NAXIAN GARDEN VILLAS · GUEST INFORMATION
Privacy & cookie policy
Last updated: 19 October 2026
This policy explains how information is handled when you browse this website, send an accommodation enquiry or choose optional analytics and advertising services.
1. Who to contact
The operator responsible for this website’s enquiry processing is Naxian Garden Villas, Plaka, 84300 Naxos Island, Cyclades, Greece. Contact info@naxiangardenvillas.com or +30 698 858 9523 about your enquiry or personal information.
2. Information and purposes
- Enquiries: your name, email, optional telephone number, travel dates, length of stay, accommodation preference, guest count and anything you choose to write. We use these details to respond and take steps at your request before a possible accommodation contract. The required privacy acknowledgement records that you have read this notice; it does not subscribe you to advertising.
- Security and technical operation: session identifiers, request information, IP-related security data and server logs may be processed to prevent spam, abuse and unauthorised access. This supports our legitimate interest in operating a secure website and protecting communications.
- Optional analytics: with analytics consent, Google Analytics may process browser/device information, page visits and interaction data to help us understand website usage.
- Optional advertising: with advertising consent, Google Ads may use advertising identifiers, click information and visit/conversion events to measure campaigns and personalise advertising. A successful enquiry may be recorded as a lead conversion. The implementation does not send your enquiry text, name, email or phone to Google, and does not implement enhanced conversions.
Please do not send payment card details, identity documents or other sensitive information through this form. An enquiry is not a confirmed reservation and this website does not collect online payments.
3. Recipients and external services
Enquiries are delivered to the property’s mailbox through its configured email provider. Authorised staff and necessary hosting/email service providers may process them to provide the service. Security logs may be held by the hosting provider.
Cloudflare Turnstile protects the contact form. When you reach the form, your browser connects to Cloudflare to perform an anti-abuse check. Cloudflare processes technical information to assess the request. The website validates the resulting token on the server before sending email. This security check is separate from optional analytics/advertising consent. See Cloudflare’s privacy policy.
Google receives optional analytics/advertising data only when you permit the relevant category. See Google’s privacy policy and how Google uses information from partner sites. Google Maps is loaded separately only when you request the interactive map; opening directions also takes you to Google.
External providers may process information outside the European Economic Area. Applicable safeguards can include adequacy decisions or contractual safeguards, depending on the provider and processing location. You can contact us for information about the arrangements relevant to your data; providers’ notices explain their own processing and international transfers.
4. Cookies and similar storage
Essential storage is used for operation/security and to remember your preference. Optional Google tags are blocked until you permit their category. Closing the banner, scrolling or continuing to browse does not grant consent.
| Name / provider | Purpose | Duration | Category |
|---|---|---|---|
| ngv_session · this website | Protects the form and carries validation messages. | Browser session | Essential |
| ngv_consent_v2 · this website | Remembers cookie preferences and their version. A corresponding local-storage value synchronises changes between tabs. | 180-day preference validity; stale local storage is removed on a subsequent visit. | Essential |
| _gcl_* · Google Ads | Advertising attribution and conversion measurement, when enabled and permitted. | Typically up to 90 days, depending on the Google cookie and settings. | Advertising |
| _ga, _ga_* · Google Analytics | Distinguishes visits and maintains analytics session information, when enabled and permitted. | Up to 2 years by default, renewed with use according to Google settings. | Analytics |
| ngv_lead_* · this website (session storage) | A random enquiry reference prevents duplicate advertising conversion events. It contains no enquiry details. | Current browser-tab session | Advertising |
The precise Google cookies depend on the enabled Google services, browser and account settings. Google’s services may also use cookies on their own domains after permission or when you explicitly open a map. This website cannot delete another domain’s cookies.
5. Changing your choice
Use to accept, reject or choose categories. Optional categories are off initially. Withdrawal applies to future processing and does not undo processing that already lawfully occurred. When you withdraw, we update the consent signals, remove accessible Google cookies for the rejected categories and refresh the page so those tags are no longer loaded. You may also manage cookies through your browser.
6. Retention
For as long as needed to deal with your enquiry and any resulting reservation, and longer where legal obligations or the establishment, exercise or defence of legal claims require it. Enquiry emails are held in the property’s mailbox rather than a website database. Anti-abuse request records in this application contain hashed IP identifiers and timestamps; entries older than one hour are pruned on subsequent checks. Hosting logs and mailbox backups follow the relevant operational and legal retention requirements.
7. Your rights
Subject to applicable conditions, you may request access, correction, deletion, restriction or portability of your personal data, and object to processing based on legitimate interests. You may withdraw optional consent at any time. To make a request, email the address above; we may need proportionate information to verify your identity. You can complain to the Hellenic Data Protection Authority or another competent supervisory authority. Statutory obligations may limit deletion of certain records.
8. Updates
We may revise this notice when services or practices change. Material changes to optional processing may require a new consent choice. The date at the top identifies this notice’s latest revision.