PERSONAL DATA PROTECTION POLICY

General

Maragoudaki E. and M. G.P. (O.E.), which is based in Piraeus, is under the applicable legislation responsible for the processing of your personal data that you provide to it, within the framework of your commercial cooperation with the company. Maragoudaki E. and M. G.P. is committed to protecting the personal data of visitors/users of the website and to complying with the relevant provisions regarding the protection of personal data, as these apply from time to time. Maragoudaki E. and M. G.P. does not collect information concerning personal data of visitors/users except only if they provide them themselves voluntarily. The data collected by us are those required and are used exclusively for the purposes for which they are collected, excluding any other unwanted use of them. It is not required to grant details that constitute personal data for navigating the website or for accessing its content.

Introduction

The said Policy includes the basic data protection principles which the company must communicate to all involved users

Which of your data we process

Your personal data which are processed may be the following:

• Identity or passport details such as name, surname, nationality

• Contact details, such as phone, email.

• Reservation details such as date and time of arrival and departure,

• Tax Registration Number and competent Tax Office

• Credit or debit card details

Why Do We Collect Personal Data?

The above information and the personal data that we collect from you will be stored in the databases of the company and on its servers, always in accordance with the provisions of the legislation in force and especially those regarding the protection of the privacy of communications and the protection of the individual from the processing of data of personal character.

Maragoudaki E. and M. G.P. explicitly declares that in no case will these data be communicated to third parties, unless otherwise ordered their communication by law or is imposed by a judicial decision, a prosecutorial order or a decision / order of another Public Authority as well as after a written authorization from the subject of the said data itself.

The lawful basis of the processing of your data is your consent towards fulfillment of the purpose, the necessary character of their retention for the response of the company to your requests as well as any form of processing provided for by the relevant legislation.

Specifically, we process your data for the purpose of providing accommodation services, informing you in relation to the services provided by our company (offer packages and other informational material of our company) and for the response from our side to your requests of any form, such as e.g. for provision of information, phrasing of complaints, evaluation of services etc.

Recipients

The processing of your personal data is done by the competent, appropriately authorized employees and partners. Recipients of your personal data may also be third parties, external partners, such as the IT support service, the accounting support service to the extent that this is necessary for your best service and the provision of our services. Furthermore, provided you have consented, your electronic address may be forwarded to a partner company for purposes of promotion through mass sending of informational material. In this case, the management of the company commits that its partners are under its control and act only by its order, have been authorized specifically for this purpose and are fully bound by confidentiality and the obligations provided for in the legislation regarding the collection and processing of the above data.

Retention Time

Maragoudaki E. and M. G.P. retains your data for as long as required for the fulfillment of the purpose for which you have communicated them to us and in compliance with the text legislative provisions regarding protection of personal data. Specifically,

Your Rights

In relation to the processing of your above data, you have the right to request and receive from us the following information:

• All data of personal character that concern you

• The purposes of processing and any recipients

• The correction of your details kept in the archive, as well as the right to raise at any time objections for the data that concern you.

You have the right to request at any time and without charge the erasure of your details, at any moment, sending an electronic message to the address

Specifically, you have the following rights:

• Right of access – Right to receive information on whether data of yours are being processed and right of access to them, as well as right of information regarding this processing (who, for what purpose, recipients, retention period etc.).

• Right to correction – Right of correction of inaccurate personal data and completion of incomplete information.

• Right of erasure (Right to be forgotten) – Right to request the erasure of any data of yours under certain conditions (data that are no longer necessary, withdrawal of consent, etc.). You have the right to lift your consent, but the lifting of the consent applies for the future, from its communication to the company and cannot have retroactive power.

• Right of Restriction of Processing and opposition – e.g. when the accuracy of the data is disputed, the data are no longer needed by the data controller etc.

• Right to data portability – Right of request of transmission of data of personal character to another Data Controller in a structured, widely used and mechanically readable form. In case of exercise of the rights of correction, erasure and restriction of the data, these requests will be transmitted also to the third recipients to whom the data were made known.

The above services are provided free of charge. In case however that the requests are manifestly unfounded, excessive or repetitive, the company may refuse to respond to these requests, informing relatively the applicant.

The company has taken all technical measures for the safeguarding of your personal data. It provides limited access only to those of its employees / partners, who it is necessary to have access to these data. And it takes all necessary measures for the avoidance of any unauthorized access, use or modification of these data. It keeps the applicable legislation and has set procedures for the protection of data.

Website Personal Data Collection

The Protection Policy of Data of Personal Character covers and concerns the conditions of collection and management of your personal details during a visit and use of the services and the web locations (websites) of its ownership. Maragoudaki E. and M. G.P. is the owner and beneficiary of all rights of the page, as well as the Data Controller of the data that may be declared by you.

The present policy, in no case covers the legal relationship between the visitors/users of the pages and any other services, which are not subject to the control in the management and ownership of ours even when this includes links ("bonds") to other web locations (sites) which are controlled by third bodies (natural or legal persons).

Most of our services do not require your registration allowing you the visit and browsing in our web location without it being necessary to reveal your identity. In some cases however, it may be judged necessary your registration for your access to some services. In the case that you conceal your identity, it may not become possible your access to specific parts and services of our web location.

The pages may use cookies for the smooth operation of the services and their pages. Cookies are small parts of information that are stored on a computer, with the purpose of recognizing the corresponding browser during the browsing in web locations. Cookies can be used for the storage of details, such as connection identifiers and user preferences.

The cookies that the present website uses serve only the purposes of browsing, the functionality of the website and the facilitation of navigation and therefore, personal data are not collected.

Personal data and children

The present website is not addressed to children under 13 years old. Our policy is not to collect nor to keep in our knowledge data of persons under 13 years old. In any case, most of the information communicated are addressed to individuals 18 years old and over.

The company will not collect, use, or disclose in its knowledge personal data from minors under 18 years old, without having secured previously the consent of their parent or guardian, through direct communication, outside electronic connection, through a network.

The company does not collect in its knowledge personal information from minors under 18 years old. If it establishes that it has collected any personal information from a minor under 18 years old without verifiable parental consent, it will erase the information from its database the soonest possible.

Modification of Policy

The company retains the right to modify the present policy updating the present text in order to cope with the applicable legislation each time for the protection of data as well as in any other case it judges it necessary.

Contact Information

For any request related to the processing of your data from the competent department please like you address the soonest possible to us through electronic correspondence.

In case that you consider that the protection of your personal data is affected in any way, you can appeal to the Personal Data Protection Authority.

Competent courts for any emerging disputes related to your data are the Greek Courts.