Your privacy is important to us! That means we are committed to protecting and safeguarding any personal data you give us.
Ι. What type of information is collected from you?
The personal information we collect, store and use includes:
▪ your full name
▪ your contact details (e.g. postal address, email address and telephone number)
▪ your credit card details
▪ any other personal information shared with us at the time you made your reservation or during your stay
We collect only those data that are necessary for the purposes mentioned below.
II. How do we collect your information?
Your personal information is collected fairly and lawfully.
We collect information you give us directly. For example, we may obtain information about you when register via a contact form, fill in a guest information form during your stay or when you place a reservation directly on our website www.cleopatra-beach.gr We recommend that children and young people under the age of 18 get permission from their parents before submitting their personal data to the website.
We collect information you give us indirectly. For example, your information may be shared with us by travel agents/tour operators or by other websites (e.g. Booking.com or Expedia.com) that you have made the reservation through. In this case we collect the personal information provided to them. Moreover, we automatically collect certain technical information (e.g. type of device you are using, the IP address, browser and operating system being used, how you navigate the website, which pages have been shown to you, how you reached our website).
ΙΙΙ. Why we collect your information and how is your information used?
Υour information is being lawfully processed for a number of specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes. Your personal data may be used in the following ways:
▪ trip reservations. We use your personal data to provide you with the services or/and information you asked for, ensure you get the best service possible, provide you with easier/better/quicker service at the future, seek your views or
comments on the services we provide etc.
▪ direct marketing activities, e.g. keeping a record of your relationship with us and notifying you of our services, offers, promotions or changes to our services, provided that we have your permission.
▪ communicating with you. There may be other times when we get in touch, including by email, by post or by phone – which method we choose depends on the contact information you have previously shared with us. There could be a number of reasons for this, including responding to and handling any requests you have made. Moreover, when you use our services, we may invite you to provide a review about your experience with us.
▪ statistical/research purposes, e.g. conducting analysis and market research enabling us to understand how we can improve the functionality and quality of our services or achieve our goals more effectively.
▪ compliance with a legal or regulatory obligation or achieve our legitimate interests
We make our best effort to minimise the processing of your personal data (data minimisation).
ΙV. Who has access to your information?
Our hotel has access to your information. We are committed to protecting your information and complying with the law. We do not sell, rent, disclose or in any other way provide your information to any third parties unless it is compelled by law. We do not share your information with third parties for marketing purposes.
V. How long is your information kept for?
We keep your information for no longer than is necessary for the purposes it was collected for. For example, we retain your credit card details until a week after your check-out. For your contact details it depends on whether you wish or not to receive direct communications from us. In any case, we shall delete your data once you ask us (through and easy and simple procedure) to delete them.
VI. Your Rights over the personal information we hold about you
First of all, you are free to choose whether you wish or not to receive communication from us. If we have your permission, we may use your information to inform you of offers, send you newsletters or other announcements electronically. You have the right to change your opinion at any time. If you do not wish to receive direct marketing
communications from us, then we shall not use your personal information for marketing purposes.
Where we are using your personal data on the basis of your consent, you are entitled bto withdraw that consent at any time subject to applicable law. Withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
Moreover, you have the following rights:
▪ Right of access
You have the right to know what type of information we hold about you and request access to your personal data. If you want to access your information, please send a description of the information you want to see and proof of your identity via email or message to the address provided below.
▪ Right to have your inaccurate personal information corrected.
You have the right to have inaccurate or incomplete information we hold about you corrected. If you believe any of the information we hold is inaccurate or has been changed, please contact us via email or message to the address provided below.
▪ Right to restrict use
You have the right to ask us to restrict the processing of some or all of your personal information.
▪ Right of erasure
You have the right to ask us to delete some or all of your personal information.
▪ Right to object
You have the right to object at any time to the processing of data relating to you.
The exercise of these rights acts for the future and does not affect the processing of data that has already taken place.
Please note that in accordance with the law, exceptions apply to a number of these rights (e.g. we have the right to deny the request to restrict the processing or delete your information where necessary so that we can comply with a legal or regulatory obligation to which we are subject or achieve our legitimate interests or on grounds of public interest).
VII. How you can exercise your above rights
If you want to exercise any of the above rights, please contact us by email to email@example.com or send us a message via our website www.cleopatra- beach.gr Alternatively, you can telephone + (30) 26450 95189 or send us a fax + (30) 26450 95579. We may ask for further information and/or evidence of your identity.
We will endeavour to respond fully to all requests within one month of receipt of your request. This deadline may be extended for a further of two months, if required, at our discretion. In this case we will contact you within one month of receipt of your request, informing you about the extension with reasons for the delay.
VIII. Lawfulness of the processing of personal data
According to data protection law, the processing of your personal data is lawful when at least one of the following applies:
Where you have provided specific consent to us using your personal information in a certain way, such as to provide you with our services or to send you email and/or telephone marketing.
Where the processing of your personal data is necessary for the performance of a contract, specifically to finalize and administer your trip reservation.
Where necessary so that we can comply with a legal or regulatory obligation to which we are subject or on grounds of public interest.
Where it is reasonably necessary to protect our legitimate rights. Moreover, where it is reasonably necessary to achieve our or others legitimate interests, provided that the information is used for is fair and does not duly impact your rights (e.g. to conduct research to better understand your interaction with our services and our website, enhance, modify or otherwise improve our services /communications for the benefit of our customers). When we legitimately process your personal information in this way, we consider and balance any potential impact on you and your rights under data protection laws.
IX. Keeping your information safe
At Cleopatra Beach Hotel, we are committed to protecting and respecting your privacy. When you give us personal information, we take steps to ensure that appropriate technical and organisational controls are in place to protect it and information is processed in a manner that ensures appropriate security of your personal data.
Non-sensitive details (your email address etc.) are transmitted normally over the Internet and this can never be guaranteed to be 100% secure. As a result, while we strive to protect your personal information, we cannot guarantee the security of any information you transmit to us and you do so at your own risk. Once we receive your information, we make our best effort to ensure its security on our systems.
Any questions regarding this policy and our privacy practices should be sent by email to firstname.lastname@example.org or by message via our website www.cleopatra-beach.gr Alternatively, you can telephone + (30) 26450 95189 or fax + (30) 26450 95579
Name and contact details of the controller:
CLEOPATRA BEACH HOTEL
Address: Geni of Lefkas – 31100, Lefkada, Greece
Telephone: + (30) 26450 95189 Fax: + (30) 26450 95579
This policy was last updated in May 2018.