Privacy Policy
Effective Date: January 29, 2026
1. Introduction
At nomoreflights, safeguarding personal data is a priority. This Privacy Policy explains which personal information we collect, the reasons for collecting it, how it is processed and stored, and the rights available to individuals whose data we handle.
2. Data Controller
The controller responsible for processing personal data is nomoreflights, operating within Greece and acting in accordance with applicable European Union data protection laws.
Contact email: contact@hotelvibegoal.com
3. Types of Personal Data Collected
Based on your interaction with our website and services, we may collect and process the following categories of personal information:
- Identification details (such as first and last name)
- Contact details (including email address and telephone number)
- Information connected to reservations, event enquiries, or service requests
- Data you choose to provide through forms, messages, or other correspondence
- Technical and usage data (including IP address and cookie-related information; further details are available in our Cookie Policy)
4. Purpose of Processing and Legal Basis
Personal data is processed strictly for specified purposes and in compliance with Article 6 of the GDPR:
- Delivery of services and management of reservations — Legal basis: performance of a contract (Art. 6(1)(b) GDPR)
- Responding to enquiries and providing customer support — Legal basis: legitimate interest (Art. 6(1)(f) GDPR)
- Sharing information about services or offers — Legal basis: legitimate interest (Art. 6(1)(f) GDPR)
- Fulfilment of legal and regulatory obligations — Legal basis: legal obligation (Art. 6(1)(c) GDPR)
- Distribution of newsletters or informational messages — Legal basis: consent (Art. 6(1)(a) GDPR)
5. Data Retention Periods
Personal data is retained only for as long as necessary to fulfil its purpose:
- For the duration required to provide services and resolve potential claims
- For legally mandated retention periods (e.g. accounting or tax obligations, generally up to five years)
- Until consent is withdrawn, where processing relies on consent
- Until an objection is raised, in cases involving direct marketing
6. Data Sharing
Personal data may be disclosed exclusively to trusted third parties involved in service delivery, such as:
- IT and hosting service providers
- Accounting and legal professionals
- Payment service providers
- Public authorities, where disclosure is required by law
Note: Personal data is not transferred outside the European Economic Area (EEA).
7. Your Rights Under Data Protection Law
In accordance with the GDPR, you are entitled to:
- Access your personal information
- Request correction of inaccurate or incomplete data
- Request deletion of your data (“right to erasure”)
- Request restriction of data processing
- Obtain your data in a portable format
- Object to certain processing activities
- Withdraw consent at any time
- Lodge a complaint with a competent supervisory authority
8. Data Security
We implement appropriate technical and organisational measures to protect personal data, including SSL encryption, secure server infrastructure, and controlled access mechanisms designed to prevent unauthorised access, alteration, or loss.
9. Contact for Privacy Matters
For any questions regarding data protection or this Privacy Policy, please contact:
Email: privacy@hotelvibegoal.com
10. Updates to This Policy
This Privacy Policy may be updated to reflect legal, technical, or operational changes. The most recent version will always be published on this page, and users are encouraged to review it regularly.