PERSONAL DATA PROTECTION POLICY
The Company respects and is committed to protecting the personal data and personal privacy of each visitor / user of the Website. This Personal Data Protection Policy (hereinafter referred to as "the Policy") defines this commitment of the Company as it summarizes the data that the Company may collect or process, how to use them as well as information on the actions in which it may or the visitor / user of the Website must proceed to the processing of his personal information during his visit to the Website.
The Policy may be reviewed and / or updated at any time without notice. The Company will post the current version of the Policy, in order to inform the visitor / user, who will be considered to accept the new Policy by continuing to use the Website or its services. For this reason, every visitor / user of the Website is requested to check the Policy at regular intervals.
The management and protection of the personal data of the visitor / user of the Website is subject to the terms of this section as well as the relevant provisions of Greek law for the protection of the individual from the processing of personal data as supplemented by the decisions of the competent administrative principle but also of European law (in particular Regulation 2016/679).
If a visitor / user does not agree with the terms of the Policy provided in this section must not use the pages / services of the Website.
1. WHAT DATA DO WE COLLECT?
The visitor / user of the Website may in principle visit the entire Website and its individual subpages, without disclosing his identity and without providing any personal information. However, for the access and / or use of the visitor / user of certain areas or services of the Website, the registration of the visitor / user may be required in order to obtain a password and / or the collection and processing of personal data and for specific purposes, such as referred to in this Policy.
The data we may collect includes:
Basic information (such as first name, last name)
Contact details (such as address, telephone, email address)
Information provided by the visitor / user
Information legally collected from publicly accessible sources
2. HOW WE PROCESS THE DATA
The Company will be able to keep a file and process the personal data of the visitor / user, which will be contained in its knowledge, through the Website. The collection and processing of personal data by the Company will be done only with the consent of the visitor / user, who will provide them voluntarily in order to provide access to the above applications or services that will be available through the Website.
The registration of the data of the visitor / user during his registration in the Website will imply his consent in the collection, use and transmission of these according to the terms of this Policy. The visitor / user, however, will be further specifically and explicitly requested to give their consent to this, accepting this Policy before completing the registration process.
In particular, the visitor / user will accept and consent as the Company under the terms of applicable law as in force, will keep a file and will process his personal data collected through the Website, in order for the visitor / user to access provided electronic applications, its service, support and execution between the visitor / user and the Company transactional relationship, as well as for statistical reasons and for information purposes and promotion of products and services of the Company after special visitor / user consent.
It is clarified that the personal data processed by the Company, are intended exclusively to ensure the operation of the respective service of the Website and may not be used by the Company or any third party, without complying with the provisions of applicable legislation on protection against processing. personal data, as it applies each time. The Company acts in accordance with current legislation and aims at the best application of good practice regarding the internet.
The personal data, which will be collected by the Company through the Website, will be safely kept for as long as the visitor / user is registered in a service of the Company or is required based on the intended purpose and will be deleted after any expiration of the transactional relationship of the visitor / user with the Company or if the processing reasons mentioned herein disappear, taking into account any obligations of the Company under the applicable legislation.
Recipients of such data may be, in addition to the Company, related legal entities or cooperating companies that mediate for the promotion, support and service of the transaction and only for the purpose of providing electronic communications services or any provision value-added services requested by the user and always under the conditions of the applicable legislation. Unless expressly provided in the Policy or required by law and / or the competent authorities (such as the competent judicial, police and other administrative authorities upon their lawful request), the Company will not otherwise make any notification, notification, transmission, dissemination or any other form of provision of any information provided by each visitor / user without his consent.
The security of the personal data of the visitors / users of the Website is of the utmost importance for us. The Company is committed to ensuring that it takes appropriate technical and organizational measures to protect the integrity, confidentiality and availability of visitors '/ users' personal data against unauthorized access, use, disclosure, alteration or destruction in accordance with applicable law. protection of personal data. However, despite the fact that we make every effort to protect the data of visitors / users, the Company is unable to guarantee the security of the information provided on the Website as this is the responsibility of the visitor / user.
3. RIGHTS OF THE VISITOR / USER
The visitor / user reserves at all times the rights provided under the current legislation for the protection of personal data (and primarily of Regulation 2016/679) and under its terms and conditions, namely:
the right to be informed about the data we are processing
the right of access to the data we hold
the right to correct them
the right to delete them
the right to restrict or object to the processing of his data
their portability to another controller or processor.
In the event that the visitor / user objects to the processing of his data by the Company or wishes to revoke his consent (which will have been given previously), the Company will comply with the relevant instructions in accordance with its legal obligations, provided they are given in writing . It is noted that the objection or revocation of consent will mean that the Company will not be able to meet the implementation of the objectives stated in this Policy. The withdrawal of consent is valid only for the future and does not affect the legality of the processing based on the consent before its withdrawal. The Company will be able to process the data even after the withdrawal of consent only to the extent permitted by law in order to meet its legal obligations and / or to defend its rights.
In case of exercise of one of the above rights, the Company will take all necessary measures to satisfy the relevant request within the time limits provided by law by informing the visitor / user in writing of the satisfaction of the request, otherwise for the reasons that prevent the exercise. or the satisfaction of that right.
To exercise his rights, each visitor / user can contact the Company and submit his request in writing to the following email address [firstname.lastname@example.org to the Data Protection Officer].
Also, every visitor / user has the right to contact the competent supervisory authority (Greek Personal Data Protection Authority), which examines written complaints in accordance with the instructions provided on its website (www.dpa.gr), in case it objects in the processing by the Company of its data.
TRAVEL STATISTICAL INFORMATION
In some cases, technical information that is not personally identifiable may be collected automatically (eg not through registration) when a visitor / user visits or uses the Website. Examples of this type of information that can be collected are browser, computer operating system, domain name of the website from which it was linked, location.