The Company Cretan Routes (hereinafter referred to as the “Company” or “we”) tries to offer you an experience that meets the needs of our visitors, by using responsibly the information collected through our website. We are committed to respect your privacy and comply with applicable laws on data protection and privacy.
Processing of your personal data is governed by these terms, by the relevant provisions of Greek and EU legal framework on data protection, including the General Data Protection Regulation (2016/679) and the relevant decisions, guidelines and regulation issued by the Hellenic Data Protection Authority.
This Policy explains how we collect, process and/or use information that we receive via our websites, emails we send, and mobile applications (collectively, the “Platform” – if only website, use the term “Website”) that link to this Policy, as amended from time to time. This Policy also describes how we collect, process, use and share the personal information you provide us with. It also describes your choices regarding use, access, transfer, correction and deletion of your personal information.
- Information we collect
We collect information about you to provide our services. In order for us to best provide our services to you and to fulfil the relationship we have with you, it is essential that we are able to collect and use the information as described in this Policy.
1.1 Information You Give Us
When you submit your data in order to receive newsletters or other updates and/or in order to make a reservation or/ register to offered programs, we collect and maintain your data exclusively for the purposes mentioned below. In this context, we collect data you submit, such as the name, residence, email, phone number, mobile, fax, credit card information, date of birth and gender.
1.2 Information We Collect Automatically
When you use the Website, your device is automatically providing information to us so we can respond and customise our response to you. The type of information we collect by automated means generally includes technical information about your computer, such as your IP address or other device identifier, the type of device you use, and operating system version. The information we collect may also include usage information and statistics about your interaction with the Website. That information may include the URLs of our web pages that you visited, URLs of referring and exiting pages, page views, time spent on a page, number of clicks, platform type, location data (if you have enabled access to your location on your mobile device), and other information about how you used the Platform.
- Why we collect your information
We process your data exclusively for the below purposes:
|Provision of services||When you make a reservation through our Website, you must provide your personal data. We collect your personal data in order to offer you the services you request, conclude the transactions you perform, in order to ensure that we meet your needs when you use our services and/or in order to contact you on issues related to the provision of our services.|
|Keeping you up to date with developments||If you provide your consent by registering your data in the field for subscription to our Newsletter, we will register your data and send you Newsletters and updates.|
|Improvement of services||We maintain your data and the history of usage of our services in order to produce statistics that allow us to better assess the visits and navigation of users through our website in order to improve its content and structure.|
|Marketing material||If you provide your consent, we use your contact details to contact you, in order to send you marketing material and inform you on any special offers/discounts or other promotional activities.|
|Targeted Advertising||If you provide your consent to receive targeted advertising based on your preferences or customer segmentation, we will use automated means to process information you provide and the history of your transactions through our Website in order to send you news, special offers and promotional material that is relevant to your profile and preferences.|
- Recipients of your data
Access to your data may only be provided to our duly authorised employees or business partners who act on our behalf for the above purposes of processing, by offering us IT services for the registration and storage of your data, for the operation of our website and/or customer care services and/or for the dispatch of marketing messages or the performance of market research.
- Duration of processing
Retention periods can vary significantly based on the type of information and how it is used. Our retention periods are based on criteria that include legally mandated retention periods, pending or potential litigation, our intellectual property or ownership rights, contract requirements, operational directives or needs, and historical archiving. We will retain your data for 5 years from the last incident of use of our services. Consequently, your data will be deleted, unless you renew your consent for their processing. You can request that we stop communicating marketing material to you and/or that we delete your data at any time.
- Your rights
Our company ensures your rights with respect to processing of personal data and ensures that you may exercise them.
You have the right to request:
5.1 access to your personal data
5.2 Rectification of your personal data if it is inaccurate or incomplete.
5.3 Deletion of your personal data, unless their processing is necessary for the exercise of legal rights of Cretan Routes or third parties, for the fulfilment of a legal obligation, for public interest reasons or for defending our legal rights before judicial or other Authorities.
5.4 Restriction of processing of your personal data only for specific purposes.
5.5 To withdraw at any time your consent to the processing of your personal data for marketing purposes and/or targeted advertising by sending an email or written request to using the contact details below. In such case, their processing by us will be suspended, nevertheless this will not impact the legitimacy of any processing performed until the time of withdrawal.
In order to exercise any of the above rights we advise you to use our “Data Subject Request Form” and submit it according to the instructions provided on our website . You may also email us or send us a written request, using our contact details.
If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the Hellenic Data Protection Authority.