- Adyen – payment processing
- DennyPay – payment platform services
- Google Analytics – website usage statistics
- Google Ads – advertising cookies
- hosting and email providers
All processors handle only the data necessary for service operation.
5. Data Retention
| Data type | Retention period |
|---|---|
| Contact data (email) | Up to 12 months |
| Feedback request data | Deleted after sending, or up to 30 days |
| Access logs | Up to 12 months |
| Analytics data | Up to 14 months |
| Transaction data | According to tax obligations |
| CCTV recordings | Up to 15 days, unless required for incident investigation |
Data is not kept longer than necessary for the purposes described above.
6. Cookies
The website uses the following categories of cookies:
Necessary cookies
Always active. Required for basic functionality of the website.
Analytics cookies
Google Analytics — aggregated website usage data to help us understand how the website is used. Activated only after consent.
Marketing cookies
Google Ads — used for advertising purposes. Activated only after consent.
Users may accept, reject or customise cookie preferences at any time via the cookie settings panel.
7. Cookie Banner
When you first visit the website, you will be asked to choose your cookie preferences:
- Accept all — enables all cookie categories
- Reject — only necessary cookies will be active
- Settings — customise your preferences by category
Your preference is saved and can be changed at any time.
8. Data Sharing
Data is not sold.
Data may be shared only with service providers necessary for the operation of the service, as listed in section 4.
Some providers may process data outside the European Economic Area (EEA), using appropriate GDPR safeguards where required.
Processing is limited to what is strictly necessary.
9. User Rights
You may request:
- access to your data
- correction
- deletion
- restriction of processing
- withdrawal of consent
- data portability
To exercise your rights, contact: info@nomadiaathens.com
You also have the right to lodge a complaint with the:
Hellenic Data Protection Authority https://www.dpa.gr
10. Data Protection
nomadia.athens applies technical and organisational safeguards to protect personal data.
Only necessary data is processed.
Access to data is limited to authorised persons and service providers where required for operation, support or legal compliance.
Last updated: 30 June 2026