Processing of Personal Data
MPONITSIS SOTIRIOS AND ELEFTHERIA CHALARI EE - "THIREA SUITES"

Update regarding the processing of your personal data by “MPONITSIS SOTIRIOS AND ELEFTHERIA CHALARI EE - ‘THIREA SUITES”

Our company, named “MPONITSIS SOTIRIOS AND ELEFTHERIA CHALARI EE - ‘THIREA SUITES’”, headquartered in Oia, Thira, 84 702, considers the protection of your privacy and personal data of paramount importance.

In this context, as the data controller, “MPONITSIS SOTIRIOS AND ELEFTHERIA CHALARI EE - ‘THIREA SUITES’” defines the purposes and the manner of processing in accordance with Regulation 679/2016 EU on the protection of natural persons with regard to the processing of personal data, on the free movement of such data, and the repeal of Directive 95/46/EC (General Data Protection Regulation, hereafter referred to as 'GDPR'), as well as the applicable legislation.

Below, we provide you with useful information regarding how we process Personal Data, which we collect as part of our business activities within the framework of the applicable legislation, as well as information regarding your rights related to the processing.

1. Sources of collection & Categories of personal data
   

   “MPONITSIS SOTIRIOS AND ELEFTHERIA CHALARI EE - ‘THIREA SUITES’” collects the following categories of personal data, through, for example, its employees or associates:

   Regenerate response

   a. Identification Data	For example: Name, Surname, Patronymic, Matronymic, Date of birth, Identification number (ID card/passport), Tax Identification Number (TIN), Driver's license
   b. Contact Information	For example: Address, Email address/correspondence address, Telephone numbers/fax numbers
   c. Payment Data	For example: Bank accounts, Debit/credit cards and other banking cards

   
   
2. Processing Purposes
   

   The purposes for which the processing of the above personal data is carried out are as     follows:

   • Informing “MPONITSIS SOTIRIOS AND ELEFTHERIA CHALARI EE - ‘THIREA SUITES’” about the intention of the data subject regarding the provision of hospitality and hotel services, and generally about all services that can be provided by “MPONITSIS SOTIRIOS AND ELEFTHERIA CHALARI EE - ‘THIREA SUITES’"
   • To provide the data subject with reminders and instructions regarding the coverage of “MPONITSIS SOTIRIOS AND ELEFTHERIA CHALARI EE - ‘THIREA SUITES’” and the rights and obligations of the parties prior to the commencement of the requested services.
   • To conduct research that “MPONITSIS SOTIRIOS AND ELEFTHERIA CHALARI EE - ‘THIREA SUITES’” may undertake in relation to other past or future service requests of the data subject.
   • To ensure compliance of “MPONITSIS SOTIRIOS AND ELEFTHERIA CHALARI EE - ‘THIREA SUITES’” with obligations imposed by the applicable legislative and regulatory framework, compliance with judicial decisions and response to requests from public authorities (including those located outside the country of residence of the data subject).
   • To analyze and manage other business risks, to manage complaints and comments, within the framework of compliance by “MPONITSIS SOTIRIOS AND ELEFTHERIA CHALARI EE - ‘THIREA SUITES’” with legal obligations, as well as to investigate customer satisfaction.
   • Complying with legal obligations, as well as the establishment and exercise of legitimate rights of “MPONITSIS SOTIRIOS AND ELEFTHERIA CHALARI EE - ‘THIREA SUITES’” to protect its lawful interests and those of the companies within its Group, including the management of  “MPONITSIS SOTIRIOS AND ELEFTHERIA CHALARI EE - ‘THIREA SUITES’” business operations and IT infrastructure, in accordance with its internal policies and procedures, including those related to the pricing of products and services, operation of IT systems, hosting of data and applications, data analysis, file management, and internal control processes.
   • To promote “MPONITSIS SOTIRIOS AND ELEFTHERIA CHALARI EE - ‘THIREA SUITES’” commercially, which may involve sending SMS messages, emails, and making telephone calls to the data subject (if consent is provided), in order to inform them about new services, offers, and collaborations with other companies that cover different types of services.
   • It is explicitly noted that the subject has the right to refuse to provide consent for the aforementioned processing purpose (commercial promotion), regardless of any consent provided for any other processing purposes mentioned above.

   Τhe provision of personal data by the subject is necessary for the conclusion and subsequent execution of the requested services. The subject is not obliged to provide them; however, it is informed that the non-provision of personal data that is absolutely necessary for the provision or execution of the service may result in the inability to enter into the respective agreement or to perform certain aspects of it or provide the requested services

3. Legal basis for data processing
   

   According to the applicable legislation for the protection of personal data, the legal bases for data processing may vary depending on the case and include the following:

   • Article 6(1)(α) of the General Data Protection Regulation (GDPR), which refers to the consent of the data subject for the processing of their personal data, provided that the data subject has given it written.
   • Article 6(1)(β) of the General Data Protection Regulation (GDPR), as the processing is necessary for the performance of the requested services or any cooperation agreement in which the data subject is a contracting party.
   • Article 6(1)(στ) of the General Data Protection Regulation (GDPR), which refers to the processing necessary for the purposes of the legitimate interests pursued by “MPONITSIS SOTIRIOS AND ELEFTHERIA CHALARI EE - ‘THIREA SUITES’” for its efficient operation, as these legitimate interests are described in the purposes mentioned above in paragraphs 2c, 2d, 2e, and 2f.

   Specifically for the case of special categories of personal data ('sensitive personal data') described above, the collection and processing are carried out exclusively if the data subject has provided explicit consent, in accordance with Article 9(2)(a) of the General Data Protection Regulation (GDPR), for their processing for the purposes mentioned above.

4. Tranfer & Categories of Recipients
   
   

   “MPONITSIS SOTIRIOS AND ELEFTHERIA CHALARI EE - ‘THIREA SUITES’” may transfer the data to other organizations within the Group to which it belongs, within the European Union. It will also transfer the data to other companies (following a legitimate request), to Social Security authorities (ΙΚΑ/ΕΦΚΑ), and to Public Authorities when required by law.
   Furthermore, the data will be transferred to the affiliated providers collaborating with “MPONITSIS SOTIRIOS AND ELEFTHERIA CHALARI EE - ‘THIREA SUITES’” within the framework of its lawful operation. It is noted that the relevant transfer to public authorities constitutes a legal obligation of “MPONITSIS SOTIRIOS AND ELEFTHERIA CHALARI EE - ‘THIREA SUITES’” under Article 6(1)(γ) of the General Data Protection Regulation (GDPR).

5. Your rights
   
   
   • Rights to Access, Rectification, Erasure, and Restriction of Processing.

     You have the right to submit a request to “MPONITSIS SOTIRIOS AND ELEFTHERIA CHALARI EE - ‘THIREA SUITES’” (as the data controller) for:

     • Access to the personal data concerning you,
     • Correction of inaccurate or outdated data concerning you or completion of any incomplete data.
     • To request the erasure of data concerning you, in case the processing is no longer necessary for the purposes for which they were collected,
     • To request the restriction of the processing of personal data concerning you,
     • The portability of your data (e.g., to transfer it directly to another company).
       
       
   • Right to object

     Additionally, you have the right to object, at any time and for reasons related to your particular situation, to the processing of your personal data based on Article 6(1) of the General Data Protection Regulation (GDPR), including profiling, according to the mentioned provisions. In such cases, “MPONITSIS SOTIRIOS AND ELEFTHERIA CHALARI EE - ‘THIREA SUITES’” as the data controller will no longer process your personal data unless it demonstrates compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.
     If your personal data is being processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such direct marketing, including profiling related to such direct marketing. In such cases, “MPONITSIS SOTIRIOS AND ELEFTHERIA CHALARI EE - ‘THIREA SUITES’” as the data controller will no longer process your personal data for these purposes.

   • Right to withdraw your consent

     You have the right to withdraw your consent at any time, without affecting the legality of the processing based on your consent before its withdrawal. However, we inform you that the withdrawal of consent for the processing of data that is absolutely necessary for the execution of the contract, and for which explicit consent is also required, may result in the inability to execute the contract in some of its aspects.

   • The exercise of the aforementioned rights

     by you requires the submission, at no cost, of a written request to the Data Protection Officer of “MPONITSIS SOTIRIOS AND ELEFTHERIA CHALARI EE - ‘THIREA SUITES’” whose contact details are provided below.

   
   
6. How we protect your personal data
   “MPONITSIS SOTIRIOS AND ELEFTHERIA CHALARI EE - ‘THIREA SUITES’” uses appropriate technical and organizational measures in accordance with data protection legislation to safeguard your personal data. However, no transmission of data over the internet or electronic storage system can guarantee 100% security. If you have any indications that your communication with us is no longer secure, please inform us immediately at dpo@thireasuites.
   
   
7. Retension period of personal data
   “MPONITSIS SOTIRIOS AND ELEFTHERIA CHALARI EE - ‘THIREA SUITES’” retains personal data for the period required for the purposes of processing or to comply with legal obligation
   
   
8. Use of Cookies
   In order to personalize your visit to our website and to ensure the functionality of certain features, we use 'cookies' to collect and store data. For more information, please refer to our cookie policy, which is available here.
   
   
9. Your Communication with “MPONITSIS SOTIRIOS AND ELEFTHERIA CHALARI EE - ‘THIREA SUITES’”

For any matter regarding the processing of your personal data or if you wish to exercise your rights, you can contact the Data Protection Officer (DPO) of “MPONITSIS SOTIRIOS AND ELEFTHERIA CHALARI EE - ‘THIREA SUITES’” using the following contact details:

• By email: at the email address dpo@thireasuites.com
• By post: to the address of “MPONITSIS SOTIRIOS AND ELEFTHERIA CHALARI EE - ‘THIREA SUITES’”, Oia Thira 84702, Attn: Data Protection Officer.

In any case, you also have the right to lodge a complaint with the Greek supervisory authority "Hellenic Data Protection Authority" (www.dpa.gr).
We reserve the right to modify or update this Privacy Notice at any time. We will inform you of any changes by posting the updated Privacy Notice on our company's website and notifying you through any appropriate means. We also encourage you to regularly consult this Privacy Notice for any potential changes.

At your disposal.
Thirea Suites