INTRODUCTION
Last updated: Feb’ 23
K4LEISURE SINGLE MEMBER P.C (hereinafter “us”, “we”, or “our”) wishes to inform you about the processing of your personal data when you visit or use the Website https://naxosdunes.com (the “Website”). To that end, the present Privacy Policy is meant to help you understand what personal data we collect, why we collect it, and how you can update, manage, export, and delete your personal data.
We will not use or share your personal data with anyone except as described in this Privacy Policy.
- CONTACT DATA
The data controller of your personal data according to the General Data Protection Regulation (EU) 2016/679 (hereinafter “GDPR”) is K4Leisure.
K4Leisure
5 Paster Str
11521 ATHENS
Greece
Owner contact email: vkammenos@yahoo.com
If you have any questions, comments or concerns about our privacy practices and/or would like to submit a privacy request, please contact us at the abovementioned contact details.
- CATEGORIES OF PERSONAL DATA COLLECTED
- Data necessary for managing online reservations, such as your name, your email address, your contact details.
- PURPOSE AND LEGAL BASIS OF PROCESSING
We may process your personal data if one of the following applies:
- You have given your consent for the purpose of enhancing our services and the functionality of the website, pursuant to Article 6(1)(a). Note: In some jurisdictions the data controller may be allowed to process personal data insofar that you do not object to such processing (“opt-out”), without having to rely on consent or any other of the following legal bases. This, however, does not apply, whenever the processing of personal data is subject to European data protection law;
- provision of data is necessary for the performance of managing online reservations with you and/or for any pre-contractual obligations thereof, pursuant to Article 6(1)(b);
- processing is necessary for compliance with a legal obligation to which the data controller is subject, pursuant to Article 6(1)(c);
- processing is related to a task that is carried out in the public interest or in the exercise of official authority vested in the data controller, pursuant to Article 6(1)(e);
- processing the online reservations is necessary for the purposes of the legitimate interests pursued by the data controller or by a third party, pursuant to Article 6(1)(f).
- LOCATION OF YOUR PERSONAL DATA
The storage and processing of your personal data is taking place only within the EU/EEA, where an adequate level of personal data protection is ensured.
- RETENTION TIME
Personal data shall be processed and stored for as long as required by the purpose they have been collected for.
Therefore:
- Personal data collected for purposes related to the performance of a contract shall be retained until such contract has been fully performed.
- Personal data collected for the purposes of our legitimate interests shall be retained as long as needed to fulfill such purposes.
We may retain your personal data for a longer period on the basis that you consent to such processing, and as long as such consent is not withdrawn. Furthermore, we may be obliged to retain your personal data for a longer period whenever required to do so for the performance of a legal obligation or upon order of an authority.
Once the retention period expires, your personal data shall be deleted. Therefore, the right of access, the right to erasure, the right to rectification and the right to data portability cannot be enforced after expiration of the retention period.
- YOUR RIGHTS
You may exercise certain rights in connection with the processing of your personal data:
In particular, you may:
- Withdraw your consent at any time. You have the right to withdraw your consent, without however affecting the lawfulness of the processing based on consent before its withdrawal.
- Object to the processing of your data. You have the right to object to the processing of your data if the processing is carried out on a legal basis other than consent. Further details are provided in the dedicated section below.
- Access your data. You have the right to receive information as to whether or not personal data of yours are processed, obtain disclosure regarding certain aspects of the processing and obtain a copy of the Data undergoing processing.
- Verify and seek rectification. You have the right to verify the accuracy of your data and ask for it to be updated or corrected.
- Restrict the processing of your data. You have the right, under certain circumstances, to restrict the processing of your data. In this case, your data may not be processed for any purpose other than storing it.
- Have your personal data deleted or otherwise removed. You have the right, under certain circumstances, to obtain the erasure of your data from the data controller.
- Receive your data and have it transferred to another controller. You have the right to receive your data in a structured, commonly used and machine readable format and, if technically feasible, to have it transmitted to another controller without any hindrance. This provision is applicable provided that the data is processed by automated means and that the processing is based on your consent, on a contract which you are a part of or on pre-contractual obligations thereof.
- Lodge a complaint. You have the right to bring a claim before the Hellenic Data Protection Authority (HDPA) via their website dpa.gr .
Where personal data is processed for the purposes of public interest, in the exercise of an official authority vested in the data controller or for the purposes of the legitimate interests pursued by the data controller, you have the right to object to such processing.
Should your personal data be processed for direct marketing purposes, you can object to that processing at any time without providing any justification. To find out more about whether we are processing personal data for direct marketing purposes, you may refer to the relevant sections of this document.
- HOW TO EXERCISE YOUR RIGHTS
You may exercise the aforementioned rights at any time and free of charge by sending a written request to info@naxosdunes.com .The Company will respond to your request in writing as soon as possible and in any event within one (1) month.
Should we fail to take action on your requests, you have the right to lodge a complaint with the competent data protection authority. For data subjects resident in Greece, the competent authority is the Hellenic Data Protection Authority, www.dpa.gr.
- HOW YOUR PERSONAL DATA ARE PROTECTED
We make every effort to implement appropriate security measures to protect the integrity, confidentiality and availability of your personal data, in particular against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
The data processing is carried out using computers and/or IT enabled tools, following organizational procedures and modes strictly related to the purposes indicated.
- UPDATES TO THIS PRIVACY POLICY
We reserve the right to make changes to this Privacy Policy at any time. Any amendments will be posted on this Website and, if technically and legally feasible, we shall inform you by sending you a notice via any contact information available to us. It is strongly recommended to consult this Privacy Policy regularly, so that you are aware of its latest version and any updates.
Should the changes affect processing activities performed on the basis of your consent, we shall request your consent anew.
