PRIVACY POLICY 2021-2022

This Privacy Policy (hereinafter referred to as “Policy”) concerns the way in which the data controller: HERAKLION OLD PORT APARTMENTS (hereafter referred to as “HOPA”), collects, stores, uses and generally processes personal data of the visitors of the official website and upon check in.

What are personal data?

The term “personal data” refers to personal information such as your name, postal address, e-mail address, telephone number, etc. that identify or identify your identity, hereinafter referred to as “Data”.

What is the Processing of Personal Data?

Any transaction or set of operations carried out with or without the use of automated means of personal data or personal data sets, such as collection, registration, organization, structuring, storage, adaptation or alteration, recovery, search for information, use, disclosure by transmission, dissemination or any other form of disposal, association or combination, restriction, erasure or destruction.

What Data does HOPA collect and for what purposes?

Reservations can be made by phone, via our website, by email, through partner offices or directly at the reception. In any of the above cases, the following personal data are collected:

Name/Surname
Arrival date
Departure date
Type of accommodation
Postal address
Date of birthday
Country
Nationality
Passport No.
E-mail address
Full credit card details
Special requirements

PURPOSE of data processing:

To speed up the check in process for the next stay with us
For reservation purposes: Send request or booking (through the contact form) or Satisfaction form
We need to record credit card details in order to be able to collect the remuneration of the reservation in accordance with the terms of the agreement in the event that the guest makes a reservation or cancels and does not check in at the hotel.
We need to use the email address in case of relaying information about lost property, booking changes, the booking itself, or comments about our services. Moreover, if there is lost property in the room to inform you.
We must maintain all the data about special preferences (i.e. the additional services requested by the customer) in order to be able to provide services to the customer and to justify the charge and the benefits requested.
We must maintain a file with certain data of the customers due to the public health protection and if necessary, made available for COVID-19 follow-up. Hopa keeps a hotel log book(name, nationality, date of arrival and departure, contact details address, telephone, e-mail) and COVID-19 incidents reports according to the Greek.
To keep an accurate emergency evacuation list

The legal bases are:

the law, which requires the retention of data due to the issue of receipts and invoices, for tax audits and because of municipal and police provisions
Your consent, where appropriate. You can withdraw your consent at any time.

You may withdraw your consent at any time, but the withdrawal of consent will not affect the legitimacy of the processing for the period before it is withdrawn.

Who are the recipients of the Data?

Access to Data has the absolutely necessary staff of the Company, which is committed to maintaining confidentiality. HOPA does not send to third parties Data of HOPA’s customers without its permission, in accordance with the Regulation 979/2016 / EU (otherwise GDPR).

Does HOPA send out the data of non-EU subjects?

Your Data is not sent outside of the EU as it is processed only within Greece.

When does HOPA delete Subjects Data?

Data shall be retained for as long as is necessary to fulfill the purpose for which it has been collected, unless an extension of such time is required due to legal claims or legal obligations of HOPA.

What are the rights of Data subjects?

Have access to their Data
Have the right to correct inaccurate Data, delete their Data, transfer their Data, withdraw their consent and restrict the processing of their Data for as long as their processing objections are pending.

HOPA might keep data if there are other legitimate reasons that override their rights or are not are now necessary for the above-mentioned processing purposes.

How can data subjects exercise their rights?

The exercise of the rights is made by applying either to the post office of HOPA or to the e-mail address info@heraklionapartments.gr HOPA responds to the Requests without delay, and in any case within one (1) month of receiving each Request. If the data subject does not receive a response within the above deadline or the response received is unsatisfactory or the issue has not been resolved, the subject may address the Personal Data Protection Authority (www.dpa.gr).

What is the applicable law when processing your Data from us?

Applicable Law is Greek Law as formulated in accordance with the General Regulation on the Protection of Personal Data 2016/679 / EU and in general the current national and European legislative and regulatory framework for the protection of personal data. The Courts of Heraklion are competent courts for any disputes arising out of the Substance Data.

How will you be informed about any changes to this Policy?

This Policy is updated whenever necessary. If there are any significant changes to the Policy or the way Subjects Data is processed, an update will be posted here on the HOPA website, from which the data subjects will be able to be informed.

Links to other web sites

In order to anticipate your needs, our website provides links to other web sites and third parties for your convenience and information. We are not responsible for the collection, use, maintenance, sharing or disclosure of data (including personal data) by such third parties. We encourage you to contact these third parties to ask questions about their privacy practices, policies and security measures before disclosing any personal data. We recommend that you review the privacy statements and policies of linked web sites to understand how those web sites collect, use and store information.