Contents:
Protection of Personal Data and Privacy · What is “Personal Data” · What is “Collection of Personal Data” · Is it mandatory to provide your Data · Personal Data collected by the Company · Purposes for the Use of Personal Data · Rights and Your Choices · Transfer of Personal Data – Who are the recipients of your data · How we ensure that Processors respect your Data · Personal Data Retention Period · Information Protection · What is the applicable law when we process your Data · Privacy Policy Amendment · Data Controller Details ·
Protection of Personal Data and Privacy
Our Company Eliza Hotel considers the protection of the personal data of visitors/users of its online store https://elizahotel.com/ to be of paramount importance.
For this reason, we have taken all the necessary actions in full compliance with the EU 2016/679 General Data Protection Regulation (GDPR), as well as with the national legislation Law 4624/2019, as applicable, to meet and ensure the requirements regarding with the protection of personal data, which we collect during your browsing of this website and the use of its services.
We assure you that when you disclose personal data to us or when we collect personal data concerning you, we always use it in accordance with this Policy and remain strictly confidential.
We would also like to assure you that we do not collect personal data of minors under the age of 18, nor do we process sensitive personal data of visitors/users of our online store.
Please read carefully this Privacy Policy, which describes how the Company, acting as a Processor, collects, stores, uses and generally processes your personal data when you visit, register or use the Company's website (www .https://elizahotel.com/) as well as when you deal with its physical stores, but also the way of using, sharing and protecting your personal data, the options you have regarding your personal data and how you can communicate with us, as its acceptance is considered as a free statement of your consent to the collection, use and further transmission of your personal data for purposes related to the browsing/use of this website and the services provided on it. If you do not agree with any part of this Policy, you are requested to refrain from any action, interaction, access, transaction and use of this website.
What is “Personal Data”
Personal data is any information concerning an identified or identifiable natural person (data subject), such as name, e-mail address, residential address, mobile phone number, purchasing habits, computer IP address, user-generated content, information of a financial nature and social welfare information.
What is "Collection of Personal Data"
Any act or series of acts performed with or without the use of automated means on personal data or sets of personal data, such as collection, registration, organization, structuring, storage, adaptation or alteration, retrieval, information retrieval, use, disclosure by transmission, dissemination or any other form of disposal, association or combination, restriction, deletion or destruction.
It is mandatory to provide your Data
Providing the Data to the Company may be necessary to achieve the purposes specified in this Privacy Policy or may be optional.
The mandatory or optional nature of the provision of Data is indicated by an asterisk (*) next to mandatory personal data.
If you refuse to provide the information marked as mandatory on the websites, it will be impossible to achieve the main purpose of collecting the specific Data, and it may, for example, make it impossible for the Company to fulfill the sales contract or provide the other services available on the websites.
The provision of additional Data to the Company, beyond those marked as mandatory, is optional and does not have consequences regarding the main purposes of data collection, but its provision serves to optimize the quality of the services provided.
Personal Data collected by the Company
Our Company's goal is to collect the necessary data each time that is necessary for the intended purpose. Some of the data we collect is mandatory in order to be able to carry out our purposes (e.g. sending the order), while others are optional in order to optimize the operation of this website.
Furthermore, when you browse www.https://elizahotel.com/ we automatically collect information about you, such as your IP address and domain name. This information may be used to provide you with a more personalized experience when visiting our online store.
However, in order to use the services of this website, you may be asked to provide personal data such as: name, postal address, telephone, e-mail address and if you want an invoice, you will also be asked for your company name, profession, tax registration number and the public financial service to which you belong.
In order to be informed about the offers in our services, you are invited to register, if you wish, your e-mail on this website, in order to be sent a relevant information sheet (newsletter).
You may also be asked to provide us with information about your location or your personal preferences and interests in order to provide you with more personalized services.
All information provided will be stored in our Company's databases, manually and/or by electronic means.
In any case, the Company provides you with the necessary information so that you are able to give prior consent to the processing of your personal data for one or more specific processing purposes. You can withdraw your consent at any time, easily and immediately. For cases where you are not provided with the option of automatically withdrawing your consent, contact our Company in any way and we will provide you with all the necessary information for the desired withdrawal.
Purposes for Use of Personal Data
The legal basis for the processing of your personal data may be based sometimes on your consent, sometimes on the obligation to perform a contract, where you will be a contracting party and sometimes on legal interests pursued by our Company or a third party.
Our Company, through its website www.https://elizahotel.com/ in compliance with the relevant provisions of the law, uses the personal data of the visitors/users it collects for the following purposes:
-Communication of our Company with you (to respond to your request to our Company).
-Managing the sale of our products/or services e.g. communicating and informing you about the availability of rooms and the progress of your reservation, issuing and sending your tax documents in electronic format (e-invoicing), managing your debts to the Company, making refunds and providing guarantees .
-Compliance with the obligations imposed by the current legislation, e.g. tax legislation, e-commerce directive, etc.
-Subscribe to the newsletter recipient list (newsletter with information on offers on products and services, the Company's news, events and events of the Company and/or third-party related organizations, discount coupons and contests).
-Sign up for our contests.
– Use of our services. Your personal data will be used to issue a relevant document from your transaction with our Company.
-Sending personalized information about news and services.
-Sending regular updates that the Company deems interesting for the user.
-Send information upon request about news and services.
-For market research and marketing purposes.
- To serve internal purposes of the Company's administration and improve the services provided.
-For "direct promotion" acts, which include any communication by the Company for the purposes of promoting products and services.
-To check, improve and adapt to your preferences and choices regarding our products and/or services.
All personal data collected and further processed by the Company are appropriate, sufficient and limited to the needs and purposes for which they are collected. We further process your personal data in a way that guarantees its accuracy, continuous updating and security, including protection against unauthorized or unlawful processing, accidental loss, destruction or damage, taking any technical and organizational measure deemed appropriate for the purpose this, in particular, through the encryption, coding, pseudonymization and anonymization of personal data, as well as monitoring control and regular recording of all processing procedures.
When consent is given for automated processing of your personal data, the Company collects and processes information based on your personal preferences and interests, only to provide you with personalized information and/or notifications about the Company's services and activities through actions direct promotion.
The Company undertakes to maintain the strict confidentiality of all the data it collects, maintaining access to them only as required in accordance with its normal activity.
Your Rights and Choices
The Company provides you with the possibility, by contacting the email address: info@elizahotel.com, to exercise the rights provided by law regarding the personal data it collects. Specifically, you have the following rights for your personal data:
- Right of Access - Information: You have the right to be informed about whether we process your data, what data we have collected, to whom we share it, the purpose of the processing and for how long we will keep it.
- Right to correct inaccurate information: You have the right to ask us to correct information about you that is inaccurate or even to fill in additional information. You can exercise this right yourself by logging into your account and correcting the corresponding fields of your profile, if this option exists.
- Right to Restriction of Processing: You have the right to request that we restrict or block the processing of some of your personal data.
- Right to Portability: You have the right to ask us to receive your personal data or to transfer it to another Organization on your behalf.
- Right to Object: You have the right, if the necessary conditions are met, to object to the further processing of your personal data.
- Right to Erasure – Forgetting – Withdrawal of Consent: You have the right to request in writing that we delete your personal data, as long as there are no legitimate reasons that override your right (e.g. tax and commercial legislation). You also have the right to withdraw your consent to the processing of your data based on your consent, without however affecting the legality of the processing before your withdrawal.
- Right not to receive marketing-related updates. You have the right to opt out of receiving communications at any time by clicking the "Unsubscribe" link in any email or newsletter we send you. Otherwise, you can contact us using the contact details listed at the end of the text.
Our Company, after examining each request based on the applicable provisions, will respond to you in writing within 30 days of receiving the request and identifying the applicant. This deadline may be extended by a further two months if necessary, taking into account the complexity of the request and the number of requests.
In addition, in case of exercising one or more of the aforementioned rights, these will be transmitted by us to any third party recipient, to whom they may have been transmitted in the context of the purposes of the processing.
Transfer of Personal Data – Who are the recipients of your data?
Access to your personal data is given to the absolutely necessary staff of our Company, who are committed to maintaining confidentiality. Some of your data, and in any case the absolutely necessary, may be shared with companies cooperating with us or third-party service providers, who provide transport, advertising, statistical or research services, communication, conducting competitions and website or commercial support our program, and who process your Data as Processors on our behalf and in accordance with our instructions and always in the manner described in this Privacy Policy. These partners of ours are prohibited from making use of the above information or sharing it for any purpose other than providing services on our behalf. The cooperating companies are committed to maintaining confidentiality regarding your data and not publishing it to third parties without the Company's permission, as well as taking appropriate security measures and complying with the legal framework for the protection of personal data. Finally, there is the case that our Company is obliged by law or on the basis of a judicial or other competent authority to publish your personal information.
The following is the policy we apply to those with whom we share your Data in accordance with the above:
-We provide only the information needed to perform their specific services.
-They can only use your Data for the exact purposes we specify in our contract with them.
-We work closely with them to ensure that your privacy is respected and protected at all times.
-If we stop using their services, any of the data you hold will be deleted or anonymized.
How we ensure that Processors respect your Data
The Processors on our behalf have agreed and contractually committed to the Company:
- to observe confidentiality,
- not to send your Data to third parties without the Company's permission,
- take appropriate security measures,
- to comply with the legal framework for the protection of personal data and in particular Regulation 979/2016/EU (otherwise known as GDPR).
Personal Data Retention Period
All personal data is kept by our Company for a predetermined and limited period depending on the purpose of the processing, at the end of which, the said personal data is deleted from our databases. The personal data you provide to our Company through this website or in other ways will be kept for as long as you wish to enjoy our services and the relevant updates as above.
Generally this means that we will keep your personal data for as long as you have an account with our Company. In relation to your Personal Data related to product purchases, we retain this data for a longer period in order to comply with our legal obligations (such as tax and commercial law and for warranty purposes). At the end of this retention period, your data will be completely deleted or anonymized, for example by aggregating with other data, so that it can be used in a de-identified way for statistical analysis and business planning.
In the case of a sales contract with our Company, through the elizahotel.com website, the reasonable time to retain your personal data is five years from the conclusion of the sales contract. The time that your personal data can be kept by our Company depends additionally on the relevant obligations of the Company provided for in the current Legislation (tax, commercial, etc.) and the provisions of the law for the maximum period of their retention. Your declaration of consent for the sending of a newsletter is kept for as long as the newsletter is sent to you by the Company, and in any case no longer than six months from the cessation of its sending.
Information Protection
Our Company, in order to prevent unauthorized access, maintain the accuracy of the data and ensure its appropriate use, has taken all the necessary organizational and technical measures to protect your personal data. However, no method of transmission over the Internet or method of electronic storage is 100% secure.
If you believe that your personal data has been affected in any way, you can contact or file a complaint with the Personal Data Protection Authority, as follows:
Website: www.dpa.gr
Postal Address: Kifisias Avenue 1-3, P.O. 115 23, Athens
Call center: +30 210 6475600
E-mail: contact@dpa.gr
What is the applicable law when we process your Data
Applicable Law is Greek Law, as formulated in accordance with the General Regulation for the Protection of Personal Data 2016/679/EU, and in general the applicable national and European legislative and regulatory framework for the protection of personal data.
The competent courts for any arising disputes related to your Data are the Courts of Athens.
Privacy Policy Amendment
The Company may at any time update or modify this Privacy Policy, in order to respond to any changes in the operation of this website, the services it offers and any changes in the provisions of the law. The most recent modification is always considered valid. For this reason you should check this Privacy Policy regularly, in order to be informed of its most recent version.
Details of Data Controller
For your questions regarding this Privacy Policy, but also any issue related to the processing of your Data and the exercise of your rights, you can contact the Data Protection Officer (DPO) of Eliza Hotel at the following address:
Editor: Eliza Hotel
Address: Ormos, Agios Nikolaos, 72100, Greece
Contact Phone: 694 434 8367
Email: info@elizahotel.com