PRIVACY POLICY
PROCESSING AND PROTECTION OF PERSONAL DATA
The Privacy Policy will apply to the facilities of the Akrogiali Exclusive Hotel and the digital environment regarding the activities carried out by LAZAROS GATSIOS AND CO OMORRYTHMI COMPANY which manages the Akrogiali Exclusive Hotel.
At Akrogiali Exclusive Hotel we respect and protect your privacy, as well as protect your personal data.
LAZAROS GATSIOS AND CO OMORRYTHMI COMPANY informs you that it will process and keep a record of your personal data for the purpose of your service during your stay at Hotel Akrogiali Exclusive Hotel as well as for the pricing and evaluation of our services by you .
Your personal data is kept and processed exclusively for the purposes stated or for which you have agreed and to the extent necessary for their fulfillment will be kept for the absolutely necessary period of time to serve the above purposes.
According to the General Data Protection Regulation 679/2016 / EU, you have the right of information, the right of access, the right of correction, the right of deletion, the right to restrict processing, the right to data portability, the right to object to the processing of your personal data, including automated decision-making and profiling, as well as the right to lodge a complaint at the Personal Data Protection Authority.
We want to provide you through this Privacy Policy with information regarding the collection and processing of the following data.
Data collection and processing.
Identity data, name, nationality, date, place of birth
Data related to accommodation, room number, length of stay, information on consumption of goods or services.
Data related to food cravings, allergies and other health data.
Image data, photos, video downloads
Contact details, home address, email address, mobile phone number.
Payment method data, credit cards and debit cards.
This Privacy Policy is intended to inform you transparently about the processing of your personal data, however it may not include all of our processing activities as they are constantly evolving.
Electronic booking engine through our website or via mobile.
If you decide to book through our website, we will collect your first and last name, address, city, country, phone, email, any special requests you may have, your credit card details (type card number, card number, secure code, expiration date, cardholder), arrival date and departure date as well as flight details in case of transfer request.
Booking confirmation form
If you contact us directly to make a reservation, we will send you the booking confirmation form to provide us with the necessary information, such as name, address, telephone, email, your credit card details (eg card type) , card number, expiration date, cardholder).
Electronic third party booking machines or travel agents
In this case, we receive an email confirming your booking, including information such as your first and last name, country, date of arrival and departure, flight details in case of transfer, any (family) members that will accompany you, any special requests (transport requirement, statement of special preferences or allergies that we need to know).
Purposes of processing – legal basis
We collect booking data for:
Room reservation and provision of corresponding services.
Provision of additional services.
Mediation and support regarding the use of means of transport, car rental and information for the processing of transport.
Sending useful updates (informative messages via e-mail, sms) during the stay at the hotel.
Charging for services and consumption and processing payment.
Check-in process
Upon arrival at Akrogiali Exclusive Hotel, you will be provided with the necessary information for the check-in process. More specifically, we collect your title, your first and last name, your language, your address (street, postal code, city, country), your nationality, your telephone number, your email address, the names of any accompanying you and their date of birth, date of birth, passport / ID number, car license plate, credit card details, date of arrival and departure date and room number.
Declaration of allergies / special preferences
Allergies and special preferences may in some cases be sensitive personal data. We may collect such data only if you provide it to us voluntarily or when we ask you to do so and provide your express consent.
Purposes of processing – legal basis
Akrogiali Exclusive Hotel collects your registration information and personal data for the following purposes:
- Complete the registration process. Identification data is required to comply with our legal obligations.
- Service of your stay. Our legal basis is our legitimate interest. In case you want to record the information about your allergies, preferences, we will proceed with the relevant processing, if you give us your consent.
- Facilitation of management. Our legal basis is our legitimate interest.
- Service of your stay.
- Facilitate the payment process. Payment information is required to issue your invoice and comply with tax obligations
- Improving our services to offer you unforgettable stays. Our legal basis is our legitimate interest.
- Offering personalized services (on preferences, etc.). Our legal basis is your prior consent, if any.
- For communication and marketing purposes, including the analysis of your travel and accommodation preferences, in order to offer you personalized services. Our legal basis is your prior consent, if any.
- Promotion of special offers and goods, services or upcoming events or offers that may interest you. Our legal basis is your prior consent, if any.
Evaluate your experience, improve our services, and further communicate with you to discuss your experiences.
- Assess and investigate an accident / incident in accordance with relevant internal procedures, for the proper handling of any legal issues that arise after
- Data transfer to our insurance company. Our legal basis is your explicit consent, if any.
Inform your company about our business news in the context of our cooperation with travel agencies and agents. Our legal basis is our legitimate interest.
Room service
If you wish to submit a “Breakfast in the Room” request, your order (including food preferences and allergies, if any) will be dropped along with your name and room number. This information will be properly deleted upon your departure.
Book breakfast through the QR MENU application
In case you wish to make a reservation through our application, we collect your name, surname, room number and relevant order details.
Personal data collected through visitor questionnaires
For us, your feedback is valuable, as they help us improve our services for you. You can give us your feedback at any time by completing the guest questionnaire. If you want to fill them in, providing personal information (ie your name, surname, room number email, address, country, occupation, arrival data, length of stay, birth data) is optional. .
Pictures / videos
We collect, process and store images through the video surveillance systems where they are installed, for security reasons, in accordance with the requirements and standards set by national and union legislation for the preservation of data, audio and video.
Security reports
Reports, including personal data, are prepared by our security department for security reasons (ie incident reports, item loss reports, open safe list, etc.). Such reports may include personal information, such as name, room number, and will only be recorded for security reasons.
Accident form
In the event of an accident on our premises, you will be asked to provide information such as your name, surname, date of birth, room number, length of stay, and some additional information about the accident, such as location of the event, the date and time of the event, is the nature and any other relevant details.
Data collected through our website or online platforms
Personal data collected through your subscription to our Newsletter
When you register to receive our newsletter, we collect and store your email address and if you wish you can submit your first name, last name and country.
Registration system of travel agents and tourist offices.
Akrogiali Exclusive Hotel will be notified of your request and you will receive a notification message. The data selected through this form is the data of the Company and the contact person of the Company and are not considered personal data or information. We will use the email address you provide to us through this form to inform your company of our business news as part of our partnership.
Internet technologies
On the website and the mobile application of LAZAROS GATSIOS AND CO OE , we may use cookies, invisible pixels, to obtain information about you when you visit our sites.
Personal data of our partners
If you cooperate with us, we may process only the data necessary to fulfill our contractual agreement and serve our business relationship. We may use the email address you provide to us voluntarily to keep your company informed of our business news as part of our partnership. However, you can always choose to unsubscribe from this business communication by clicking the unsubscribe button available on our communications.
Transfer of personal data
The personal information you provide to us is kept secure and protected. We may disclose your information to public services in, Third parties providing related services (eg hosting services, software, financing, legal or technical support, payroll, etc.). In any case, all these companies are contractually committed to us to ensure confidentiality, as well as commitment to data protection legislation.
Public authorities (police, prosecutors, tax authorities, etc.) in the context of the issuance of fines or upon request.
When data transmission concerns a country outside the European Union (EU) or the European Economic Area (EEA), we always check whether:
- The Commission has issued a decision of adequacy for the third country to which the transfer is addressed.
- There are appropriate safeguards in accordance with the Regulation for the transmission of such data.
In any other case, the transfer to a third country is not allowed and we may not transfer personal data, unless one of the special derogations provided for in the Regulation applies (eg explicit consent of the data subject, when informing transport), the transfer is necessary for the performance of a contract at the request of the subject, there are reasons of public interest, it is necessary to support legal claims and vital interests.
Disclaimer of third party websites
We can provide hyperlinks to third party websites as a convenience to our users. LAZAROS GATSIOS AND CO OE is not responsible for the content of any third party linked sites or for hyperlinking to a site linked to a site. We are not responsible for the privacy practices or the content of third party websites.
Your rights
If you wish to revoke your consent, exercise your rights or if you generally have any questions regarding the protection of your personal data, you can address your request by contacting the Hotel Manager at Email: akrogiali@otenet.gr
Your right to request correction of their inaccurate personal data;
Your right to request the deletion of personal information provided, unless prohibited by law;
Your right to request a processing restriction;
Data protection officer
In order to ensure that your personal data is effectively protected, LAZAROS GATSIOS AND CO. OE. appoint a data protection officer to whom data subjects may address their requests and questions in relation to this privacy policy, as follows:
Akrogiali Exclusive Hotel
Polychrono, Halkidiki, Greece,
63085 Kassandra,
Tel: 0030 6944503920
email: akrogiali@otenet.gr
In case you consider that we did not respond correctly to your request, you can always contact the competent Greek Data Protection Authority (www.dpa.gr).
Information security
We have taken precautions to maintain the accuracy of your data and to ensure the security of the information we collect. We take all measures to protect your personal information from unauthorized access,
Period of retention of personal data
Your personal data is retained for a predetermined and limited period depending on the purpose of the processing, after which, this personal data is deleted from our files, unless another retention period is required or permitted by applicable law.
Updates
The Privacy Policy may be modified to respond to changes in the regulatory environment and the Privacy Policy will be updated with a new date.
Date January 2020