ELYSIAN NAUTICAL GROUP – PRIVACY POLICY

Last updated: January 2026

1. Introduction

Elysian Nautical Group I.K.E. (“Elysian”, “we”, “our”, “us”) is committed to protecting personal data with discretion, care, and integrity.

This Privacy Policy explains how personal data is collected, used, stored, and protected when you:

• visit our website,

• enquire about or use our services,

• hold an Elysian membership,

• attend training, events, or briefings,

• or interact with us through digital platforms, applications, or communications.

Discretion and trust are fundamental to Elysian’s Private Office model.

2. Data Controller

Elysian Nautical Group I.K.E.
Registered Office: Philosophrum 2, Lefkada, Greece 31100
G.E.M.I.: 187577443000
VAT: 803021027

Elysian Nautical Group I.K.E. is the Data Controller for the purposes of the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

Privacy contact:
📧 privateoffice@elysiannautical.com

3. Core Data Protection Principle

Elysian Nautical Group does not sell, trade, rent, or commercially share personal data.

Personal data is used solely within Elysian Nautical Group for legitimate operational, administrative, legal, and service-delivery purposes.

We do not engage in data monetisation, behavioural profiling, or advertising-driven data practices.

4. Personal Data We Collect

We may collect and process the following categories of personal data:

a) Identity & Contact Information

• Name and title

• Email address

• Telephone number

• Company, vessel, or organisation name

• Role (owner, captain, crew, contractor, advisor)

b) Membership & Service Information

• Membership tier and status

• Service requests and coordination records

• Training or event attendance

• Communications and correspondence with Elysian

c) Financial Information

• Billing and invoicing details

• Payment confirmations

Payment card details are processed securely by third-party payment providers.
Elysian does not store full card or banking details.

d) Website & Technical Data

• IP address

• Browser and device information

• Website usage data via limited cookies

5. How We Use Personal Data

Personal data is processed only where necessary and proportionate, including to:

• respond to enquiries and communications,

• provide and manage services and memberships,

• coordinate operational support and contractors,

• manage training, events, and briefings,

• issue invoices and process payments,

• comply with legal, regulatory, and maritime obligations,

• maintain continuity, safety, and service records.

6. Legal Bases for Processing

Under GDPR, Elysian processes personal data on the following lawful bases:

• Contractual necessity – to deliver services or memberships

• Legitimate interests – to operate the Private Office effectively and securely

• Legal obligation – compliance with applicable laws and regulations

• Consent – where required (e.g. optional communications)

Consent may be withdrawn at any time.

7. Confidentiality, NDAs & Internal Access

Access to personal data is strictly limited to authorised personnel within Elysian Nautical Group.

All Elysian staff, consultants, and contractors with access to personal or confidential information are subject to strict confidentiality obligations, including contractual confidentiality clauses and, where appropriate, Elysian Non-Disclosure Agreements (NDAs).

These obligations apply during and after the period of engagement.
Access to data is granted strictly on a need-to-know basis and solely for authorised purposes.

Confidentiality is a foundational condition of engagement with Elysian Nautical Group.

8. Use of Trusted Service Providers

Elysian uses a limited number of trusted professional service providers to support essential business operations. These providers act solely as data processors, processing data only on Elysian’s instructions.

These include:

• Epsilon – accounting, invoicing, and financial records

• Clio – matter management and internal documentation

• Shopify – website hosting, memberships, and e-commerce

• Microsoft Outlook – secure communications

• Stripe and Worldline – payment processing and point-of-sale services

These providers do not own, sell, or independently use personal data and are contractually bound by confidentiality and data protection obligations.

9. International Data Transfers

Some service providers may process data outside Greece or the European Economic Area (EEA).

Where this occurs, Elysian ensures appropriate safeguards are in place in accordance with GDPR, including recognised contractual and legal protections.

10. Data Retention

Personal data is retained only for as long as necessary to:

• deliver services and maintain continuity,

• comply with legal, accounting, or regulatory requirements,

• preserve essential operational and service history.

Data is securely deleted or anonymised when no longer required.

11. Your Rights Under EU Law

Under GDPR, you have the right to:

• access your personal data,

• request correction of inaccurate or incomplete data,

• request erasure (deletion) where legally applicable,

• restrict or object to processing,

• request data portability,

• lodge a complaint with a supervisory authority.

12. Right of Enquiry & Deletion

Any client, member, or individual may contact Elysian at any time to enquire about personal data held or to exercise their rights, including the right to deletion under EU law.

Requests may be made by email to:
📧 privateoffice@elysiannautical.com

All requests are handled discreetly and in accordance with GDPR and applicable Greek data protection law. Where data cannot be deleted due to legal or regulatory requirements, this will be clearly explained.

13. Cookies & Website Analytics

Our website uses limited cookies necessary for:

• functionality and security,

• understanding general website usage.

We do not use intrusive tracking or advertising cookies.
Cookies can be controlled through browser settings.

14. Security Measures

Elysian applies appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse.

While no system can be guaranteed entirely risk-free, data protection is treated with seriousness proportionate to the sensitivity of the information we hold.

15. Changes to This Policy

This Privacy Policy may be updated from time to time.

The most current version will always be available on our website.
Continued use of the website or services constitutes acceptance of the updated policy.

16. Contact

For privacy or data protection enquiries:

Elysian Nautical Group
📧 privateoffice@elysiannautical.com
📞 +30 26450 21050