WEBSITE GDPR PRIVACY POLICY

OLEG KOLOTSEY
HOTEL NARKISSOS
Eparchiaki odos Mesarias - Ancient Thiras , 84700, Kamari, Santorini, Greece
VAT ID No. : 109292988 TAX OFFICE: THIRAS

Personal Data Protection Policy of a Website

With effect from 25-05-2018

Thank you for visiting the Website of the Hotel HOTEL NARKISSOS - OLEG KOLOTSEY (hereinafter the “Company”).

Before using our website, please read carefully this Personal Data (PD) Protection Policy.

Introduction

The Company as controller informs you about the way that the information concerning you is collected and processed.

Personal Data (PD) shall mean any information relating to an identified or identifiable natural person.

The protection of your personal data is very important for the Company which takes steps towards that direction when you are visiting its Website.

This Personal Data Protection Policy sets out the type of information that we may collect during your visit on our Website and we inform you about the way that we use this information. When you voluntarily provide us personal data, such us your name, your address or your email address, we treat this information with absolute confidentiality. Without prejudice to any specific provisions of this Personal Data Protection Policy no personal information is being leased, sold, posted or shared to other companies, organizations or websites.

As reflected in the conditions of use of the website
https://www.flexi-book.net/narkissosflex/website/portal.php?language=en&action=gdpr_terms
and in the Cookies Police
https://www.flexi-book.net/narkissosflex/website/portal.php?language=en&action=gdpr_cookies
, the services provided through the website are aimed at a general audience, do not target minors and do not -knowingly- collect personal information from minors under 16 years of age.

The Personal Data Protection Policy is applied towards all the users of the website. This Policy is applied to the collection and the use of your personal information by the Company.

What information we collect from you

When you are visiting the Company’s website, we may collect data from you. Some of this data may be personal. These data may include the search history, the IP address, the screen resolution, the browser that you used, the operating system and the settings, the times of access and your reference URL. If you are using a mobile device, we may collect data that recognize the device, the settings and your location.

The Company reserves the right to collect non personal data to recognize the users (type of browser, kind of computer, operating system, internet providers etc.) or/and monitor IP Addresses by using corresponding technologies (cookies). Cookies are small text files that are stored on every user’s device without providing access to texts or files from the user’s computer. They are used to make access easier for the user during the use of specific services or/and pages of the Website, as well as for statistical purposes. For more information concerning the cookies used by the Website, please visit the page of Cookies Policy.

If you wish us to contact you through the communication form, we will compulsory collect your name and email address and the phone numbers.

If you choose to subscribe to the Company’s newsletter, we will collect your email address and your name.

If you choose to send us a message on our Facebook page, we will collect your name in order to meet your request.

How we collect your personal data

We collect your personal data directly from you. You provide us your personal data when you fill the registration/communication forms that are available on our website (communication form, newsletter application form).

Use - sharing of personal data
We use your personal data with a view to fulfilling your requests in order to manage your reservations at our hotel and send you special offers.

Your personal data that we collect through the website are not shared/transmitted to third parties.

Personal data storage - protection
The data center where your personal data are stored is located in Germany, as well as the backup copies.

Personal data retention period

The retention period of your personal data is determined as follows:

1. In case you fill the communication form, your personal data are retained for the next five years from the date of communication.

2. In case you subscribe to the newsletter, your personal data are retained for the next five years from the date of your registration to the service. Of course you can inform us at any time that you do no longer wish to receive our newsletter by sending us a relevant e-mail at [email protected], in which case your personal data are deleted.

As from the end of the period defined by the legal-tax obligation at the time (if any), your personal data are deleted.

Your rights with respect to the processing of personal data

You have the right to obtain information concerning your personal data that we have saved at any moment, in accordance with the legislation in force and without any charges. We may ask proof of your identity before we give you these data. In some cases, we may not be able to permit the access to specific personal data. For instance, if your personal data are related to personal data of other people or if they are preserved for legal reasons. In these cases, we will explain to you the reason for which you cannot access these data.

You have the right to request the correction - update of your data and the Company will immediately correct them.

You have the right to request the deletion of your personal data and the Company will immediately delete them. However, in some cases in which the legal and tax obligations demand the mandatory preservation of data, the deletion of the data may be prohibited. In these cases, we will explain to you the reason for which we cannot delete your personal data and for how long.

You have the right to request that your personal data will no longer be processed by the Company and the Company will immediately stop processing them. If this is not possible, we will explain to you the reason for which we are not able to stop processing your PD.

You have the right to request the limitation of the processing of your personal data by the Company and the Company will immediately limit their processing. If this is not possible, we will explain to you the reason for which we are not able to limit the processing of your PD.

You have the right to request the transfer of your personal data to another institution/organization and the Company will immediately transfer these data. However, in some cases due to documented obligations of the Company, your request may not be accepted.

In case there has been a proven leak of your personal data by the Company causing you material and non-material loss, you have the right to appeal to the relevant supervisory authority (Personal Data Protection Authority).

In case you exercise one of your abovementioned rights, our Company will take every step possible in order to fulfill your request within thirty (30) days from its reception, by informing you in writing for the fulfillment of your request, or for the reasons which prevent the exercise by you, or the fulfillment of one or more of your abovementioned rights in compliance with the General Data Protection Regulation (E.U.679/2016).

In order to exercise the above rights or if you have questions concerning our personal data protection policy or if you need assistance regarding the exercise or the comprehension of the confidentiality options, you can contact the confidentiality team at the email address [email protected] or write to us at the address:

OLEG KOLOTSEY
HOTEL NARKISSOS
Eparchiaki odos Mesarias - Ancient Thiras , 84700, Kamari, Greece
www.narkissoshotel.com

Changes in the personal data privacy policy

The company may modify this Personal Data Privacy Policy. Please check the Date of Application at the beginning of this Policy, in order to see when this Policy was last renewed. Every renewal will be applied when we post the renewed Policy.

If we make substantial changes in this Policy which broaden our rights to use the personal data that we have already collected from you, we will inform you and we will provide you the option to choose about the future use of these data.