Update on the Processing of Personal Data

 

Introduction

We would like to assure you that for us, the protection of the personal data of the beneficiaries is of primary importance. For this reason we take appropriate measures to protect the personal data we process and to ensure that the processing of personal data is always carried out in accordance with the obligations set by the legal framework, both by us and by third parties that process personal data on our behalf.

 

 

Processing Officer – Data Protection Officer

The "Kalavrita Canyon" hotel, based in Kalavrita (Ethnikis Antistaseos & Skaltsa Street, P.O. 25 001, Kalavrita, Greece, tel: +30 26920 22004, email: [email protected]) informs that, in order to carry out in the best possible way to host you, processes the personal data of the beneficiaries, in accordance with the applicable national legislation and the European Regulation 2016/679 for the protection of natural persons against the processing of personal data and for the free movement of of these data (General Data Protection Regulation, hereinafter "Regulation"), as applicable.

For any matter regarding the processing of personal data, contact the Data Protection Officer directly by email: [email protected]

 

 

Personal data collected from you

Most of our Website can be accessed without submitting personal data. However, there are some sections where it is necessary to provide such information. In particular, through our Website we may collect the following personal data:

Name, email address and message content, which you provide when completing the online form in the "Contact" section of our Website and submitting your message;
Email address, which you fill in to subscribe to our newsletter (Newsletter). Following your registration, we will send you a confirmation email to the registered email address in order to verify your registration - your consent.

What is the purpose of processing and how we use your personal data

We only process the personal data you provide us when we have a legitimate reason to do so.

Legitimate reasons for processing your personal data are:

(a) the provision of the services you entrust to us and wish to receive from us.

(b) safeguarding and protecting our legitimate interests, both yours and ours.

(c) compliance with an obligation imposed by law.

(d) the consent you provide under the specific conditions set by the legal framework, in order to receive updates on future events and other actions of the hotel, but also for the purpose of taking photographs and/or videos, in the context of the above events and actions.

 

 

Where we transmit the data

The Association transmits personal data to third parties, to whom it entrusts the processing of personal data on its behalf (accounting office, IT Support). In these cases, the Association remains responsible for the processing of your personal data and defines the individual elements of the processing, and signs a special contract with the third parties to whom it assigns the execution of processing activities, in order to ensure that the processing is carried out in accordance with the applicable legal framework and that every natural person can freely and unhindered exercise the rights granted by the legal framework.

 

 

Storage Period

The period of data storage is decided based on the following specific criteria depending on the case:

When the processing is imposed as an obligation by provisions of the applicable legal framework, your personal data will be stored for as long as the relevant provisions impose.

When the processing is performed on the basis of a contract, your personal data is stored for as long as is necessary for the performance of the contract and for the establishment, exercise, and/or support of legal claims based on the contract.

For the purposes of sending newsletters and taking photos and/or videos in the context of the Association's activities, your personal data is kept until you withdraw your consent. This can be done by you at any time. The withdrawal of consent does not affect the lawfulness of the processing that was based on the consent during the period before its withdrawal.

To withdraw your consent, contact the hotel's Data Protection Officer, at the following contact details: Email: [email protected]

 

What are your rights in relation to your personal data

Every natural person whose data is processed by the Association enjoys the following rights:

 

 

Access right:

You have the right to be aware of and verify the lawfulness of the processing. Therefore, you have the right to access the data and receive additional information about its processing.

 

 

Right of rectification:

You have the right to study, correct, update or modify your personal data by contacting the Data Protection Officer at the above contact details.

 

 

Right to erasure:

You have the right to request erasure of your personal data when we process it based on your consent or in order to protect our legitimate interests. In all other cases (such as indicatively when there is a contract, an obligation to process personal data imposed by law, public interest), the right in question is subject to specific limitations or does not exist as the case may be.

 

 

Right to restrict processing:

You have the right to request restriction of the processing of your personal data in the following cases: (a) when you dispute the accuracy of the personal data and until verification is made, (b) when you object to the deletion of personal data and request instead of deletion the restriction of its use, ( c) when the personal data is not needed for the purposes of processing, but is nevertheless necessary for the establishment, exercise, support of legal claims, and (d) when you object to the processing and until it is verified that there are legitimate reasons that concern us and override the reasons for which you object to the processing.

 

 

Right to object to processing:

You have the right to object at any time to the processing of your personal data in cases where, as described above, it is necessary for the purposes of legitimate interests pursued by us as controllers, as well as to processing for the purposes of direct marketing and consumer profiling.

 

 

Right to portability:

You have the right to receive your personal data free of charge in a form that will allow you to access it, use it and process it with commonly used processing methods. You also have the right to ask us, if technically possible, to transfer the data directly to another data controller. This right of yours exists for the data you have provided to us and their processing is carried out by automated means based on your consent or in execution of a relevant contract.

 

To exercise any of your above rights you can contact the Data Protection Officer (DPO) email: [email protected]

 

 

Right of complaint to APDPH

You have the right to submit a complaint to the Personal Data Protection Authority (http://www.dpa.gr): Telephone Center: +30 210 6475600, Fax: +30 210 6475628, Email: [email protected]

 

 

Security of Personal Data

The hotel implements appropriate technical and organizational measures aimed at the safe processing of personal data and the prevention of accidental loss or destruction and unauthorized and/or illegal access, use, modification or disclosure thereof. In any case, the way the internet works and the fact that it is free to anyone does not allow guarantees to be provided that unauthorized third parties will never be able to violate the technical and organizational measures in place by accessing and possibly using personal data for unauthorized and/or illegal purposes.