General:
When you make a booking through our Website, you enter into a contractual relationship with us. A necessary condition for completing a reservation through our website is the collection of your personal data. Your personal data is collected following your express consent (in order to be able to fulfill our contractual obligation towards you) for specified, explicit and lawful purposes and is not further processed in a manner incompatible with these purposes (Article 5 chapt. 1b of Regulation (EU) 2016/679). In this contractual relationship in which You are the Subject of Personal Data, our Company acts either as a Controller of your Personal Data or as a Processor (Article 4 of Regulation (EU) 2016/679).
Personal Data we collect and how we collect it:
Although in some cases we will ask you to provide us with your personal data, for example, so that you can purchase services (and we will make it clear to you exactly what we need from you at that time), you may still visit many pages on our website, without having to provide us with any information related to your personal data.
Handling of information
We would like to inform you that your information is processed outside the country where our servers and central database are located and operate. Although the applicable data protection legislation and other laws of the European Union are as complete as those imposed by the legislation in Greece, please be assured that we will make every effort to ensure that your personal data is processed in accordance with national legislation and any other relevant applicable legislation. In addition, in order to process your data as described in this policy, we may need to transfer your information to other countries, including for example countries outside the European Economic Area (EEA) but whose legal framework is in full compliance with the provisions and the level of security required by Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 for the protection of natural persons against the processing of personal data and for the free circulation of such data. We always take measures to ensure that your personal information is transferred, stored and processed in accordance with the appropriate security standards provided for in the above Regulation and in accordance with the terms of this Privacy Policy and applicable data protection laws.
Your rights
As a Data Subject you have the right to access your personal data processed by our Company as well as the right to request the correction of any inaccurate data concerning you (art. 15 of Regulation (EU) 2016/679). Bearing in mind the purposes of the processing carried out by our Company within the framework of the contractual relationship between us, you can also request the completion of incomplete personal data, including through your additional statement to our Company (art. 16 of Regulation (EU) 2016/679).
Right of access – You have the right to access the personal data we handle. You also have the right to receive certain information about what we do with your personal data. This information is provided in this document.
Right of rectification – Under certain circumstances, you have the right to correct your inaccurate personal data and to complete incomplete personal data. Please note that we may not be able to correct inaccurate personal data you have provided to us and that a fee may be charged for this change. Right to erasure ‐ In certain circumstances, you have the right to have your personal data deleted. This is the so-called “right to be forgotten”.
Right to restriction of processing – In certain circumstances, you have the right to restrict how we use your personal data.
Right to data portability – You have the right to receive your personal data (or to have your personal data sent directly to another data controller) in a structured, commonly used and machine-readable format from us.
Right to object ‐You have the right to object to certain types of personal data processing that we apply. This applies to all our activities based on our “legitimate interest”.
Finally, you also have the right to file a complaint with the relevant data protection supervisory authority. Your personal data is only stored as long as your account on our website is active. Otherwise, your data is stored for as long as is necessary for our company to be in full compliance with its legal obligations (art. 23 of Regulation (EU) 2016/679).
Amendments to the personal data protection policy
If we change the way we handle your personal data or the way we use cookies, we will immediately update this privacy policy and post it on this website.