“Spyrou Group of Companies” may process the following categories of your personal data:
➢ Personal details: name, surname, identity card or passport number, gender, date of birth, nationality
➢ Contact details: contact phone number, tele facsimile, email address, social networking page accounts
➢ Payment details: details of your credit or debit card
➢ Items related to your participation in our Loyalty Club program
➢ Details of your stay: date of arrival and departure, goods and services that you have chosen, participation and group of customers as well as the issue of your ferry tickets through our office
➢ Information related to your participation in our contests and lucky draws
➢ Your reviews and your assessment of the quality of your stay and our services, in general
➢ Information you provide us about fulfilling special requests and wishes during your stay
➢ Any personal data you choose to share with us in order to better serve you
“Spyrou Group of Companies” collects your personal data: ➢From information provided directly by you:
➢ From travel agents and tour operators with whom “Spyrou Group of Companies” cooperates.
➢ From electronic platforms through which you communicate with us or make your reservations.
➢ From the issuance of advance payments, payments and balance payments. In no event, we collect or process personal data that have not been provided with your consent.
We collect, process, use and store your personal data to fulfill the following set purposes only:
➢ To fulfill our contractual obligations to you and to provide you with the best possible services and accommodation we promised you.
➢ To comply with obligations imposed by the relevant legislation, judicial or supervisory authorities and the applicable law.
➢ For information, research, or advertising purposes only if we have obtained your explicit consent to this effect.
➢ To certify you when logging in to our web pages, our application and our Wi-Fi internet connection.
➢ To fulfill your reservation and/or information requests and to remember your preferences and registration information.
➢ For Loyalty Club programs.
➢ To measure and obtain data for administrative and other communication purposes and to operate and improve the effectiveness of our services, our Websites and the Programs and Applications related to the operations of “Spyrou Group of Companies”.
➢ For our internal purposes (such as auditing, data analysis, and research to improve and develop our products, services, content, advertising, and communications).
We take appropriate and suitable technical and organizational measures to protect your personal data that we process. We prevent unauthorized access to your data, and all staff members are bound to ensure the confidentiality of your personal data. We do not disclose or transfer your personal data to third parties except in the context of our contractual relations with our Affiliates and for the fulfillment of specific purposes related to your best service.In any case, we ensure that all of our Affiliates comply with the data protection legislation and, in turn, receive all necessary guarantees for the confidentiality, integrity and availability of any data they may receive.
We will retain your Personal Data for as long as you use our websites and / or our Application and for a reasonable period of time to meet the above-mentioned purposes or to comply with the applicable laws or statutes of limitations or terms of this Policy. We will automatically retain information collected for up to 24 months and then store them in an unrecognizable aggregate form. In any case, we delete your personal data completely and permanently from our physical and electronic records within 30 days of your request.
Please refer to the relevant section
You have the following rights with respect to your personal data we process. You have the right to:
➢ Withdraw at any time your consent to the use of your data for advertising or information purposes.
➢ Ask for information about the type of processing that your data is undergoing and access to it
➢ Request to correct or update your data if it is inaccurate or incomplete.
➢ Request the complete and definitive deletion of your data from our records.
➢ Request that we limit the processing of your data, provided that the conditions laid down in the relevant legislation are met.
➢ Request a copy of all or part of your personal data in a commonly used and machine-readable format.
We are committed to meeting your requests free of charge as soon as possible and in any event within 30 days of their submission. This deadline can be extended for 60 days, depending on the complexity and the number of requests. Please be advised that you may also address your complaints and concerns about the use and protection of your personal data with the responsible Personal Data Protection Authority.