Terms of Use - Personal Data Protection Policy
Preamble
This Policy has been designed in accordance with the statutory provisions
of the General Data Protection Regulation of the European Union (Regulation
2016/679) (hereinafter “GDPR”) which entered into force on
May 25, 2018, L. 4624/2019 and the other European and national legislation.
This Policy applies to the website
www.pleiadesvillasnaxos.com
(hereinafter the “Website”) owned and operated by the sole
proprietorship “IOANNA IAKOVOU SERGI” under the distinctive title “PLEIADES
VILLAS NAXOS” (General Commercial Registry No. 155326338000, T.I.N.
159129272 and Operation Notification No. 1163261/01.07.2020) (hereinafter
the “Enterprise” or “ Pleiades Villas Naxos” or “we / us”). The
scope of business of Pleiades Villas Naxos is the exploitation and
operation of tourist accommodation and specifically self-sufficient villas.
Its registered office is in Chora Naxos, Angidia P.C. 843 00 and this is
the address to which all formal communication shall be addressed. Our
contact number is +30 6942914588. If a user that enters the Website has any
question regarding this Policy he/she may address and contact with Pleiades
Villas Naxos via e-mail using the following e-mail address:
pleiadesvillasnaxos@gmail.com.
This Policy describes the way in which Pleiades Villas Naxos in its
capacity as a Data Controller uses and protects the personal data
(hereinafter the “Personal Data”) which you communicate to
it when using the services either provided through the Website or using the
services provided by Pleiades Villas Naxos (reservations, accommodation in
the villas owned by Pleiades Villas Naxos). This Policy also describes the
way in which Pleiades Villas Naxos collects, transfers, processes, uses and
discloses your Personal Data and determines its policies regarding the
secure processing thereof.
By providing your Personal Data to Pleiades Villas Naxos (either directly
or allowing another person to do so), you agree that this Policy will apply
to the way that Pleiades Villas Naxos uses your Personal Data and you
consent to Pleiades Villas Naxos collecting, transferring, processing,
using and disclosing your Personal Data, as detailed in this Policy. In
case that you do not agree with any part of this Policy, you must not
provide your Personal Data. If you do not provide Pleiades Villas Naxos
with Personal Data or withdraw a consent that you have given under this
Policy, this may affect our ability to provide services to you or
negatively impact the services we can provide to you.
This Policy does not in any way cover the relations between you as users of
the Website and any services that are not subject to the control of the
Website or owned by it, but they are provided by another associate, when
the Website refers to them via a link. In view of the nature and the great
amounts of information on the internet, Pleiades Villas Naxos shall not be
responsible in any case, including, without limitation, in cases of
Pleiades Villas Naxos’ negligent act or omission, for any kind of damages
sustained by you when using the websites, services, selections and contents
of the Website on your own initiative and being aware of the terms of this
Policy.
I. Collection and Use of Personal Data
When contacting with us or entering into an agreement with us, we collect
information necessary for the reservation or rental of the villa and your
stay in it.
In addition, in order to improve our services and adapt them to your
requirements, as well as to manage our communication following your stay,
we collect and process additional contact information with your express
consent, where necessary in accordance with the applicable legislation..
A. In particular, we may collect and process the following Personal Data
• Personal data, such as name, last name, middle name, email address,
telephone number, type and identification form number (e.g. passport,
identity card), home address, date of birth, nationality, etc.
• Credit card details (card type, credit card number, name referred in the
card, expiration date and security code) (only in case of booking through
the Website) and billing information, such as business card, credit card
number, T.I.N. and Tax Office, if an invoice is requested
• Guest details, such as number of guests (including number of any minor
children and details thereof if required by applicable law), dates of
arrival and departure, dates of stay, any special requests, comments on
service preferences (including room preferences, amenities or other
services used)
• Medical data related to your health: indicatively food and other
allergies, mobility problems, which are collected and registered at your
request for your convenience.
• Information you provide about your advertising preferences when
participating in surveys, contests and promotions.
You can always choose what kind of Personal Data you wish to give us (and
if you wish). However, if you choose not to provide us with certain
Personal Data strictly necessary to make your booking, this may have an
effect on the relevant transaction.
B. Data we automatically collect
When you use the Website, we may also collect information automatically,
some of which may constitute Personal Data. These may include data, such as
language settings, IP address, location, device settings, the device
operating system, activity information, usage time, redirect URL, status
report, user information (information about browser version), operating
system, browsing result (simple guest or booked visitor), browsing history,
the type of data you saw.
II. Purposes for Processing and Legal Basis
1. Purposes for Processing
The Enterprise uses your Personal Data for the following purposes:
A. Reservations: we use your Personal Data to complete, provide and
generally address and manage your reservation.
B. Customer Services: we use Personal Data to provide customer services,
such as cooperation with car rental companies, taxi companies, etc.
C. Customer Feedback: we may use your contact information to send you an
email invitation to submit comments after your stay. In this way, you can
help other travelers to choose the accommodation that suits them best. If
you submit a comment, your comment may be posted on the Website.
D. Marketing Actions: we may also use your information for marketing
actions as permitted by law and subject to your express consent. When we
use your Personal Data for direct marketing purposes, such as advertising
newsletters and promotional communications for new products and services or
other offers that we believe may be of your interest, we include a deletion
link, which you may use if you do not wish to receive such messages from us
in the future.
E. Other communications: there may be times when we contact you via email,
post, phone or text message, depending on the contact information you have
shared with us. This can be done for several reasons:
a. We may need to respond to and manage requests you have made.
b. If you have not completed your booking online, we may send you a
reminder email to continue your booking. We believe that this additional
service is useful since it allows you to continue your booking without
having to search the property again or fill in all your booking details
from the beginning.
c. When you use our services we may send you a questionnaire or invite you
to write comments about your experience from our website. We believe that
this additional service is useful for both you and us since based on your
feedback we will be able to improve our website.
F. Security, detection and prevention of fraud: we use information, which
may include Personal Data, to prevent fraud and other illegal activities.
We also use this information to investigate and detect fraud. We may also
use Personal Data for risk assessment and security purposes, including user
identity verification. For these purposes, the Personal Data may be shared
with third parties, such as law enforcement authorities, as permitted by
applicable law, and with external advisors.
G. Legal procedures and compliance: in some cases we need to use the
information provided, which may include Personal Data, to manage and
resolve legal disputes or complaints, for regulatory investigations and
compliance or for the implementation of the agreement(s) or to comply with
legitimate requests from law enforcement authorities, to the extent
required by law.
If we use automated means of processing personal data that have legal
effects or that significantly affect you, we will take appropriate measures
to protect your rights and freedoms, including the right to human
intervention.
2. Legal Basis for Processing
With regard to purposes A and B the legal basis of the processing is the
performance of an agreement: the use of Personal Data may be necessary for
the performance of an agreement between us. For example, if you use our
services and the Website to book online, we will use Personal Data to
fulfill our obligation to complete and provide the booking as part of our
agreement.
With regard to purposes C-E, we rely on our legitimate interests; we use
Personal Data for our legitimate interests, such as providing you with the
best and most appropriate content for the Website, emails and newsletters,
to improve and promote our products and services, the content of the
Website, as well as for management, fraud detection and other legal
purposes. When we use Personal Data to serve our legitimate interests, we
always prioritize your rights and interests with respect to the protection
of such Personal Data over our own rights and interests.
With regard to objective F-G, we also rely, where applicable, on our
obligation to comply with applicable legislation.
Where required by applicable law, we will seek your consent before
processing your Personal Data, especially for direct marketing purposes.
You may withdraw your consent at any time by contacting us at any of the
addresses in the preamble of this Policy.
III. Protection and Retention of Personal Data
Pleiades Villas Naxos takes appropriate legal, organizational and technical
measures in order to protect your Personal Data, in accordance with the
applicable legislation for privacy and data security. We use various
technologies and procedures in order to protect your Personal Data from any
illegal destruction, loss, misuse or modification, as well as against any
unauthorized or illegal processing, use or disclosure.
We retain your Personal Data for as long as we deem necessary to provide
our services, comply with applicable law, resolve disputes with various
parties and anything else necessary for the purposes of our business
activity, including detecting and preventing fraud or other illegal
activities. All Personal Data retained by us is subject to this Policy. If
you have any questions about a specific retention period for certain types
of Personal Data, please contact us at the contact details found herein.
We will delete or re-identify your Personal Data once they are no longer
required for the provision of our services and/or for our business purposes
and/or for the performance of an agreement we have entered into and/or for
legal purposes, or as required otherwise by the applicable legislation for
the protection of Personal Data from time to time.
IV. Disclosure of Personal Data to Third Parties
As part of our business activity, the limited disclosure of your Personal
Data to third-party partners or third-party service providers with a fully
defined purpose and strictly on our behalf may be necessary. This
processing - disclosure shall take place for the purposes included in this
Policy, such as for customer services (car rental companies, etc.),
facilitating booking payments, sending marketing materials or supporting
analysis services. These third-party partners / service providers (data
processors) are bound by confidentiality terms and they are not permitted
to use your Personal Data for their own purposes or for any other purpose
other than within the scope of their business and their remit. The
disclosure of such Personal Data will always be subject to the commitment
of the third party partner / provider to implement a privacy policy of
Personal Data and to undertake the obligations arising from the relevant
legislation.
Save as provided otherwise in this Policy, we bound not to sell, rent or
otherwise publish or disclose your Personal Data to third parties and not
to disclose your Personal Data to third parties (individuals or legal
entities) unless:
a) you have provided explicit written consent and (i) the third party
(individual or legal entity associate/ supplier/ service provider of
Pleiades Villas Naxos) has provided sufficient guarantees in respect of the
technical and organizational measures governing the processing to be
carried out and (ii) the third party (individual or legal entity associate/
supplier/ service provider of Pleiades Villas Naxos) has entered into a
written agreement with Pleiades Villas Naxos which imposes on the third
party obligations identical to those imposed on us under the provisions of
Personal Data protection;
b) required in order for us to comply with the respective legislation and
only to any competent public prosecutor, police, criminal investigation and
judicial authorities in response to their requests;
c) in connection with any legal/judicial proceedings or prospective
legal/judicial proceedings;
d) in order for us to establish, exercise or defend its legal rights
–including information to regulatory, prosecution οr other authorities for
the purposes of fraud prevention and anti-counterfeiting, unauthorized use
and illegal activities-.
Unless otherwise specified in this Policy, we bound not to transfer your
Personal Data in third countries outside the European Union without your
prior written consent unless we and the recipients of such Personal Data
have entered into and use the standard contractual clauses approved by the
European Commission and annexed to the Commission Decision of 5 th February 2010 on standard contractual clauses for transfer of
personal data to processors established in third countries (2010/87/ΕU).
V. Your Rights
You are entitled to exercise the following rights arising from the
provisions of GDPR and the applicable national legislation which implements
or supplements GDPR or otherwise is related to the processing of
individuals’ Personal Data together with the binding directives and Codes
of Practice issued from time to time by the respective supervisory
authorities:
· The right to be informed about the processing of your Personal Data, as
well as the legal basis for such processing and all details related to it
(the processing);
-
The right of access and rectification of your Personal;
· The right to erasure your Personal Data in case they are no longer
necessary for the provision of any services;
-
The right to restrict the processing of your Personal Data;
-
The right to object to the processing of your Personal Data;
· The right to Personal Data portability to another data controller, i.e.
your right to receive data in appropriate format, so that their transfer to
another data controller is technically feasible.
In order to exercise the above-mentioned rights or for any enquiry you may
contact with us:
· Through the respective contact form or by sending e-mail to the following
e-mail address
info@pleiadesvillasnaxos.com
or
· By sending a letter to the address set out in the Preamble of this
Policy.
You are also entitled to withdraw at any time the consent you have provided
regarding the processing of your Personal Data (without retroactive effect)
following one of the two (2) ways described above.
Furthermore, you (a) are entitled to lodge a written complaint before the
competent supervisory authority regarding the protection of your Personal
Data, i.e. the Data Protection Authority (1-3, Kifisias Avenue, P.C. 115
23, Athens, +30 210 6475600, e-mail contact@dpa.gr) and (b) have the right
to an effective judicial remedy in case you consider that your Personal
Data have been violated.
VI. Links to other sites and limitation of liability from the use of
the Website
A. The Website may contain links to third party websites or include third
party websites. This Policy does not apply to these websites and Pleiades
Villas Naxos is not responsible for the privacy policies or practices of
such websites. If you choose to visit a linked site, you agree that
Pleiades Villas Naxos is not responsible for the availability of this site
and agree that Pleiades Villas Naxos does not control, sign or is
responsible in any way whatsoever for:
-
the way in which your Personal Data are addressed in these websites;
-
the content of such websites;
-
the use of such websites from other individuals
We encourage you to procure in advance and check always the disclaimers and
privacy policies published in each website or mobile application before
disclosing any of your Personal Data.
B. The Website is provided by Pleiades Villas Naxos “AS IT IS” and “AS IT
IS AVAILABLE”. We do not make any representation or authorization of any
kind, expressed or implied for the information, content and material
contained therein. For this reason, when using the Website you agree to use
it at your own risk. Pleiades Villas Naxos does not guarantee that the
Website, servers or emails sent through it do not contain viruses or other
harmful information. Pleiades Villas Naxos shall not be liable for any
damages of any kind that may arise by the use of the Website including, but
not limited to, direct, indirect, accidental, complex and consequential
damages.
VII. Applicable Law
The processing and protection of your Personal Data is governed by the
terms of this Policy, the provisions of GDPR, and the applicable Greek
legislation which implements or supplements GDPR or otherwise is related to
the processing of individuals’ Personal Data together with the binding
directives and Codes of Practice issued from time to time from the
respective supervisory authorities (see European Commission).
VIII. Amendments
Pleiades Villas Naxos reserves the right to update this Policy from time to
time and post the most up-to-date version on the Website at any time
without announcement. If substantial changes have been made we may post a
relevant announcement relating to the amendments on the Website or inform
you by sending a notification via e-mail and/or sms. We encourage you to
check the Website from time to time in order to determine whether there
have been any amendments, as well as to review from time to time this
Policy in order to keep informed about the way in which Pleiades Villas
Naxos protects the Personal Data it collects.
If you proceed with the use of the Website, this entails your agreement
with this Policy and any updates. If you do not agree with the terms for
the protection of Personal Data provided in this Policy you must not use
the services provided by us.
IX. Intellectual Property Rights
All content on the Website, such as but not limited to, texts, graphics,
trademarks, distinctive features, distinctive titles, images (regardless of
characteristics), digital files and software (hereinafter referred to as
the “Content”), is the subject of intellectual and/or
industrial property rights of Pleiades Villas Naxos, its exclusive property
and is protected in accordance with the relevant provisions of Greek law,
European law and international conventions. Any commercial and/or economic
exploitation and/or indirect use of the Website and all of its Content or
parts thereof, in particular for the benefit of another undertaking,
commercial or non-commercial, is be prohibited without the written consent
of Pleiades Villas Naxos,
This Policy was updated on March 5, 2021.