Contents:

Privacy and Privacy · What is "Personal Data"? What is "Personal Data Collection"; It is mandatory to provide your Data; Personal Data collected by the Company; Purposes for the Use of Personal Data · Your Rights and Choices · Transfer of Personal Data - Who are the recipients of your data; How we ensure that Data Processors respect your Data; Personal Data Retention Period; information protection · What is the applicable law when processing your Data by us; Privacy Policy Modification; Data Controller's details;

Personal Data Protection and Privacy

Our Company COTTAGE BOUTIQUE APARTMENTS ATHENS considers of paramount importance the protection of the personal data of visitors / users of its online store https://cottageboutique.gr/.

For this reason, we have taken all necessary actions in full compliance with EU 2016/679 General Data Protection Regulation (GDPR), as well as with national legislation Law 4624/2019, as in force, to comply with and ensure the requirements regarding the protection of personal data, which we collect when you browse this website and use its services.

We assure you that when you disclose personal data to us or when we collect personal data about you, we always use them in accordance with this Policy and they remain strictly confidential.

We would also like to assure you that we do not collect personal data of minors under the age of 18, nor do we process sensitive personal data of visitors/users of our online store.

Please read carefully this Privacy Policy, which describes how the Company, acting as Data Controller, collects, stores, uses and generally processes your personal data when you visit, register or use the Company's website (www.https://cottageboutique.gr/) as well as when you deal with its physical stores, as well as the way of use, disclosure and protection of your personal data, the choices you have regarding your personal data and how you can contact us, as its acceptance is considered as a free declaration of your consent to the collection, use and further transmission of your personal data for purposes related to the browsing/use of this website and the services provided on it. If you do not agree with any part of this Policy, you are requested to refrain from any action, interaction, access, transaction and use of this website.

 

What is “Personal Data”

Personal data is any information relating to an identified or identifiable natural person (data subject), such as, but not limited to, name, email address, home address, mobile phone number, purchasing habits, computer IP address, user-generated content, financial information and social welfare information.

What is "Collection of Personal Data"

Any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available; association or combination, restriction, deletion or destruction.

It is mandatory to provide your Data

The provision of Data to the Company may be necessary to achieve the purposes specified in this Privacy Policy or be optional.

The mandatory or optional nature of the provision of Data is indicated by an asterisk (*) next to the mandatory personal data.

If you refuse to provide the data marked as mandatory on the websites, it will be impossible to achieve the main purpose of collecting the specific Data, and may, for example, make it impossible for the Company to fulfill the sales contract or provide the other services available on the websites.

The provision of additional Data to the Company, beyond those marked as mandatory, is optional and does not entail consequences regarding the main purposes of data collection, but their provision serves to optimize the quality of the services provided.

Personal Data collected by the Company

The aim of our Company is to collect the necessary data each time that is necessary for the intended purpose. Some of the data we collect is mandatory in order to be able to perform our purposes (eg sending the order), while others are optional to optimize the operation of this website.

Furthermore, when you browse https://cottageboutique.gr/ we automatically collect information about you, such as your IP address and domain name. This information may be used to provide you with a more personalized experience during your visit to our online store.

However, in order to use the services of this website, you may be asked to provide personal data such as: name, postal address, telephone, e-mail address and if you wish an invoice you will also be asked for the name of your business, profession, tax identification number and the public financial service to which you belong.

In order to be informed about offers in our services, you are invited to register, if you wish, your e-mail on this website, in order to receive a relevant newsletter.

You may also be asked to provide us with information about your location or personal preferences and interests in order to offer you more personalized services.

All information provided will be stored in our Company's databases, manually and/or by electronic means.

In any case, the Company provides you with the necessary information to be able to give prior consent to the processing of your personal data for one or more specific processing purposes. You can withdraw your consent at any time, easily and immediately. For cases where you are not provided with the possibility of automated withdrawal of your consent, please contact our Company in any way and we will provide you with all necessary information for the desired withdrawal.

Purposes for Use of Personal Data

The legal basis for the processing of your personal data may be based sometimes on your consent, sometimes on the obligation to perform a contract, where you will be a contracting party and sometimes on legitimate interests pursued by our Company or a third party.

Our Company, through its website https://cottageboutique.gr/ in compliance with the relevant provisions of the law, uses the personal data of visitors/users collected for the following purposes:

-Communication of our Company with you (to respond to your request to our Company).

-Management of the sale of our products and/or services, e.g. communicating and informing you about room availability and the progress of your reservation, issuing and sending your tax documents in electronic form (e-invoicing), managing your debts to the Company, making returns and providing guarantees.

-Compliance with the obligations imposed by the applicable legislation e.g. tax legislation, e-commerce directive, etc.

-Subscription to the newsletter mailing list (newsletter with information on offers on products and services, Company news, events and events of the Company and / or third related organizations, discount coupons and competitions).

-Registration in our competitions.

- Use of our services. Your personal data will be used to issue a relevant document from your transaction with our Company.

-Send personalized information about news and services.

-Send regular updates that the Company deems interesting for the user.

-Send information upon request about news and services.

-For market research and marketing purposes.

-To serve internal purposes of the Company's administration and improve the services provided.

-For acts of "direct promotion", which include any communication of the Company for the purposes of promoting products and services.

-To control, improve and adapt to your preferences and choices regarding our products and / or services.

All personal data collected and further processed by the Company are appropriate, adequate and limited to the needs and purposes for which they are collected. Furthermore, we process your personal data in a way that guarantees their accuracy, continuous updating and security, including protection against unauthorized or unlawful processing, accidental loss, destruction or damage, taking any technical and organizational measures deemed appropriate for this purpose, in particular, by encrypting, coding, pseudonymising and anonymizing personal data; as well as controlling, monitoring and regularly recording all processing operations.

When consent is given for automated processing of your personal data, the Company collects and processes information based on your personal preferences and interests, only to provide you with personalized information and / or notifications about the Company's services and activities through direct marketing actions.

The Company is committed to maintaining strict confidentiality of all data collected, maintaining access to them exclusively as required in accordance with its usual activity.

Your Rights and Choices

The Company gives you the opportunity, by contacting the email address: contact@cottageboutique.gr, to exercise the rights provided by law regarding the personal data it collects. Specifically, for your personal data you have the following rights:

  • Right of Access – Information: You have the right to be informed about whether we process your data, what data we have collected, to whom we disclose it, the purpose of processing and for how long we will keep it.
  • Right to correct inaccurate information: You have the right to ask us to correct information about you that is inaccurate or even to supplement additional information. You can exercise this right yourself by logging into your account and correcting the corresponding fields of your profile, in case this possibility exists.
  • Right to Restriction of Processing: You have the right to request that we restrict or exclude the processing of some of your personal data.
  • Right to Portability: You have the right to ask us to receive your personal data or to transmit it to another Organization on your behalf.
  • Right to Object: You have the right, if the necessary conditions are met, to object to the further processing of your personal data.
  • Right to Erasure – Oblivion – Withdrawal of Consent: You have the right to request in writing that we delete your personal data, provided that there are no legitimate reasons that prevail over your right (eg tax and commercial legislation). You also have the right to withdraw your consent to the processing of your data based on your consent, without however affecting the lawfulness of their processing before your withdrawal.
  • Right not to receive marketing-related updates. You have the right at any time to refuse to receive notices by clicking on the "Unsubscribe" link in any email or newsletter we send you. Otherwise, you can contact us using the contact details provided at the end of the text.

Our Company, after examining each request based on the implementing provisions, will respond to you in writing within 30 days of receipt of the request and the identification of the applicant. That period may be extended by a further two months, if necessary, taking into account the complexity of the request and the number of requests.

In addition, in case of exercising one or more of the aforementioned rights, these will be transmitted by us to any third party recipient, to whom they may have been transmitted in the context of the purposes of processing.

Transfer of Personal Data - Who are the recipients of your data?

Access to your personal data has the absolutely necessary staff of our Company, which is committed to maintaining confidentiality. Some of your data and in any case the absolutely necessary, we may disclose them to affiliated companies or third party service providers, who provide transport, advertising, statistics or research services, communication, conducting competitions and supporting our website or commercial program, and who process your Data as Processors on our behalf and in accordance with our orders and always in the way described in this Privacy Policy. These partners are prohibited from using the above information or disclosing it for purposes other than to provide services on our behalf. The cooperating companies are committed to maintain confidentiality regarding your data and not to publish them to third parties without the Company's permission, as well as to take appropriate security measures and comply with the legal framework for the protection of personal data. Finally, our Company may be obliged by law or by judicial or other competent authority to publish your personal information.

The following is the policy we apply to those with whom we share your Data in accordance with the above:

-We only provide the information they need to perform their specific services.

-They may use your Data only for the exact purposes that we specify in our contract with them.

-We work closely with them to ensure that your privacy is respected and protected at all times.

-If we stop using their services, any of the data you hold will be deleted or made anonymous.

How we ensure that Data Processors respect your Data

The Processors on our behalf have agreed and are contractually bound with the Company:

-maintain confidentiality,

- not to send your Data to third parties without the Company's permission,

-take appropriate security measures,

-comply with the legal framework for the protection of personal data and in particular Regulation 979/2016 / EU (otherwise GDPR).

Personal Data Retention Period

All personal data are kept by our Company for a predetermined and limited period of time depending on the purpose of processing, at the end of which such personal data are deleted from our databases. The personal data you provide to our Company through this website or in other ways will be retained for as long as you wish to enjoy our services and the relevant updates as above.

In general, this means that we will retain your personal data for as long as you have an account with our Company. With regard to your Personal Data related to product purchases, we retain this data for a longer period in order to comply with our legal obligations (such as tax and commercial legislation and for warranty purposes). At the end of this retention period, your data will be completely or anonymously deleted, for example by aggregating with other data, so that it can be used in a non-identifiable way for statistical analysis and business planning.

In case of a sales contract with our Company, through website contact@cottageboutique.gr the reasonable retention time of your personal data is five years from the completion of the sales contract. The time that your personal data may be retained by our Company depends additionally on the relevant obligations of the Company provided for in the applicable Legislation (tax, commercial, etc.) and the provisions of the law for their maximum retention period. Your declaration of consent to send a newsletter is kept for as long as the newsletter is sent to you by the Company and in any case not more than six months from the cessation of its sending.

Information Protection

Our Company, in order to prevent unauthorized access, maintain the accuracy of the data and ensure their appropriate use, has taken all necessary organizational and technical measures to protect your personal data. However, no method of transmission over the Internet or method of electronic storage is 100% secure.

In case you believe that your personal data has been affected in any way, you can address or file a complaint with the Personal Data Protection Authority, as follows:

Website: www.dpa.gr

Postal Address: Kifisias Avenue 1-3, P.O. 115 23, Athens

Call center: +30 210 6475600

E-mail: contact@dpa.gr

What is the applicable law when processing your Data by us?

The applicable law is Greek law, as formulated in accordance with the General Data Protection Regulation 2016/679/EU, and in general the current national and European legislative and regulatory framework for the protection of personal data.

The competent courts for any emerging disputes related to your Data are the Courts of Athens.

Modification of Privacy Policy

The Company may at any time update or modify this Privacy Policy in order to respond to any changes in the operation of this website, the services it offers and any changes in the provisions of the law. The most recent amendment is always considered valid. For this reason, you should check this Privacy Policy regularly in order to be informed of its most recent version.

Data Controller Details

For questions regarding this Privacy Policy, as well as any issue related to the processing of your Data and the exercise of your rights, you may contact the Data Protection Officer (DPO) of COTTAGE BOUTIQUE APARTMENTS ATHENS at the following address:

Data Controller: FINANCIAL CONTROL COTTAGE V.CHRISTODOULOU Ι.Κ.Ε.

Address: 33 Alexandroupoleos, Athens 11527

Contact Phone: 210-7485669

Email: contact@cottageboutique.gr