PRIVACY POLICY & PERSONAL DATA

The website: https://www.loutrapozar.com.gr, hereinafter the “Website”, is under the management of S.A. under the name “Loutra Loutraki Municipal Public Limited Company for the Utilization of Municipal Property Loutraki with the distinctive title “Loutra Loutraki Municipality of Almopia S.A.” located in the Baths of Loutraki, Municipality of Almopia, tel. 2384091300, which is the Processor of the personal data collected from you during your visit to our website.

Processing Controller means the natural or legal person, public authority, agency or other entity that, alone or jointly with others, determines the purposes and manner of processing personal data; when the purposes and manner of of this processing are determined by the law of the Union or the law of a Member State, the controller or the specific criteria for his appointment may be provided by the law of the Union or the law of a Member State.

Personal data processing means any operation or series of operations carried out with or without the use of automated means, on personal data or sets of personal data, such as collection, registration, organization, structuring, storage , adaptation or alteration, retrieval, information retrieval, use, disclosure by transmission, dissemination or any other form of disposal, association or combination, restriction, deletion or destruction) whether in electronic format (electronic file) or in paper format (physical file).

Personal data means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one whose identity can be ascertained, directly or indirectly, in particular by reference to an identifier , such as name, identification number, location data, online identifier or one or more factors that characterize the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person

The Controller has appointed a Data Protection Officer with the powers and duties described in the GDPR, who can be contacted by email at info@sinigoros.com.

The Baths of Loutraki Municipality of Almopia S.A. take the protection of your privacy and personal data very seriously and have taken all the necessary measures to safeguard the security and confidentiality of information concerning visitors to its Website.

Please read this Privacy and Personal Data Protection Policy of our Website carefully in order to be informed about the information collected from you when you visit it, the information posted on it, its use and your rights.

This Policy serves to inform data subjects in accordance with articles 13 of the General Data Protection Regulation of the EU 679/2016.

 

WHAT INFORMATION OUR WEBSITE COLLECTS

The personal data we collect is contact information, identification information, location data and financial information, for example: name, phone, email, address, reservation pool number, booking number.

Throughout your browsing on our website, your personal data is not requested and not kept. Only when you want to become our member (or decide to proceed with a reservation or if you decide to subscribe to our newsletter), we will need your following personal information:

First Name, Last Name, Address, Email Address, and Telephone Number.

The data collected in the contact form is also used to communicate with you, for promotional and advertising purposes, to inform you about products and offers that may be of interest to you, etc. This communication takes place via e-mail, SMS, instant messaging or telephone communication, provided you have given us your consent.

 

PURPOSE AND USE OF PERSONAL DATA

Your Personal Data collected through the above methods are processed exclusively for the following purposes:

• execution of contract (booking and provision of our services)
• keeping and issuing the necessary financial and tax data.
• the continuous improvement of our services, based on statistical analysis of the information you provide us.

Our Company guarantees that your Personal Data will not be used for purposes other than those mentioned in this policy, without your prior information and, where necessary, your approval. We do not share personal data with third parties not affiliated with us, unless it is necessary to respond to your requests and/or as required or permitted by law.

LEGAL BASIS

In order for the processing to be legal based on the General Regulation, Loutra Loutraki Municipality of Almopia S.A. rely on the fulfillment of a condition, legality of the processing, before processing the personal data.

The legal basis of processing your data is:

• the execution of a contract or actions preparatory thereto article 6 par. 1(b)
• compliance with legal obligation article 6 par.1 (c)
• for the fulfillment of a duty performed in the public interest or in the exercise of public authority assigned to him by article 6 par.1 (e)

PERIOD OF PERSONAL DATA RETENTION AND USE

We are committed to keeping your personal information in a secure place with controlled access for up to 3 years after the end of our cooperation. You can request the deletion of your personal data in a shorter period of time, which we will comply with, after checking the legal basis.

DISCLOSURE OF PERSONAL DATA

Our Company Loutra Loutraki Municipality of Almopia S.A. tries to ensure that access to your personal data is limited to those who have a need to know it. The persons who have access to your data are only authorized employees, who are obliged to maintain the confidentiality of this data

We may disclose your personal information to the providers of support systems for the processing of such data.

In the context of the management and completion of your reservation, your personal data is transferred to special services of banking institutions, to process the payment of reservations.

In any case, the company takes the necessary measures to ensure that all Personal Data information transmitted receives an acceptable level of protection.

The Company may from time to time entrust the processing of your data to third parties referred to as the “Processor”. In this case, the relevant information that will be transmitted will amount to the minimum possible and will be used for the specific purpose.

Furthermore, the respective processor provides the Employer with sufficient assurances that it processes your personal data in accordance with the Regulation, while also ensuring your rights, as they derive from the Regulation (e.g. by signing confidentiality agreements and protection of your data).

Our Company Loutra Loutraki Municipality of Almopia S.A. respects your right to have your privacy and information about you protected and for this reason uses this information for the aforementioned purposes. For this reason, it does not share, transmit and does not make your information accessible to third parties, unless this is required to fulfill the processing purposes described in this Policy. We also do not transfer this information outside the European Union.

In case of and/or transmission of the data to countries outside the European Union, the Company informs the data subject in advance and ensures that the appropriate guarantees are provided for the protection of personal data and that they are applied, in terms of expertise, reliability and resources, the appropriate technical and organizational measures, in such a way that the processing is lawful and ensures the protection of the rights of the data subjects and the appropriate level of security against risks.

DATA SECURITY AND INTEGRITY

The security of your personal data is our absolute commitment. The Company implements appropriate technical and organizational measures aimed at the safe processing of personal data and the prevention of accidental loss or destruction and unauthorized and/or illegal access, use, modification or disclosure thereof.

In addition, we try to ensure that access to your personal data is limited to those who have a need to know it. Persons who have access to data are only authorized employees and are required to maintain the confidentiality of such data.

In any case, the way the internet works and the fact that it is free to anyone, does not allow to provide guarantees that unauthorized third parties will never gain the ability to violate the applied technical and organizational measures, gaining access and possibly carrying out use of personal data for unauthorized and/or illegal purposes.

YOUR RIGHTS

You can exercise, as the case may be, the following rights:

• Right to information / Transparency : You have, according to article 12 GDPR, the right to information, i.e. to know who is processing your data, what it is and for what reason, as we mention above in simple language
• Right to withdraw consent :You have the right at any time to withdraw your consent to the collection and processing of your personal data. In this case, the processing that preceded the revocation/withdrawal of your consent is not affected and is entirely lawful in accordance with Article 7(3) GDPR.
• In the event that you wish to withdraw your consent, please inform us – by sending a Responsible Declaration, signed by the applicant – either by sending a Physical Letter to the company’s headquarters, or by sending an Electronic Letter (to the Electronic Mail account: info@loutrapozar.com.gr , always stating your full details and the reason for your contact with the company.
• Right of access to data: You have, in accordance with Article 15 GDPR, the right to request to obtain a right of access, i.e. to be informed about the purposes of the processing, the relevant categories of personal data, the recipients to whom the data has been shared or is to be shared, the period of time for which it will be stored, the existence of the right to correct or delete data or limit its processing or the right to object to the processing, information on the origin of the data and the existence of automated download decisions, including profiling and information about the logic followed.
• Right to rectification, You have, according to Article 16 GDPR. the right to request the correction of inaccurate data as well as the completion of incomplete data concerning you.
• Right to erasure (right to be forgotten): You have, in accordance with Article 17 GDPR, the right to request that your personal data be deleted from our files, provided that their processing is no longer necessary or the retention of your data is not required in order to comply with our legal obligations or to defend our legal interests before the Courts.
• Right to restriction of processing: You have, in accordance with Article 18 GDPR, the right to request the restriction of the processing of your personal data, when their accuracy is disputed, the processing is unlawful, the data are no longer needed, you object to automated processing if the accuracy of your data is disputed
• Right to portability: You have, in accordance with Article 20 of the GDPR, the right to request the transfer of your data in a structured and commonly used format to another controller.
• Right to human intervention : You have the right to object when a decision concerning you is based solely on automated processing, including profiling, and that decision produces legal effects or significantly affects you. In any case, however, we do not carry out exclusively automated processing of your data and we guarantee that at all stages the processing takes place exclusively and only with human intervention in accordance with Article 22 GDPR.
• Right to object: You have, in accordance with article 6 paragraph 1 letter e or f GDPR, the right to object to the processing of your data at any time and for reasons related to your particular situation, in the processing of personal data concerning you.

We inform you in any case that our Website does not use your data for direct marketing purposes and does not perform profiling based on automated methods of processing your data.

To exercise your above rights, you can contact Loutra Loutrakiou Municipality of Almopia S.A. in writing, by sending a postal letter, to the address: Loutra Loutrakiou Municipality of Almopia, PO Box 58400, or by sending an e-mail to the electronic address: info @loutrapozar.com .gr

For any issue regarding the processing of personal data, you can contact the relevant department of the company, at the following contact details: email: info@loutrapozar.com.gr

The Baths of Loutraki Municipality of Almopia S.A. will make every effort to respond to any related request from you within thirty days of receipt. However, in the event that due to the complexity of your request or due to the volume of information it is not possible to satisfy your request within thirty days Loutra Loutraki Dimos Almopia S.A. undertake to inform you within the above deadline in writing of the reasons for the delay and to make every effort to satisfy your request as soon as possible and in any case within two additional months.

The Baths of Loutraki Municipality of Almopia S.A. reserve the right not to satisfy your request, in the event that it is deemed manifestly unfounded or excessive, informing you of the reasons for not satisfying it.

For any issue regarding the processing of personal data, you can contact the relevant department of the company, at the following contact details: email: info@loutrapozar.com.gr

The Baths of Loutraki Municipality of Almopia S.A. have appointed a Data Protection Officer with the powers and duties described in the GDPR, who can be contacted by email at info@sinigoros.com.

In any case, you have the right to submit a complaint to the Personal Data Protection Authority, in writing (Kifisias 1-3, P.O. 115 23, Athens) or electronically ( www.dpa.gr or by email to the address complaints@dpa.gr) or in other ways detailed on the website of the Protection Authority Personal Data (www.dpa.gr).

CHANGES TO THIS POLICY

Loutrakiou Dimos Almopia S.A. reserves the right to amend this Policy, always in accordance with the applicable legal rules on privacy and personal data protection. Visitors to our Website should read this Privacy and Personal Data Protection Policy at regular intervals to be informed of any changes that take place, while the Baths of Loutraki Municipality of Almopia S.A. undertake to provide the necessary updates to its visitors and users by any appropriate means, in compliance with the conditions set by the General Data Protection Regulation of the EU 679/2016.