Last updated: February 2026

1. Introduction

Welcome to enalis.gr (the "Website"), operated by Enalis Studios & Apartments (the "Data Controller", "we", "us", or "our"). We are committed to protecting the privacy of our visitors and guests. This Privacy Policy explains what personal data we collect, how we use it, and what rights you have regarding your information.

By using our Website, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the Website.

2. Data Controller

Enalis Studios & Apartments
Agios Georgios, Karfas, 821 00 Chios, Greece
Email: info@enalis.gr
Phone: +30 694 601 1339

3. What Data We Collect

We may collect and process the following categories of personal data:

• Contact information – name, email address, phone number, submitted via our contact or booking forms.
• Usage data – pages visited, time spent, referring URL, browser type, device type, and IP address (anonymised where applicable).
• Cookie data – information collected through cookies and similar technologies, as described in the Cookie Policy section below.

4. How We Use Your Data

Your personal data is processed for the following purposes:

• To respond to enquiries and booking requests.
• To improve our Website, content, and services.
• To analyse Website traffic and usage patterns (via Google Analytics).
• To comply with legal obligations.

5. Legal Basis for Processing

We process your personal data based on one or more of the following legal bases:

• Consent – where you have given explicit consent (e.g. for analytics cookies).
• Legitimate interest – to improve our services and understand site usage.
• Contractual necessity – to fulfil booking or contact form requests.
• Legal obligation – to comply with applicable laws and regulations.

6. Cookie Policy

Our Website uses cookies, which are small text files stored on your device. We use the following categories of cookies:

6.1 Necessary Cookies

These cookies are essential for the Website to function correctly. They enable core features such as page navigation. These cookies do not collect any personally identifiable information and are always active.

6.2 Analytics Cookies (Google Analytics 4)

We use Google Analytics 4 (GA4), a web analytics service provided by Google LLC. GA4 uses cookies to help us understand how visitors interact with our Website, such as which pages are visited most frequently and how users navigate the site.

Analytics cookies are only activated after you provide explicit consent through our cookie consent banner. No analytics data is collected before consent is given.

Google Analytics may transfer data to servers located outside the European Economic Area (EEA). Google adheres to data protection frameworks to ensure adequate safeguards. For more information, visit Google's Privacy Policy.

6.3 Managing Your Cookie Preferences

You can manage your cookie preferences at any time by clicking the cookie settings icon located at the bottom-left corner of the Website, or by adjusting your browser settings. Please note that disabling certain cookies may affect Website functionality.

7. Data Sharing

We do not sell, rent, or trade your personal data. We may share data with the following third parties only as necessary:

• Google LLC – for analytics purposes (Google Analytics), subject to your consent.
• Hosting and infrastructure providers – for website hosting and delivery.
• Authorities – if required by law or to protect our legal rights.

8. Data Retention

Personal data submitted through forms is retained for as long as necessary to fulfil the purpose for which it was collected, typically no longer than 24 months. Analytics data collected through Google Analytics is retained according to Google's default retention settings (14 months), after which it is automatically deleted.

9. Your Rights

Under applicable data protection laws, you have the following rights:

• Right of access – request a copy of the personal data we hold about you.
• Right to rectification – request correction of inaccurate or incomplete data.
• Right to erasure – request deletion of your personal data ("right to be forgotten").
• Right to restriction – request limitation of processing of your data.
• Right to data portability – request transfer of your data in a structured, machine-readable format.
• Right to object – object to processing based on legitimate interest.
• Right to withdraw consent – withdraw your consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at info@enalis.gr.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure.

11. Third-Party Links

Our Website may contain links to external websites. We are not responsible for the privacy practices or content of those websites. We recommend reviewing their privacy policies independently.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

Enalis Studios & Apartments
Agios Georgios, Karfas, 821 00 Chios, Greece
Email: info@enalis.gr
Phone: +30 694 601 1339