In the context of the application of the General Data Protection Regulation - GDPR (EU) 2016/679 and Greek law 4624/2019 as applicable each time, we collect and process the personal data that you provide to us.
PRIVACY POLICY
Which personal data are collected and from where
The personal data that we collect through the site https://thallos-santorini.gr are the ones that we ask you to declare to us through the specific fields of the website, in particular your name, father’s name, email, mobile/landline.
In addition, we may collect data from your computer, phone or tablet or any other device you use to access our services, such as an IP address, browser and language you use, device location, if you have these programs enabled, and information collected through the cookies we use or from other websites that you have visited and have allowed them to use cookies.
Also, in case the browser asks for permission to download your location from our website, this information can be used to provide more personalized information.
In any case, the forms that you will be asked to fill in for the completion of the reservation do not record data on the server, they simply send them to the email info@thallos-santorini.gr
In order to make a reservation through the website, you must provide your credit or debit card details (if you choose to pay by credit card) or provide us with your bank account details to confirm the deposit.
Your data are registered and stored by us until the full repayment and clearing of financial outstanding issues (e.g. due to cancellation of reservation-refund) and are destroyed after the completion of these actions.
In no case do we transfer this information to third parties and we have ensured their safe processing from malicious attacks by third parties.
The banking institution with which you cooperate is responsible for any further processing of these data in the context of the transactions that you will have with us, and guarantees the safe trading environment, in accordance with its internal regulation.
In any case, we try to limit the collection and processing to only those personal data that we consider necessary for the purposes for which you use our website (booking a room and your stay in it, i.e. for our contract for the provision of tourist accommodation services).
They are collected and processed only after you have filled in the fields and registered on the website to make your reservation.
For your stay, you will be required to provide us with other personal data (e.g. TIN / Tax Office for the issuance of the foreseen tax document, contact address), as well as personal data that may be necessary for the optimal quality of the services provided (e.g. nutritional habits, age, etc.).
In addition, you may need to provide us with medical information concerning you or persons who will be staying with you in order to be forwarded to the competent health authorities or doctors for the protection of your own health and the health of the other customers or staff of our enterprise.
All the information you provide to us shall remain confidential.
You may also need to provide us with personal data of third parties who will either stay with you (e.g. children) or persons on whose behalf you are making the reservation.
We consider that you have their consent for the use and processing of their data by us.
The use of this website may only be made by persons aged 16 and over.
Personal data collection and processing purposes.
The data that we collect from the website https://thallos-santorini.gr and the data you provide us in the ways mentioned above, are processed only for the purposes for which they are requested, in particular, for the creation of a customer file, for the fulfilment of our obligations towards you regarding your stay in our accommodation, for reasons of communication with you in case of cancellation or confirmation of reservation, for communication with you in order to inform you about the future services of our business, for any offers/accommodation packages, to update your personal data, for technical support and for any other cases as provided for by personal data protection laws.
In any case, you are always free at any time, once the cooperation between us is terminated and the financial or legal pending issues are fully settled, to request the erasure of your personal data from our files, in the manner indicated below.
The maximum period that we keep your personal data in a file is 5 years from the last update, if you do not ask us to delete them earlier.
After the end of the above period, your data is safely erased, as required by law.
In the event that any of your personal data collected has changed, please let us know in time so that we can update such data.
The processing of your personal data mainly concern their collection, registration, storage and organization, their adaptation, alteration, retrieval, search, transmission where permitted by law and the contract between us, their association, restriction, erasure or destruction.
Personal Data Security - Subject Rights.
All data collected electronically and processed in electronic format are protected against malicious attacks by third parties and leakage to third parties, based on special and approved protection software.
Access to your personal data is done exclusively by the person in charge of the business, Eleni Gkouni or possibly by employees of the company assigned to such purpose, who have been properly trained on how to store and process personal data, as well as by the responsible IT partner of the business.
Your personal data are not transmitted by us to third parties, except for public financial services in case of control or whenever required by law (e.g. submission of tax documents, provision of medical information to prevent the spread of a virus or epidemic) and in case we are obliged in a legal way to forward them to prosecutors/judicial/health authorities.
In addition, we may need to forward some of your personal data and only what is necessary to our third partners, when you have requested it in the context of the benefits of the contract between us (e.g. to a courier company in order to send you something, to a vehicle rental company), who are in turn responsible for the management of your personal data that we provide to them upon your consent.
Our website is not responsible for the management of personal data followed by the owners of the special links (hyperlinks, banners), which may appear on our website.
Moreover, this Privacy Policy does not apply to third party practices that are not under the ownership or control of the administrator, including:
- third party websites
- third party services
- third party applications
- Internet sources to which links to the website refer
You have the right at any time, to ask us to rectify or update your personal data and generally to guide us as to how you want personal data to be processed, always within the scope of the relevant laws, and you also have the right to ask us to send your personal data to third parties and after the termination of our cooperation and any legal pending issues, you have the right to ask us to erase the personal data partially or totally, regardless of the erasure of such personal data by us at the time specified above.
We will respect and implement your requests, provided of course you submit them within the scope of the law and in good faith.
You also have the right to object to the processing for purposes unrelated to the tourist services contract or to withdraw your consent freely without prejudice to the lawfulness of the processing based on your consent before you withdraw it.
If any personal data we have about you is not accessible through our website, you can send us your request at no cost. To withdraw your consent, you can send an e-mail to the contact email at https://thallos-santorini.gr.
Eleni Gkouni, is the controller of your personal data.
Finally, you have the right to report any violation that you find in relation to the above to the Hellenic Data Protection Authority (www. dpa.gr):
- Call Center: +30 210 6475600,
- Fax: +30 210 6475628,
- E-mail: contact@dpa.gr
COOKIES POLICY
Cookies and web beacons are technologies that speed up your browsing of a website, give you access to the privileges of a website and possibly record the usage you make on the website.
Cookies are small pieces of information that are stored as text files from web browsers (e.g. internet explorer, Firefox) on your computer’s hard drive. Most of these programs are designed to accept cookies
Our website uses technical/functional cookies, which are necessary for the operation of the website.
Our website is not responsible for cookies used by third parties (e.g. Google, Facebook, cookies used by the browsers you use for your internet browsing), which are governed by the privacy policy of each third company.
It also uses cookies on how users use our website to improve its function and content and the user/visitor experience (Google analytics)
UPDATE & AMENDMENT OF THIS POLICY
The website https://thallos-santorini.gr reserves the right to modify/update individual parts of this privacy policy without any prior notification of customers-users.
We ask that you always read the Privacy Policy before using our website to be informed of the current version of the policy.
Date of Privacy Policy: 30/07/2020