For the processing of Personal Data of Hotel Customers and Website Visitors
Version 1.0 – 10.05.2019
Personal Data we Collect and Process
Personal Information is any information that relates to you as an identifiable person. In detail, the Personal Data we collect and process are described below:
When you use our Website, we also collect information automatically, some of which may be personal data. These include items like language settings, IP address, location, device settings, device operating system, usage time, redirect URL, etc. We can also collect data through cookies. Cookies are small files that store a website on a visitor’s computer and to which the Site has access to analyze the user’s behaviour. In detail, both the types of cookies that are present and the type of processing that is made are described in a separate policy (Cookies Policy)
We also use Google Analytics to analyze the use of our Website. Google Analytics generates statistics and other site usage information that is used to generate reports. In detail, the types of edits processed through Google Analytics are described in a separate policy (Cookies Policy)
In case of registration and / or access through a Social Login account, we can collect and access specific information about the user’s profile from the corresponding social network only for internal administrative purposes and / or for the purposes mentioned above.
We do not process minors’ data without the consent of the parent or guardian.
Edit special categories of personal data
How we collect and source Personal Data Data
The collection of personal data is usually from yourself but we may also collect your Personal Data from other sources as below:
Purpose of Collection and Processing of Your Personal Data
We process and use your personal data for one or more of the following purposes:
Some of these processing instances overlap to a certain extent and, in total, constitute legitimate bases and legitimate purposes within which we process your personal data.
Your personal data will be used solely for the purposes for which it has been collected. If we are required to use your personal data for any other purpose, you will be informed and notified of the legal basis on which the processing will be based or your consent may be requested.
In any case, your personal data is processed in accordance with the principles hereof and the rules of the Personal Data Protection Regulation.
Automated decision making, including profiling
We do not make decisions that can have a significant impact on you, including profiling, in an automated way (decision-making exclusively with the use of a computerized system)
When and how we share or disclose Personal Data we receive with others
Data transmission will be made by ensuring (where feasible) that these third parties process your data with absolute confidentiality, taking appropriate security measures to protect them in accordance with our policies and not using your personal data for our own purposes or any purpose other than those agreed upon.
Specific data may be passed on to your relatives only with your prior consent or in an emergency.
In addition to the above, the Hotel will not transfer personal data to any third party unless it is legally obliged to do so or when it has to comply with its contractual and legal duties (the tax authorities or the police performing our audit duties)
The Hotel will not sell your personal data to third parties under any circumstances and will not allow third parties to sell the data they have forwarded to them.
We work with third parties to offer you online reservation services such as booking.com or Web Hotelier and Channel Managers. Although we provide the content on these websites and you make a reservation directly to us, the processing of the reservations is made by third parties. The data you give to these third parties is stored in one or more databases hosted by them. These third-party companies do not use or access your personal information for purposes other than managing reservations.
Disclosure of Personal Data
We will use and disclose personal information as we think is necessary or appropriate:
International Transfers of Personal Data in Third Countries
Sometimes your personal information may be transferred to third countries outside the EU for the purposes described in this policy. The transfer of personal data to a third country or international organization may take place if the European Commission has determined that these third countries offer an adequate level of protection or appropriate safeguards (eg standard contractual clauses which have been approved by the European Commission); and provided that there are enforceable rights and effective remedies for you.
Your Rights on the Protection of Personal Data
In addition, in cases where we process your personal data on a legitimate interest or in the public interest, you have the right to express your disagreement at any time regarding this use of your personal data in accordance with applicable law.
If you have given your consent to the use of some of your data, you also have the unlimited right to withdraw it at any time. Recalling your consent means that we will stop processing the data you have previously given your consent. The hotel, of course, reserves the right to determine what information should continue to be retained in order to fulfill its tax and legal obligations in general. There will be no consequences for the withdrawal of your consent beyond the hotel’s inability to perform this treatment.
You can exercise your rights by contacting the Hotel or by sending an email to privacy@ <domain> or using the Data Submission Form. If you exercise any of your rights in writing with a request, we will take every possible action to process your claim within thirty (30) days of receipt and we will inform you either of its satisfaction or of the reasons for your satisfaction of. If you do not receive a response within 30 days or are not satisfied with our response, you have the right to complain to the Data Protection Authority.
You have the right to complain to the Data Protection Authority, which enforces data protection laws, if you have concerns about how the Hotel is processing your personal data or you are dissatisfied with our response to your complaint or request.
Hellenic Data Privacy Authority
1-3 Kifissias str. 115 23, Athens
Tel: + 30-210 6475600
Fax: + 30-210 6475628
email: [email protected]
Protection of your personal data
Data is stored in a variety of resources, including the physical file, the Site, the Property Management System, and other IT systems (including email). The data are stored in the whole and the format they are submitted to, without any interference with their content.
We have put in place a series of technical and organizational security measures to prevent the unauthorized or unauthorized use or access of your personal information, accidental loss or damage to their integrity, change or disclosure. In addition, we restrict access to your personal information only to those who have a business need to know. They will only process your personal information in accordance with our instructions and are subject to a confidentiality obligation. Your Personal Data will be processed by a Third Processor only if he agrees to comply with the specific technical and organizational data security measures.
In case of a breach of data security we will notify you and any applicable regulatory bodies where we will be legally obliged to do so.
Questions, Concerns or Complaints
Connections to Other Websites and Social Media
Third-party companies active in the hotel.
In detail the third companies operating in the Blue Sea Hotel are the following
Amendments to this policy
Updates will be posted on the Hotel’s website at the following address and will be marked with a publication date so that you always know when the policy was last updated.