OCTOPUS CONCIERGE

Privacy Policy

Privacy Policy

Effective Date: August 19, 2026
Last Updated: August 19, 2026

At Octopus Concierge ("we", "us", "our"), discretion, confidentiality, and trust are core values of our service culture. This Privacy Policy outlines how we collect, use, process, and safeguard your personal data when you visit our website, apply for our membership plans, or engage our concierge, travel, and training services in Greece.

We strictly adhere to the European Union General Data Protection Regulation (GDPR) (EU 2016/679) and applicable Greek data protection legislation.

1. Data Controller

The Data Controller responsible for your personal information is:
Octopus Concierge
Founder & Director: Nikos Mitrou
Base: Thessaloniki, Greece
Email: [Insert Official Contact Email]
Phone / WhatsApp: (+30) 6972 481 967

2. Information We Collect

Depending on how you interact with Octopus Concierge, we may collect and process the following categories of personal data:

  • Identity & Contact Data: Full name, phone number, email address, nationality, and preferred contact language when you fill out contact forms, corporate inquiry forms, or membership applications.
  • Service & Lifestyle Data: Personal preferences, dietary requirements, travel itineraries, accommodation details, family logistics, or special requests required to deliver tailored concierge services.
  • Corporate & Business Data: Company name, job title, and professional details provided during corporate benefit inquiries or Concierge Training registrations.
  • Technical & Usage Data: IP address, browser type, device information, visited pages, and referral URLs collected automatically via cookies and analytical tools.

3. Legal Basis and Purposes of Data Processing

We process your personal data under the following legal bases:

  • Performance of a Contract: To process membership applications, deliver requested concierge and travel services, arrange third-party bookings, or execute training contracts.
  • Legitimate Interests: To improve our website performance, enhance customer experience, optimize our service quality, and prevent security incidents.
  • Consent: When you voluntarily submit forms, opt-in to marketing communications, or accept analytical cookies.
  • Legal Obligation: To comply with Greek tax, accounting, and legal requirements.

4. Confidentiality and Data Sharing

Discretion is at the heart of Octopus Concierge. We never sell, rent, or trade your personal data to third parties.

We only share minimal necessary information with vetted third-party service providers (such as luxury hotels, villa owners, private chauffeurs, yacht charter companies, or event venues) strictly for the purpose of fulfilling your specific request. All third-party partners are bound by confidentiality standards.

We may also disclose data if legally required by Greek public authorities or court orders.

5. Data Security and Retention

We implement high-level technical and organizational security measures to protect your data against unauthorized access, loss, alteration, or disclosure. Personal information related to executed requests is retained only as long as necessary to fulfill the operational purposes or comply with legal and tax retention requirements.

6. Your GDPR Rights

Under the General Data Protection Regulation, you hold the following rights regarding your personal data:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure ("Right to be Forgotten"): Request deletion of your data when it is no longer needed.
  • Right to Restrict Processing: Request limitation of data processing under specific circumstances.
  • Right to Data Portability: Obtain your data in a structured, machine-readable format.
  • Right to Object: Object to data processing based on legitimate interest or direct marketing.
  • Right to Withdraw Consent: Revoke your consent at any time without affecting prior lawful processing.

To exercise any of these rights, please contact us at [Insert Official Contact Email]. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA) (www.dpa.gr).

7. Changes to This Privacy Policy

We reserve the right to update this policy periodically to reflect operational, legal, or regulatory changes. Updated versions will be published on this page with a revised "Effective Date".