Privacy policy

A.Introduction

Our Company, endotera chios apartments, (hereinafter the Company), takes seriously the protection of the privacy of its visitors, customers, suppliers, partners and employees. For this reason, we strictly follow this Privacy Policy (hereinafter the Policy), which ensures a high level of services offered and is based on the current legal framework. The personal data concerning you are collected and kept, for predetermined, express and legal purposes, for the absolutely necessary and legal times, and are lawfully and legitimately processed in a legal, fair and transparent manner, based on the applicable legal framework and with a method that governed by integrity and confidentiality. This data is each time appropriate, relevant, convenient and no more than is required, in view of the above legal and clear purposes, and it is accurate and, if necessary, submitted to an update.

B. Company Details 

The details of the Company, which you address or deal with in any way, are as follows:

enδόtera chios apartments,

EIRINI PSALTAKI

FURNISHED APARTMENT RENTAL SERVICES WITH CUSTOMER CARE SERVICES

PLATAION 12

CASTLE – CHIOS

VAT number: 141739858

C. Object

This Policy defines the terms and conditions observed by our company for the overall protection of the privacy of our visitors, customers, suppliers, partners, employees, as well as any natural person who transacts in any way with us, the personal data of which are processed for the purpose of providing hotel services and the users of the websites https://endotera-chios.gr

The purpose of this Policy is to inform you about how we collect, maintain and process information about you, such as the personal information you provide to us.

The Company reserves the right to modify and update this Policy, whenever it deems necessary, while any changes become effective from the time they are posted on the website.

Legal framework for personal data protection

The “legal framework for the protection of personal data”, from which this Policy derives, is understood under no. 2016/679 General Regulation of the Protection of Personal Data of the European Parliament and of the Council for the protection of natural persons against the processing of personal data and for the free movement of such data, Law 4624/2019 Official Gazette Issue A 137/29-08 -2019 and any Law or Regulation that has been issued in continuation or for the implementation of the above General Regulation, as well as any national law that is valid and applicable and concerns the processing and protection of personal data in general.

Ways we collect your information

We collect and process personal data about you whenever you use our services (whether those services are provided directly by us or by other companies or agents acting on our behalf), when you stay at the Hotel, when you use our websites or when you use our call centers or our mobile and tablet applications. Also, information about you is collected by us:

• Through the cookies of the browser you use when navigating our Websites, in order to respond, promote and accurately route your request. In this case, we may collect information about the type of browser you use for the purposes of administering our system and to compile aggregated information about visitors to our Website, of a purely statistical nature, which does not identify any natural person .

• When you use the contact forms to request more information or post a comment.

• When we contact you.

• When you connect to our rooms’ wi-fi.

Purposes of data collection

We are collecting your data so that we can provide you with the services you have requested and, on the other hand, aim to improve their level. In particular, we collect data for the following purposes:

1. The reservation of a room and other related services (e.g. compliance with required documents, according to current legislation, requests related to accommodation) and the stay at the Hotel (access to room, use of mini bar services, room phone, etc.)

2. For organizational reasons (e.g. list of customers arriving/departing within the day, customers with special offers)

3. To use data analysis tools to improve our websites, our products/services, our customer relations and in general to better respond to your needs.

4. To optimally manage and protect our business, our websites and our systems in general.

5. To comply with the currently applicable Greek and European legislation.

What data we collect

Depending on the purpose of your visit and the service you wish to receive through our Websites, the type of personal data we collect will include information such as name, address, email address, telephone number, license plate number, and additional information such as airline, flight number, etc.

In some cases, we may also need to collect sensitive personal data, such as medical data, in order to be able to respond to your particular needs e.g. any allergies. We only retain such information if we are required by applicable law or if you expressly provide us with your consent, in the context of providing our services, e.g. to provide a specific diet.

We reserve the right to collect, store and process different types of personal data about you. Particularly:

Customer ID

• Data for invoicing (e.g. VAT number, VAT number, bank payment card number)
• Date of arrival / departure and room number
• Preferences and interests: eg, preferred floor, type of bed, cultural interests
• Information about persons under the age of 18 is limited to name, nationality and date of birth and is provided to us only by the adult with parental responsibility (guardian or parent).
• During the provision of our services it is possible to create accounts/profiles, for which we may ask you to provide us with information, such as e.g. name, email.
• When ordering a product or service, we may request information to process your order, such as name, room details, etc.

Personal Data Retention Time

Our Company retains your personal data exclusively and only as long as necessary in order to fulfill the purposes for which we collected it (e.g. completion of a legal/tax process). In addition, depending on the amount, nature and sensitivity of the personal data, as well as the purposes for which we process it, we determine the time of the appropriate data retention period.

We have the right to anonymize your data so that it cannot be associated with you, to be used for research or statistical purposes, in which case we may use this information indefinitely, without further notice to you.

Third Party Access to Your Personal Data

It is our basic principle not to share your information with third parties for their own independent business or marketing purposes without your consent.

However, with the aim of providing the best services to you, we provide access to your personal data, or part of it, to our appropriately trained staff (hotel staff, IT department, marketing department, legal department, medical services, if necessary). Employees who have access to your personal data use encrypted passwords, which are renewed at regular intervals. In addition, we may share your personal data with trusted business partners who comply with the GDPR, but also with the competent authorities, in order to comply with the rules of accounting and taxation and in general with the rules of the current legislation, to confirm the our compliance with the policies that govern our services, as well as to achieve a higher level of security for the Company and the Hotels.

Your rights regarding the protection of personal data

The legislation for the protection of Personal Data provides you with the following rights, which you can initially exercise free of charge and based on what is provided for in the legal framework:

• Right of access, i.e. to be informed about your data we have collected and are being processed by the Company, their origin, the purposes and legal basis of their processing, any recipients or categories of recipients of the personal data, especially in third countries as well as their compliance time.
• Right to correct any inaccuracies in your Personal Data, to make them accurate, by submitting a relevant statement to the company with your accurate Personal Data.
• Right to complete any incomplete Personal Data of yours, so that they become complete, by submitting to the company a relevant statement with your complete Personal Data.
• Right to delete your Personal Information given the following cases:i. when your Personal Data is no longer necessary in relation to the purposes for which it was collected or otherwise processed, ii. when you withdraw your consent on which the processing of your Personal Data was based and there is no other legal basis for the processing, iii. when your Personal Data was processed without the existence of the necessary legal basis, iv. the obligation to delete your personal data is provided by law, v. when they have collected with the offer of information society services Personal Data of a child, following his consent or the consent is given or approved by the person who has parental care of the child
• Right to restrict the processing of your Personal Data, in the following cases: i. you dispute the accuracy of your Personal Data and until the Company verifies its accuracy, ii. when instead of deletion, you request the restriction of the processing of your Personal Data, iii. when the Company no longer needs your Personal Data for the purposes of processing, but such Personal Data is required by you to establish, exercise or support legal claims
• Right to object – to object to the processing of your data, unless there are compelling and legitimate reasons for the processing, which override your interests, rights and freedoms or for the establishment, exercise or support of the Company’s legal claims.
• Right to portability, i.e. to receive and transmit to another controller your Personal Data, which you have provided to our company, in an appropriate format, as long as the processing of your Personal Data has taken place with your consent or was necessary for the execution of contract between us.
  Right to withdraw at any time the consent (without retroactive effect) you have provided for a matter related to the Protection of Personal Data.

The above due rights may be limited due to the obligation to apply another law, as for example in the event that you request the deletion of data, while we are obliged to retain it by law.

For all of the above and to resolve any question regarding the current legislation on personal data, you can contact our company through the electronic contact form at info@endotera-chios.gr

Cookies

Cookies are small files that are stored on your computer, tablet and mobile phone, and generally on the device you browse with. Each cookie contains information such as the name of the website it comes from, its lifetime, and a value, which is usually letters and numbers. Cookies allow us to store various anonymous information, such as your browsing preferences or whether you have visited our website again.

In addition to our own website, we also use 3rd Party Services such as Google Analytics.

– Google Analytics Cookies: are used to collect and display statistical data from Google such as the browser used by users, how many times they have visited the website and from which website they were directed to ours. For more information about how Google uses your data, see https://policies.google.com/privacy