back to main page

PRIVACY POLICY

Last updated: 8 October 2026

1. Who we are

The controller of your personal data is GOLDEN TIMES E.E., trading as “A Place ApArt”, registered office 15-19 Praxitelous Street, 105 62 Athens, VAT no. 094495157 (“we”, “us”). For any question about your data, write to us at contact@aplaceapart.gr.

This Policy explains what data we collect through aplaceapart.gr, why, how long we keep it and what your rights are, in line with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Greek Law 4624/2019.

2. What data we collect

  • Contact form: your name, email, phone number and message.
  • Parallel Program sign-up: your email address and, if you sent us the contact form, your name and phone number.
  • Browsing data: anonymous or pseudonymous visit statistics (e.g. pages visited, device type, approximate region) through Google Analytics, as described in section 6.
  • Technical data: your IP address and browser details are logged temporarily by the server for security and proper operation.

We do not ask for, and ask you not to send, special categories of data (e.g. health data).

3. Why we use it and on what legal basis

  • Answering your enquiry (availability, quotation, site visit): to take steps at your request before entering into a contract (Art. 6(1)(b) GDPR).
  • Parallel Program (invitations and news about events and initiatives): only if you give your consent by ticking the relevant box or signing up through the form (Art. 6(1)(a)). You can withdraw it at any time.
  • Visit statistics: to improve the Website, based on your consent where required (see section 6).
  • Website security and prevention of abuse: our legitimate interest (Art. 6(1)(f)).

4. Who has access to the data

We do not sell your data or share it for third-party advertising. We use trusted providers who process it on our behalf:

  • Hostinger: website and email hosting, and the Hostinger Reach service for the Parallel Program list.
  • Google: Google Analytics (statistics).
  • OpenStreetMap: the map of our venues. When the map is shown, it loads from OpenStreetMap servers, which receive your IP address.
  • A content delivery network (CDN) for loading some elements of the Website, such as the photo galleries and the map.
  • The developer and administrator of the Website, to the extent needed for technical support.

Some of these providers may process data outside the European Economic Area. In that case the transfer is covered by the safeguards required by the GDPR, such as the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework.

5. How long we keep it

  • Enquiries: for 24 months after our last contact, unless we work together, in which case we keep it as long as the law requires (e.g. tax law).
  • Parallel Program: until you withdraw your consent.
  • Google Analytics statistics: up to 14 months.

6. Cookies

The Website uses:

  • Essential cookies, such as the one that remembers your language (Greek/English). These do not require consent.
  • Analytics cookies from Google Analytics, only if you accept them in the cookie notice. Without your consent no analytics cookies are stored on your device.
  • A cookie that remembers your choice in the cookie notice, for 6 months.

You can change your choice at any time with the “Cookies” button at the bottom left of the page. You can also delete or block cookies in your browser settings.

7. Your rights

You have the right to:

  • access your data and get a copy,
  • have it corrected or erased,
  • restrict or object to its processing,
  • receive it in a portable format,
  • withdraw your consent at any time, without affecting processing carried out before the withdrawal. For the Parallel Program, just use the unsubscribe link in our messages or write to us.

To exercise your rights, write to contact@aplaceapart.gr. We will reply within one month at the latest. If you believe we have not handled your data properly, you can lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

8. Security

We take reasonable technical and organisational measures to protect your data, such as an encrypted connection (HTTPS), restricted access and regular software updates.

9. Changes

We may update this Policy from time to time. The date of the latest update is shown at the top of this page.