Last updated: 19/09/2026
This Policy explains how XtraSPACE collects and uses the personal data of people who visit xtraspace.gr, contact us or use our facility. Processing is carried out in line with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Greek Law 4624/2019. The Greek version prevails.
1. Data controller
EXTRA SPACE O.E. (trading as XtraSPACE), 42 Nik. Plastira St, Agios Dimitrios 17341, Athens, VAT EL802900990, GEMI 184924603000. Contact: info@xtraspace.gr, +30 21 7000 8822.
2. What data we collect
When you fill in a form (quote or visit): full name, phone, email, the details of your request (use, size, term, dates, message, preferred visit day and time) and technical details of the submission (date, time, IP address, referring page, campaign data).
When you become a customer: the details needed for the agreement (ID, tax number, contact details and, for businesses, company and legal representative details), payment details and access history at the facility.
When you visit the facility: images from the video surveillance system (see section 7) and entry/exit logs from the access control system.
3. Why we use it and on what legal basis
- To reply to your request, send you a quote and arrange a visit: steps taken at your request before entering into a contract.
- To conclude and perform the rental, issue invoices and give you access to your unit: performance of a contract.
- For tax and accounting obligations: compliance with a legal obligation.
- For the safety of people and property (video surveillance, access logging): legitimate interest.
- For newsletters or offers: only with your consent, which you can withdraw at any time.
4. Who we share it with
We do not sell your data or share it with third parties for advertising. Access is limited to authorised XtraSPACE staff and to partners who provide services to us as processors, only as far as necessary: website and email hosting provider, accountant, security system provider and alarm monitoring centre. Data may also be disclosed to public authorities where required by law.
5. How long we keep it
- Requests that did not lead to an agreement: up to 24 months from our last contact.
- Customer data and invoices: for the duration of the rental and then for as long as tax law requires.
- Video surveillance footage: up to 15 days, unless needed to investigate an incident.
6. Cookies and third-party services on the website
This website does not use advertising or tracking cookies. It only uses what is strictly necessary for it to work (for example, to remember that you closed the information banner), which does not require consent.
To display the website correctly, fonts are loaded from Google Fonts, so your IP address is transmitted to Google. The Google map only loads if you click "Show map". These services are governed by Google's privacy policies, and Google may process data outside the European Economic Area with the safeguards provided by the GDPR.
If analytics or advertising tools are added in the future, they will only be activated after you give your consent through a relevant notice.
7. Video surveillance (CCTV)
The facility is under video surveillance to protect people and property. Cameras cover the entrance, ramp, corridors and common areas, not the inside of storage units. Information signs are in place. Only authorised persons and, where required, the competent authorities have access to the footage. Footage is never published.
8. Security
We take appropriate technical and organisational measures to protect your data. The website uses an encrypted connection (HTTPS). No transmission over the internet is completely secure, so please do not send us card numbers or other sensitive details by email.
9. Your rights
You have the right of access, rectification, erasure, restriction, portability, objection and to withdraw your consent. To exercise them, write to info@xtraspace.gr. We will reply within one month. For your protection, we may ask you to confirm your identity.
You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr, 1-3 Kifisias Ave, 115 23 Athens).
10. Links to other websites
This website links to third parties (e.g. Facebook, Instagram, Google Maps). We are not responsible for their content or privacy practices and recommend reading their policies.
11. Changes to this Policy
We may update this Policy. The date of the last update is shown at the top of the page. Material changes will be announced on the website.
12. Contact
For any question about your personal data: info@xtraspace.gr, +30 21 7000 8822, 42 Nik. Plastira St, Agios Dimitrios 17341, Athens.