At Terra Relaxa the protection of your personal data is important. You have shown your trust in us by using our services and we appreciate it. This means that we are committed to protecting your personal data.
This privacy policy describes how we collect and process your personal data when you visit our website, or use our booking application. Among other things, it states what rights you have in relation to your personal data and how you can contact us.
This privacy policy may change from time to time in accordance with legislation or industry developments. We will not explicitly inform our customers or users of our website of these changes. Instead, we encourage you to check this page occasionally for any changes to this privacy policy. Your continued use of the website even after any changes to the Privacy Policy constitutes your unconditional acceptance of these terms.
RELEVANT LEGISLATION
Along with our internal IT systems, the website is designed to comply with the following laws/regulations with regard to the protection of users' personal data:
EU Data Protection Directive 1995 (DPD)
EU General Data Protection Regulation 2018 (GDPR)
PERSONAL DATA WE COLLECT AND PROCESS
For booking purposes we will ask you for personal information such as your full name, email address, telephone number, payment method, date of birth, passport or identity card details, home address, your current location, whether you are travelling for business or not, the names and dates of birth of your travelling companions and any preferences you may have for your trip (such as food preferences or accessibility requirements) for both yourself and your travelling companions.
PURPOSES OF COLLECTION AND PROCESSING OF PERSONAL DATA
We use personal data for various purposes as described here:
Α. Traffic monitoring of the website
Like most websites, terra-relaxa.gr uses Google Analytics to monitor the activity of users. We use this data to determine the number of people who use our website, to better understand how they find and use our website and to see their path through the website. Although Google Analytics records data such as your geographic location, device, internet browser and operating system, none of this information makes you personally identifiable to us. Google Analytics also records your computer's IP address, which could be used to identify you, but Google Analytics does not provide us with access to this. We consider Google Analytics to be a third party data processor which is compliant with European law directives and regulations.
Β. Contact form and email links
If you choose to contact us using a contact form or an email link, none of the data you provide will be stored by this website or transferred or processed by any third party data processor. Instead, this data will be sent to us by an email message via the SMTP (Simple Mail Transfer Protocol). Our SMTP servers are protected by TLS (sometimes known as SSL) security protocol, which means that email content is encrypted before it is sent over the internet. Email content is not shared with third parties except to authorized personnel.
C. Room Reservation
First of all, we process personal data to complete and manage your reservation. This includes any communication relating to your travel booking, such as confirmations, amendments and reminders. In some cases, this may also include processing personal data to enable check-in or processing personal data in relation to potential damage guarantees.
In addition to your contact details (your email address and telephone number, for example), in order to provide you with services, we may also need your ID or passport details and arrival - departure dates to determine the duration of the booking.
HOW WE PROTECT YOUR PERSONAL DATA
We combine human resources and all the necessary procedures to protect your personal data and respect your privacy.
This includes the following actions:
- We maintain a comprehensive framework of policies, procedures and security protocols.
- We keep staff alert regarding security risks through ongoing security training and security awareness activities.
- We use modern security technologies, such as encryption and data leakage prevention, to protect against unauthorized disclosure or destruction of data.
- We control that only authorised personnel can access personal data.
- We verify and improve our security systems, procedures and protocols on a frequent basis.
In general, we retain personal data for as long as necessary in order to:
- Provide you with our services
- To provide you with our services to enable us to provide you with our services; to comply with legal obligations such as those arising from accounting and tax legislation
- To resolve any disputes and legal claims
WHAT ARE YOUR RIGHTS AND HOW TO CLAIM THEM
As a ‘data subject’ you have specific rights under Chapter III (Articles 14 to 25) of Regulation (EU) 2018/1725. In relation to this processing, you can exercise the following rights:
- Right to information (Articles 14 to 16 of Regulation (EU) 2018/1725)
- Right of access to your personal data (Articles 14 to 17 of Regulation (EU) 2018/1725).
- Right to have your personal data corrected if your personal data are inaccurate or incomplete (Articles 14 to 18 of Regulation (EU) 2018/1725)
- Where applicable, the right to restrict the processing of your personal data (Article 20 of Regulation (EU) 2018/1725) and the right to data portability (Article 22 of Regulation (EU) 2018/1725); and
- Where applicable, the right to erasure of your personal data (Article 19 of Regulation (EU) 2018/1725) and the right to object to the processing of your personal data on grounds relating specifically to your particular situation (Article 23 of Regulation (EU) 2018/1725). Where a response to the request for public access to documents has not yet been issued, the exercise of either of these rights implies that the request should be deemed to have been withdrawn.
To the extent that the processing of your personal data is based on your consent (in particular with regard to non-mandatory personal data), you can withdraw your consent at any time by informing the data controller. Withdrawal of consent does not affect the lawfulness of the processing carried out prior to the withdrawal.
You can exercise your rights by contacting the data controller. If necessary, you can also contact the European Data Protection Supervisor. The contact details of the data controller are provided in the ‘Data Controller’ section below.
If you wish to exercise your rights, please provide a detailed description in your application. You will be provided with information on any request to exercise your rights referred to above within one month of receipt of your request by the data controller. This period may be extended by a further two months if necessary, taking into account the complexity of the request and the number of requests.
DATA PROCESSING MANAGER
If you wish to exercise your rights under Regulation (EU) 2018/1725 or if you have questions or wish to make a complaint about the collection and use of your personal data, you can contact the data controller.
Spyridon Vandoros
phone: +30 2744 110 327
email: This email address is being protected from spambots. You need JavaScript enabled to view it.
