PRIVACY POLICY
If you want to use this webpage of the company under the name “Spyridoula F. Asonitou – Exantasgreece Travel and Events company” or/and to make purchases via online store, you declare that you accept and agree with this privacy and data protection policy and the terms contained below in detail.
By making use of this webpage or/and placing orders, you declare that you explicitly and unequivocally agree and accept this policy.
If you do not agree with this privacy and data protection policy, you must NOT access, navigate or use our webpage or online store.
This policy applies only to personal data which are directly collected by this webpage and not to personal data collected by a third entity (e.g. webpage) or third party provider (e.g. internet providers, bank institutions, paypal etc.). We declare that we are not liable for any processing of personal data performed by third parties.
Our webpage may include hyperlinks which redirect you to other webpages (Facebook, Instagram, Twitter etc.). We declare that we are not liable for any processing of data performed via the above webpages.
1. Identity of the Data controller
Data controller is the company under the name:
Spyridoula F. Asonitou – Exantas Greece Travel and Events Company
3, Ioannou Foka str., Corfu, Greece
VAT NUMBER: 059592959
TEL.: +302661032425, +302109816115
E-mail: [email protected]
2. Collection and Processing of personal data
2.1 Visit/ Navigation on our webpage
When you enter, visit or navigate on our webpage www.exantasgreece.com the following data are collected and included in our log files:
a)IP address of your computer
The above data are necessary to be collected from our webpage, so that your access to the webpage is technically possible.
They are retained for a time period of two week for safety reasons, so that it is possible to search into data breach incidents and malicious attacks.
Processing is necessary for the purposes of the legitimate interests pursued by the controller (article 6 par. 1(f)) GDPR) so that access to the webpage administered by the controller is possible.
It is noteworthy that the webpage is using cookies, as they are analyzed in detail below.
2.2 Contact with our company by sending written messages
You can send questions to our company by using the contact form which is available here.
For the purpose of contacting us by written message, it is necessary to provide the following data in the contact form:
– name
– email
– content of the message
By sending the message, you declare that the data you have used are true, accurate and that you have not used personal data or any other data of third natural or legal persons.
The user of the webpage is solely responsible for the content he/she sends to our company and bears all responsible and is liable to compensate our company or any third party for any damage suffered as a result of his illegal behavior or/and the violation of the terms of use of this webpage.
Types of personal data collected and processed
a) Name
b) E-mail address
c) Content of message
Processing is lawful since a) you (data subject) have given consent to the processing of your personal data for the purpose of contacting us, b) processing is necessary for the purposes of the legitimate interests pursued by the controller (us), that is, to answer to your message and contact you back.
The above data are retained and stored for as long as our communication or business/contractual relation lasts and for as long as it is necessary for the purposes of the processing and until the limitation period indicated by law expires.
If You and our company do not cooperate or do not enter into a contractual agreement, then your data are deleted after five years from the date that you sent the data, unless there are further reasons which entail their retention (e.g. ongoing legal proceedings, disputes regarding pre-contractual phase, or negotiations phase etc.).
In case we cooperate or enter into a contractual agreement, your data are retained for all the period during which are relation lasts. After the relation ends, the data is retained for the time entailed by law or/and until the limitation period expires for possible legal claims.
2.3 E-mailing of photographs, camera and microphone use to be included during the Exantas Greece organized Events.
The terms under which you can participate in the Exantas Greece Events are analyzed in detail in the terms of use which are available here.
2.3.1 The data we collect for these purposes are:
Name, address, Email address, profession, telephone, image, photograph, location of photograph, emails, use of camera and use of microphones during the events, which are exchanged between you and our company as a proof of your granting consent.
We will process your data collected are a result of you granting us your explicit consent. Additionally, by submitting your registration you accept and consent to the recording of your image and sound, knowing that part or all of the content may be recorded Events sessions and/or published.
You may revoke your consent at any time, but without affecting the lawfulness of processing based on consent before its withdrawal. For example, you can refuse opening and using camera and microphone for audio-visual purposes during the Conference sessions.
2.3.2 Time of retention
Photographs you have given us will be demonstrated on our webpage or social media accounts/ pages for as long as our online store is operating or until you revoke your consent.
We will store and retain the emails you have sent to us for the above purpose as a record, in order to prove the explicit consent which was given to us by you
3. Subscription to our Newsletter
Our company regularly sends newsletters containing information about the company’s activities, news, press releases, updates to the offered services and products, promotional activities and discounts/ commercial offers to customers.
Τhe user of the webpage can register in the newsletter list by giving his explicit and free consent to us to communicate with him via e-mail in order to send him our newsletter.
Our company is using the newsletter service provider under the name MAILCHIMP.
If you activate the button labelled “SUBSCRIBE” you will be automatically redirected to the Mailchimp service, which indicates that it is in compliance with the General Data Protection Regulation. The company offering the Mailchimp service is «The Rocket Science Group, LLC», having its registered offices in the USA, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA και has been certified by the Privacy Shield between US- EU and SWISS -US Privacy Shield.
For more information, you can read the privacy policy adopted by MailChimp company in the following urls: https://mailchimp.com/help/about-the-general-data-protection-regulation/ or/and https://mailchimp.com/legal/privacy/.
4. Retention time
As has already been mentioned, the personal data which are collected from you are not indefinitely stored and retained by our company, unless there is a legal ground.
We keep your data for an indefinite period of time, in case there are legal proceedings, investigation from public authorities (e.g. public prosecutor, police etc.) in progress.
Data which are collected via cookies or other tracking technologies online directly by third party providers (e.g. Google, Facebook etc.) are stored for the time period which is indicated by the third party provider in the provider’s privacy policy.
In Section 2 above, we indicate the period for which your personal data will be stored, or if that is not possible, the criteria used to determine that period for each of the categories of processing.
5. Recipients of your data
Recipients of your data are:
a)Personnel of our company, which is legally and contractually bound to keep all information confidential and to apply the policies regarding safety of processing of our company
b)Contractors, provided that this is necessary for the purposes of processing and who have been contractually bound to keep every data confidential and comply with safety and secure data processing principles and policies of our company
c)Data Processors, that would be natural or legal persons, which process your data on our behalf according to the purposes of processing. We have entered into written agreement with data processors to keep your data fully confidential, not to communicate your data to anyone and to receive all technical and organizational measures as indicated by GDPR.
d)public authorities, public prosecutors, police agencies or another body, to which the personal data are disclosed following relevant notifications or orders to provide such data
6. Rights of the data subject
The data subject – user of our webpage, which is subject to the GDPR, has the following rights:
a) Right of access (article 15)
b) Right to rectification (article 16)
c) Right to erasure (‘right to be forgotten’) (article 17)
d) Right to restriction of processing (article 18)
e) Notification obligation regarding rectification or erasure of personal data or restriction of processing (article 19 GDPR)
f) Right to data portability (article 20 GDPR)
g) Right to withdraw consent (article 7 par. 3 GDPR)
h) Right to lodge a complaint with a supervisory authority (article 77 GDPR)
Without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes this Regulation.
6.2 Right to object
The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6(1), including profiling based on those provisions. We (The controller) shall no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
7. Complaints / requests
In case you want to exercise your rights or to submit any complaint related to the use of your personal data and this policy, you may email our company at [email protected].
For the purpose of verifying your identity, we reserve our right to ask you some further information, otherwise we will not be able to process your request/ complaint. In such a case, you will receive a written reply why we were not able to answer to you.
8. Security of data
Our company applies measures for the protection of the data which are electronically collected by our webpage and/or even stored offline, in physical way. We apply SSL technology. The databases connected with the webpage are stored on a server which is located within the European Union. All data stored, are encrypted.
The company processes the personal data of the users of our webpage in a way which guarantees compliance with the law, as in force, for the protection of personal data. Without prejudice to more specific provisions/terms contained therein, we do not transfer or sell the data to third parties, legal or natural persons.
Our personnel, partners are legally bound to keep everything confidential and to comply with this policy and the data protection laws.
9. Cookies Policy
Cookies
What are cookies?
A cookie is a small piece of data that a website asks your browser to store on your computer or mobile device. The cookie allows the website to “remember” your actions or preferences over time. Characteristic example of the data collected is the preferences a user has on a webpage by the specific selections he makes (e.g. activation of specific buttons, search results, advertisements etc.).
9.1 Cookies are used for the following purposes
a)Necessary cookies
-to enable access and navigation on our webpage
-to enable view of multimedia content (flash cookies), in case the user requests access to such content
The above cookies are absolutely necessary for the reliable and secure use of our webpage and to enable you to navigate therein if you want.
Since they are absolutely necessary, you cannot reject these cookies.
b)Performance Cookies via Google Analytics
-Which refer to the use of data (which are not personal) through our webpage so that we can infer results regarding the use of our webpage for the purpose of improving functionalities
c)Marketing/ Preferences Cookies via Google Analytics
-Which allow our webpage to remember data relating to your preferences (e.g. name, language, location) so as to provide targeted advertisements and personalized services
-Which allow our webpage to extract results and asses your activity for reasons of better and more personalized services
-Third party cookies are analyzed in detail below
You can reject marketing/ advertising cookies and/or withdraw your consent to cookies by making the necessary settings in the cookie consent kit on our webpage.
In addition, you can set your browsers to decline cookies and can delete them whenever you like.
9.2 Tracking tools:
Our page enables use of third-party cookies stored by a different domain to the visited page’s domain. You are asked to give your consent and whether you agree to the use of cookies (except the strictly essential ones) before the site starts to use them. You can withdraw your consent at any time, without retroactive effects.
i) Performance Cookies
Google Analytics
In order to monitor and make best use of, assess the traffic of our webpage, in order to improve offered services, we use Google Analytics.
Google Analytics is a service offered by Google LLC (1600 Amphitheatre Parkway, Mountain View, California, U.S.).
Google Analytics is a tool provided by Google to help webpage and application owners to understand how the visitors/ users use their webpages/ applications. It may use cookies to collect information and statistical data related to the use of one webpage, without necessarily personal identifiers for every visitor. The main cookie used by Google Analytics is “__ga” και “__gid”. The information extracted from the cookie and collected, are transferred to a server of Google located in the USA and it is stored there.
Via Google Analytics, it is possible to monitor and collect data which relate to the use of a webpage, such as IP address, date and time of access to the webpage or other pages within the webpage, the way you were directed to our webpage.
You may get information about the way Google collects and processes your data via Google Analytics, in the following url: https://policies.google.com/technologies/partner-sites (english version) and https://policies.google.com/technologies/partner-sites?hl=el (Greek version).
ii) Advertising/ Targeting Cookies
By use of specific cookies, we can monitor the activities and conduct of a webpage user and offer him/her specific and personalized advertisements which fit his/her preferences (targeted advertising).
Cookies make advertisement more effective. Without these cookies, it is difficult for an advertiser to address his/her public or to extract information on how many advertisements appeared and were watched (‘clicked on’).
You may deactivate the collection of data via cookies from Google Analytics by following the guidelines available at the following link: https://tools.google.com/dlpage/gaoptout
Google Analytics cookies remain on the user’s computer for a period of two (2) years.
ii) Advertising/ Targeting Cookies
By use of specific cookies, we can monitor the activities and conduct of a webpage user and offer him/her specific and personalized advertisements which fit his/her preferences (targeted advertising).
Cookies make advertisement more effective. Without these cookies, it is difficult for an advertiser to address his/her public or to extract information on how many advertisements appeared and were watched (‘clicked on’).
Google Adwords
Our company uses Google Adwords, which is a service offered by Google LLC (1600 Amphitheatre Parkway, Mountain View, California, U.S.).
Adwords (Ads) Remarketing
A cookie is installed on the user’s computer via Google Adwords to enable targeted marketing.
If during access to the webpage, you are connected to a Google Account, then Google may further proceed to the processing of your personal data.
You can deactivate the cookies by using the cookie consent kit at the front page of our webpage or by following the guidelines available on the following url: https://policies.google.com/technologies/ads
10 Modification of the privacy policy
Our company has the right to modify this privacy policy and data protection policy. In case there has been any change or modification, the user will be informed when entering our webpage by use of a pop-up window.
11 Governing Law/ Competent Courts
This Privacy and data protection policy is governed by Greek Laws. Competent courts in relation to any dispute are the courts of Athens, Greece.