1. Data Processing Controller

“AUM MANAGEMENT SINGLE MEMBER P.C.” is the Data Controller (hereinafter the “Controller”) responsible for determining the purposes and means of processing your personal data. For any questions regarding the processing of your personal data or the exercise of your rights, you may submit a data request

Where a booking concerns a space operated by one of our partner venues, that venue may also receive the information required to host your event. In such cases, House of Shila and the relevant venue each process your personal data independently for their respective parts of the booking process and are responsible for their own processing activities.

2. Definitions

Data Subject: any identified or identifiable natural person whose personal data is processed by us.

Personal Data: any information relating to an identified or identifiable natural person.

Processing: any operation or set of operations performed on personal data, such as collection, recording, storage, alteration, use, disclosure, restriction, erasure or destruction.

Controller: the natural or legal person which determines the purposes and means of processing personal data.

Processor: the natural or legal person which processes personal data on behalf of the Controller and according to its instructions.

3. The Data that we process

We collect and process your personal information to provide our services and offer you the best possible experience when interacting with HOS. Please avoid sharing sensitive personal information unless it is strictly necessary. The information we collect may vary depending on your method of interaction with us.

Your account : When you create an account, we may collect First and last name, mail address, Phone number, Account login details information, Membership Information and preferences. This information allows you to sign in, manage your bookings, access membership benefits and receive service-related updates.

Your bookings : When you request or confirm a booking, we may collect the selected space or venue, booking dates, Event type, Number of attendees, Project details, including information regarding events, pop-ups, exhibitions, shoots or gatherings, Notes and preferences you voluntarily provide. When booking a partner venue, we share only the information required for that specific booking, including your name, contact details and relevant event information, so that the venue can prepare and host your event.

Your messages : When arranging a booking, you may communicate with HOS and/or the relevant venue through our platform. We retain these messages to maintain a record of what has been agreed, including operational details such as access arrangements, timing, setting up requirements and other booking-related information.

Your payments : Payments, deposits and balances are processed through trusted payment providers, including Stripe. HOS records payment confirmation and relevant transaction information, such as payment amount and status. We do not store your full payment card details.

Your use of the website : We may collect technical information relating to your use of our website, including IP address, Device information, Browser type, Pages visited, Website usage information collected through cookies and similar technologies.

Further information regarding cookies is provided in Section 5 of this Policy.

Use of Services by Minors : Our Services are not intended to be used independently by individuals under the age of eighteen (18). We do not knowingly collect personal data directly from minors without appropriate authorization from a parent or legal guardian.

4. Why and how we process your data

The data is processed for the following purposes:

Account management : To create and manage your account, keep you signed in, allow you to manage bookings and provide access to our services.

Legal basis: Performance of contract (Article 6(1)(b) GDPR).

Booking management : To process booking requests, reserve spaces, coordinate access, confirm details and communicate with the relevant venue where required.

Legal basis: Performance of contract (Article 6(1)(b) GDPR).

Payment processing and legal obligations : To collect deposits and balances, process payments, maintain accounting records and comply with tax, financial and anti-fraud obligations.

Legal basis: Performance of contract (Article 6(1)(b) GDPR) and compliance with legal obligations (Article 6(1)(c) GDPR).

Service security and fraud prevention : To maintain the security of our platform, prevent fraud, misuse, unauthorized access and protect our legitimate business interests.

Legal basis: Legitimate interest (Article 6(1)(f) GDPR).

Automatic confirmation for eligible members : Approved members may benefit from automatic booking confirmation for eligible HOS-owned spaces. The system checks availability for the requested date and, where the space is available, confirms the booking without requiring manual review.

This automated process is solely a convenience feature and does not evaluate your character, personal profile or make decisions that produce legal or similarly significant effects concerning you.

Public and cultural events are always reviewed by a member of our team before confirmation.

If a booking is declined, you may request information regarding the decision and ask for a manual review.

Legal basis: Legitimate interest (Article 6(1)(f) GDPR).

Booking communications : To send emails and notifications relating to bookings you have made, including confirmations, updates and operational information.

Legal basis: Performance of contract (Article 6(1)(b) GDPR).

Marketing communications : To send occasional updates, news, offers and information regarding spaces and events, only where you have provided your consent.

Legal basis: Consent (Article 6(1)(a) GDPR).

You may withdraw your consent for marketing communications at any time by using the unsubscribe option included in our communications or by contacting us.

Sharing information with discount partners : For members who choose to use third-party discount benefits, we may share limited membership information with relevant vendors so they can apply available discounts or benefits.

This is a separate processing purpose from marketing communications. Consent for discount partner sharing is collected separately and distinctly from marketing consent during registration or through account settings.

You may choose to receive membership benefits without subscribing to newsletters, and vice versa.

Legal basis: Consent (Article 6(1)(a) GDPR).

You can withdraw your consent for marketing or discount partner sharing at any time. Withdrawal of consent does not affect your ability to make bookings.

In any case, your personal data may also be processed where necessary to comply with legal obligations or applicable legislation, or where processing is necessary for the legitimate interests of HOS, including website security, operational improvement and statistical analysis.

Personal data is processed in accordance with the principles of lawfulness, fairness, transparency, data minimization and purpose limitation.

5. Automatically collected Information and Cookies

Certain types of information are collected automatically every time you access our website or interact with certain communications from us. These technologies may include web servers, IP addresses, browser information, device information and cookies or similar technologies.

Cookies are small text files stored on your device that help us operate, secure and improve our website.

We use cookies for the following purposes:

Essential cookies : These cookies are necessary for the operation of the Website and allow essential functions such as account access, booking functionality and website security. These cookies cannot be disabled.

Analytics cookies : These cookies help us understand how users interact with our website, allowing us to analyse performance and improve our services. These cookies are activated only where you have provided your consent.

Marketing cookies : These cookies allow us to measure and improve communications regarding our spaces, events and services and may support relevant promotional activities. These cookies are activated only where you have provided your consent.

You may manage your cookie preferences at any time through the available cookie settings tools. You may withdraw your consent for non-essential cookies at any time without affecting your ability to use our booking services.

6. Principles applied during processing

HOS processes your personal data in accordance with the principles established by the GDPR, including lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity and confidentiality.

Your personal data is collected and processed only for the purposes described in this Policy, unless we have received your consent or processing is otherwise permitted or required by law.

The principle of proportionality is applied during the processing of personal data. HOS collects only information that is necessary and relevant for the provision of its services.

Personal data used by HOS should be accurate and updated. Where inaccurate or incomplete information is identified, reasonable efforts are made to correct or delete such information.

Except where a longer retention period is required by law, personal data shall not be stored longer than necessary for the purposes for which it was collected.

The personal data is processed through electronic systems and, where applicable, manual procedures, while ensuring appropriate technical and organizational security measures.

HOS ensures that employees, associates and service providers involved in processing personal data are informed of their obligations regarding confidentiality and data protection.

Where third parties process personal data on behalf of HOS, such processing is governed by appropriate contractual arrangements requiring compliance with applicable data protection legislation and adequate security measures.

7. Persons with access to data

Personal data is processed electronically or manually according to procedures related to the purposes described in this Policy.

Access to personal data is limited to authorized HOS personnel and service providers who require such access for the performance of their duties.

Within House of Shila, our venue teams may access the booking details necessary to prepare and host your experience, including relevant event information, timing, access requirements and operational notes.

When you book a space operated by a partner venue, that venue receives only the information necessary for that specific booking, including your name, contact details and event-related information required to provide the service.

To provide, maintain and improve our services, we may rely on trusted third-party providers, including:

• Payment providers, for secure payment processing;
• Hosting and cloud service providers;
• Website, technology and security providers;
• Communication and notification providers;
• Analytics providers;
• Other professional service providers required for the operation of our business.

These providers may access, process or store personal data only to the extent necessary to perform services on behalf of HOS and are required to maintain appropriate confidentiality and security standards.

The recipients of personal data receive only the information necessary for their respective purposes and process such information in accordance with applicable data protection legislation.

8. International transfers

Some of our service providers or partners may process personal data outside the European Economic Area (EEA). Where personal data is transferred outside the EEA, HOS ensures that appropriate safeguards are implemented in accordance with GDPR requirements.

Such safeguards may include:

• An adequacy decision issued by the European Commission;
• The provider’s certification under the EU–US Data Privacy Framework, where applicable;
• Standard Contractual Clauses approved by the European Commission.

These measures ensure that your personal information receives a level of protection substantially equivalent to that provided within the European Union.

9. Your rights

You may request to exercise your rights under Articles 15–22 of the GDPR regarding your personal data processed by HOS.

To exercise your rights, you may submit a data request

Depending on applicable law, you may have the following rights:

Right to access your personal data : You have the right to request confirmation as to whether we process your personal data and obtain a copy of such information.

Right to rectification : You have the right to request correction of inaccurate or incomplete personal data.

Right to erasure : You may request deletion of your personal data where permitted by law. Certain information may need to be retained where required by legal obligations or where necessary for contractual or legitimate purposes.

Right to data portability : Where applicable, you may request to receive your personal data in a structured, commonly used and machine-readable format.

Right to restriction or objection : You may request restriction of processing or object to certain processing activities, including processing based on legitimate interests.

Right to withdraw consent : Where processing is based on your consent, you may withdraw such consent at any time. You may withdraw consent for Marketing communications, Sharing information with third-party discount partners, Non-essential cookies. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal and does not affect your ability to make bookings.

Requests and supervisory authority : To submit a request regarding your personal data, you may submit a data request

Υou also have the right to lodge a complaint with the competent data protection authority : Hellenic Data Protection Authority (HDPA)
1–3, Kifissias Avenue, 115 23 Athens, Greece Phone: +30 210 6475600
Email: contact@dpa.gr Website: www.dpa.gr

10. Security of Personal Data

HOS implements appropriate technical and organizational security measures designed to protect personal data and information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or unauthorized access.

These measures include appropriate procedures relating to access control, confidentiality obligations, secure systems and the management of third-party service providers that support the operation of our services.

Our employees, associates and service providers who have access to personal data are required to process such information confidentially and only for authorized purposes.

HOS makes reasonable efforts to retain personal data only for the period necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by applicable law.

The retention period depends on the type of personal data and the purpose of processing, as follows:

Account details : Account information is retained for as long as your account remains active. If you close your account, your personal data will be deleted or anonymized after a reasonable period, unless retention is required for legal, contractual or legitimate business purposes.

Booking and payment records : Booking information, invoices, payment records and related transaction information are retained for the period required by applicable tax, accounting and legal obligations (10 years). After the applicable retention period expires, such information is securely deleted or anonymized.

Messages and booking communications : Messages exchanged through the platform regarding a booking are retained together with the relevant booking record and are deleted according to the same retention schedule applicable to the related booking information.

Marketing preferences : Information regarding your marketing preferences is retained until you unsubscribe, withdraw your consent or request its deletion.

Membership and discount partner preferences : Membership-related information and preferences regarding third-party discount benefits are retained for as long as necessary to provide membership services or until you withdraw your consent, subject to any legal obligations requiring further retention.

11. Hyperlinks to other websites

The website www.houseofshila.com may contain hyperlinks to third-party websites or platforms that are not operated or controlled by HOS. These websites are governed by their own privacy policies and data protection practices, which may differ from this Policy. We recommend reviewing the privacy policy of any third-party website before submitting personal data. Although HOS aims to provide links only to reliable services, we are not responsible for the content, security practices or privacy practices of third-party websites.

12. Third party services

To provide, maintain, improve, promote and protect our services, HOS may use trusted third-party services. These third parties may access, process or store personal data only where necessary to perform services authorized by HOS.

Such providers may include Payment service providers, Hosting and cloud infrastructure providers, Website and technology providers, Booking and reservation service providers, Communication and email service providers, Analytics and security providers, Professional advisors and service providers supporting our business operations.

HOS requires such providers to maintain appropriate security measures and process personal data only in accordance with applicable data protection legislation.

Booking-related third-party venues

Where a booking concerns a partner venue rather than a space directly operated by HOS, the relevant venue may receive the information necessary to provide the booked service. In such cases, the venue acts independently regarding the processing activities necessary for hosting and managing the event, while HOS remains responsible for its own processing activities. The information shared with a partner’s venue is limited to what is necessary for the specific booking, including Name, Contact details, Booking details, Event-related information required for preparation and hosting.

Automated booking confirmation

For approved members booking eligible HOS-owned spaces, the platform may automatically confirm bookings based on availability. This automated functionality only checks operational criteria, such as whether the selected space is available on the requested date. It does not assess personal characteristics, create profiles for decision-making purposes, or make decisions producing legal or similarly significant effects. If a booking is declined, you may request an explanation and ask for a manual review.

13. Policy Reviews

HOS reserves the right to amend or review this Personal Data Protection and Privacy Policy from time to time to reflect changes in our services, legal requirements, technology or business practices.

In case of amendments, the updated version of this Policy will be published on www.houseofshila.com together with the revised date of update.

We encourage you to periodically review this Policy to remain informed about how we process and protect your personal data.

Date of last update: 10.07.2026

14. Manage your data

Two things you can do right here: set your cookie preferences, and send us a request about your information.