AQUILA HOTELS & RESORTS DATA PROTECTION POLICY

——————————————————————————————————-

The Company AQUILA HOTELS & RESORTS (hereinafter referred to as the “Company” or “we”) tries to offer you an experience that meets the needs of our visitors, by using responsibly the information collected through our website. We are committed to respect your privacy and comply with applicable laws on data protection and privacy.

Processing of your personal data is governed by these terms, by the relevant provisions of Greek and EU legal framework on data protection, including the General Data Protection Regulation (2016/679) and the relevant decisions, guidelines and regulation issued by the Hellenic Data Protection Authority.

This Privacy Policy (the “Policy”) forms an integral part and is incorporated into the Terms of Use of our Website and may be subject to modifications. We advise you to regularly check our Data Protection Policy in order to remain informed and updated on any amendments. By visiting and navigating through our Website you agree to this Data Protection Policy as in force at the time. When substantial amendments are made we will ensure that a relevant notice is posted for visitors of our Website.

This Policy explains how we collect, process and/or use information that we receive via our websites, emails we send, and mobile applications (collectively, the “Platform” – if only website, use the term “Website”) that link to this Policy, as amended from time to time. This Policy also describes how we collect, process, use and share the personal information you provide us with. It also describes your choices regarding use, access, transfer, correction and deletion of your personal information.

1. Information we collect

We collect information about you to provide our services. In order for us to best provide our services to you and to fulfill the relationship we have with you, it is essential that we are able to collect and use the information as described in this Policy.

1.1 Information You Give Us

When you submit your data in order to receive newsletters or other updates and/or in order to make a reservation or/ register to offered programs, we collect and maintain your data exclusively for the purposes mentioned below. In this context, we collect data you submit, such as the name, residence, email, phone number, mobile, fax, credit card information, date of birth and gender.

1.2 Information We Collect Automatically

When you use the Website, your device is automatically providing information to us so we can respond and customize our response to you. The type of information we collect by automated means generally includes technical information about your computer, such as your IP address or other device identifier, the type of device you use, and operating system version. The information we collect may also include usage information and statistics about your interaction with the Website. That information may include the URLs of our web pages that you visited, URLs of referring and exiting pages, page views, time spent on a page, number of clicks, platform type, location data (if you have enabled access to your location on your mobile device), and other information about how you used the Platform.

This information is collected by using Cookies & other similar Tracking Technologies. We strongly advise you to review our Cookies Policy in order to learn more about Cookies, how we use them and how you can control the use of Cookies.

2. Why we collect your information

We process your data exclusively for the below purposes:

With respect to the use of Data collected through Cookies, please see our Cookies Policy.

6. Recipients of your data

Access to your data may only be provided to our duly authorised employees or business partners who act on our behalf for the above purposes of processing, by offering us IT services for the registration and storage of your data, for the operation of our website and/or customer care services and/or for the dispatch of marketing messages or the performance of market research.

7. Duration of processing

Retention periods can vary significantly based on the type of information and how it is used. Our retention periods are based on criteria that include legally mandated retention periods, pending or potential litigation, our intellectual property or ownership rights, contract requirements, operational directives or needs, and historical archiving. We will retain your data for 5 years from the last incident of use of our services. Consequently, your data will be deleted, unless you renew your consent for their processing. You can request that we stop communicating marketing material to you and/or that we delete your data at any time.

8. Your rights

Our company ensures your rights with respect to processing of personal data and ensures that you may exercise them.

You have the right to request:

8.1 access to your personal data

8.2 Rectification of your personal data if it is inaccurate or incomplete.

8.3 Deletion of your personal data, unless their processing is necessary for the exercise of legal rights of AQUILA HOTELS & RESORTS or third parties, for the fulfillment of a legal obligation, for public interest reasons or for defending our legal rights before judicial or other Authorities.

8.4 Restriction of processing of your personal data only for specific purposes.

8.5 To withdraw at any time your consent to the processing of your personal data for marketing purposes and/or targeted advertising by sending an email or written request to using the contact details below. In such case, their processing by us will be suspended, nevertheless this will not impact the legitimacy of any processing performed until the time of withdrawal.

In order to exercise any of the above rights we advise you to use our “Data Subject Request Form” and submit it according to the instructions provided on our website https://aquilahotels.com/wp-content/uploads/2018/07/Data-Subject-Request-Form_FINAL_EN.pdf . You may also email us or send us a written request, using our contact details below.

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the Hellenci Data Proection Authority.(www.dpa.gr)