Your privacy matters to us.

Last updated: 18 October 2026

At Nautilus Lux, we believe that trust is an essential part of exceptional hospitality. We respect your privacy and are committed to protecting your personal information.

This privacy policy explains how we collect, use, store and protect your personal data when you visit our website, contact us or submit a reservation request for one of our private villas on Karpathos, Greece.

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Greek data protection legislation.

We encourage you to read this policy carefully to understand how your information is handled and what rights you have.

01. Who we are

Nautilus Lux is a collection of private villas located on the Greek island of Karpathos.

For the purposes of applicable data protection legislation, the business operating Nautilus Lux is responsible for determining how and why your personal data is processed.

Data controller

Business name: [Insert registered business name]
Trading name: Nautilus Lux
Location: Karpathos, Greece
Registered address: [Insert business address]
Email: nautiluslux@yahoo.com
Website: www.nautiluslux.com

If you have any questions about this privacy policy or how we handle your personal information, you can contact us using the details above.

02. Personal information we collect

We collect personal information when you interact with our website, contact us or request a reservation.

The information we collect depends on how you use our services.

Information you provide directly

When you complete a contact form, submit a reservation request or communicate with us, we may collect:

We ask that you avoid including sensitive personal information in general enquiries unless it is necessary for us to assist you.

If you choose to share information about accessibility requirements or other personal needs, we will use it only for the relevant purpose and handle it in accordance with applicable data protection requirements.

Information collected automatically

When you visit our website, certain technical information may be collected automatically, including:

Some of this information may be collected through cookies or similar technologies, as explained later in this policy.

03. How we use your personal information

We use your personal information only for legitimate and clearly defined purposes.

Responding to enquiries

When you contact Nautilus Lux, we use the information you provide to respond to your questions, provide information about our villas and assist you with planning your stay.

Managing reservation requests

When you submit a reservation request, we use your information to:

Submitting a reservation request through our website does not automatically confirm a booking. Our team will contact you to discuss availability and the next steps.

Providing hospitality services

If you become a guest, we may use your information to prepare for your arrival, communicate important details about your stay and provide the services you have requested.

Improving our website

We may use website usage information to understand how visitors interact with our content, identify technical issues and improve the functionality and user experience of our website.

Meeting legal obligations

We may process certain personal information when necessary to comply with applicable legal, tax, accounting or regulatory requirements.

Marketing communications

If we introduce a newsletter or other promotional communications, we will send marketing emails only where we have an appropriate legal basis to do so.

Where consent is required, you will be able to withdraw it at any time.

04. Legal basis for processing personal data

Under the GDPR, we must have a valid legal basis for processing your personal information.

Depending on the circumstances, we may rely on the following legal grounds.

Contractual necessity

When processing is necessary to take steps at your request before entering into a contract or to fulfil an accommodation agreement.

Legitimate interests

When processing is necessary for our legitimate business interests, such as responding to general enquiries, maintaining website security or improving our services, provided these interests do not override your rights and freedoms.

Legal obligations

When we are required to process or retain information to comply with applicable laws.

Consent

When you have given your consent for a specific purpose, such as receiving certain marketing communications or allowing optional cookies.

You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before your consent was withdrawn.

Where special-category personal data is involved, we will ensure that an additional lawful condition under the GDPR applies.

05. Reservation requests and guest information

Nautilus Lux currently uses a reservation request process rather than an instant online booking system.

When you submit a request through our website, the information you provide is sent to our team so we can review your enquiry and respond personally.

Your reservation is not confirmed until you receive confirmation from Nautilus Lux.

We use reservation information only for purposes connected with your enquiry, booking arrangements and accommodation services, unless another lawful basis applies.

If payment arrangements are introduced through our website or an external payment provider, this privacy policy will be updated to explain how the relevant personal and payment information is processed.

06. Sharing your personal information

We respect the confidentiality of your personal information.

We do not sell your personal data.

However, we may share limited information with trusted third parties when necessary to operate our website, respond to enquiries or provide our services.

These third parties may include:

Where third parties process personal data on our behalf, we take appropriate steps to ensure that they handle it securely and in accordance with applicable data protection requirements.

We only share information that is reasonably necessary for the relevant purpose.

07. International data transfers

Some of the technology providers used to operate our website or communications may process personal information outside the European Economic Area (EEA).

Where personal data is transferred internationally, we will ensure that an appropriate transfer mechanism or safeguard is in place, as required by the GDPR.

These safeguards may include European Commission adequacy decisions or approved standard contractual clauses.

You may contact us if you would like further information about the safeguards applicable to your personal data.

08. How long we keep your information

We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected.

Retention periods depend on the nature of the information and the purpose of processing.

For example:

General enquiries: We retain correspondence for as long as necessary to respond to your enquiry and manage any relevant follow-up.

Reservation information: We retain booking-related information for the duration necessary to administer your reservation and meet applicable legal, tax or accounting obligations.

Marketing information: Where we rely on consent, we retain the relevant information until you withdraw your consent or it is no longer required.

Website technical information: Retention depends on the purpose for which the information is collected and the settings of the relevant service.

When personal information is no longer required, we take appropriate steps to delete or anonymise it securely.

09. How we protect your information

The security and confidentiality of your personal information are important to us.

We take appropriate technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, misuse, alteration or disclosure.

These measures may include secure website connections, restricted access to personal information, security updates and appropriate arrangements with service providers.

Although we take reasonable precautions, no method of transmitting or storing information online can be guaranteed to be completely secure.

If you have concerns about the security of your personal information, please contact us.

10. Your rights under the GDPR

Under applicable data protection legislation, you have several rights regarding your personal information.

Depending on the circumstances, these include:

Right of access: You may request information about the personal data we hold about you and obtain a copy.

Right to rectification: You may request that inaccurate or incomplete personal information be corrected.

Right to erasure: You may request the deletion of your personal information where the applicable legal conditions are met.

Right to restriction: You may request that we limit the processing of your personal information in certain circumstances.

Right to data portability: You may request to receive certain personal information in a structured, commonly used and machine-readable format.

Right to object: You may object to certain processing activities, including processing based on legitimate interests.

Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time.

Rights relating to automated decision-making: You have rights concerning certain decisions made solely through automated processing that produce legal or similarly significant effects.

To exercise any of these rights, please contact us using the details provided in this policy.

We will normally respond within one month of receiving your request. Where permitted by law, this period may be extended by up to two additional months for complex requests. If an extension is necessary, we will inform you within the initial one-month period.

We may request additional information to verify your identity before fulfilling your request.

Your right to lodge a complaint

If you believe that your personal information has been processed in violation of applicable data protection legislation, you have the right to lodge a complaint with the competent supervisory authority.

In Greece, this is the:

Hellenic Data Protection Authority (HDPA)
Website: www.dpa.gr

We encourage you to contact us first so that we have the opportunity to address your concerns.

11. Cookies and similar technologies

What are cookies?

Cookies are small text files that websites may store on your device when you visit them.

They help websites function correctly, remember certain preferences and, where enabled, provide information about how visitors use a website.

Nautilus Lux may use cookies and similar technologies to support website functionality, improve the browsing experience and understand how our website is used.

Essential cookies

Essential cookies are necessary for the basic operation, security and functionality of the website.

They may support functions such as secure navigation, form submissions and the storage of privacy preferences.

These cookies do not require consent where they are strictly necessary for a service you have requested.

Analytics cookies

If enabled, analytics cookies help us understand how visitors interact with our website.

They may provide information about page visits, navigation patterns and website performance.

This information can help us improve our content, design and overall user experience.

Where required by law, analytics cookies will only be activated after you have provided your consent.

Functional cookies

Functional cookies may remember preferences or support optional website features.

Depending on their purpose, these cookies may require your consent.

Marketing cookies

If we introduce advertising or remarketing services, marketing cookies may be used to measure advertising performance or provide more relevant promotional content.

Where required, these cookies will only be activated with your prior consent.

Managing your cookie preferences

You can manage or delete cookies through your browser settings.

Where our website uses cookies that require consent, you will be given the opportunity to accept or reject them and to change your preferences.

Please note that disabling certain cookies may affect the functionality of some website features.

Important: The specific cookies used by Nautilus Lux depend on the services and plugins installed on the website. A detailed cookie list should be provided once the website’s configuration has been verified.

12. Third-party websites and services

Our website may contain links to third-party websites, including social media platforms, travel resources or external services.

These websites operate independently and may have their own privacy policies and data processing practices.

Nautilus Lux is not responsible for the privacy practices of external websites.

We encourage you to review the privacy policies of any third-party websites you visit.

If our website uses embedded maps, videos or social media content, those services may process certain information about your visit. Where necessary, we will request your consent before activating non-essential third-party content.

13. Children’s privacy

Our website is intended primarily for adults who are interested in our accommodation and hospitality services.

We do not knowingly collect personal information directly from children for marketing purposes.

If a parent or guardian believes that a child has provided personal information to us without appropriate authorisation, they may contact us to request its review or deletion.

Where information about children is necessary for a family reservation, it will be processed only for legitimate accommodation-related purposes and in accordance with applicable law.

14. Changes to this privacy policy

We may update this privacy policy from time to time to reflect changes in our services, website functionality, legal requirements or data processing practices.

Any changes will be published on this page, together with an updated revision date.

Where required by law, we will provide additional notice of significant changes.

We encourage visitors to review this page periodically to remain informed about how we protect personal information.

15. Contact us

Your privacy, our commitment

If you have any questions about this privacy policy, wish to exercise your data protection rights or would like further information about how your personal data is handled, please contact us.

Nautilus Lux
Karpathos, Greece

Email: Nautiluslux@yahoo.com
Website: www.nautiluslux.com

We will be happy to assist you.

About Us

Imagine a place where architecture follows the curves of nature, where the horizon stretches endlessly before you, and where privacy is not a luxury, but a way of life. Welcome to Nautilus, where every detail invites you to experience the extraordinary beauty of simply being.

Copyright © Nautilus, 2026

To the top

Nautilus lux

information