PRIVACY POLICY | Favelas Apartments

PRIVACY POLICY

Introduction

This privacy policy includes the ways in which “A. CHRISTIDHS E.E.” processes information that can be used to directly or indirectly identify an individual (“Personal Data”) collected through the use of the “A. CHRISTIDHS E.E.” website and its contact form or booking form. In any case, “A. CHRISTIDHS E.E.” reserves the right to change the terms of protection of personal data after informing the visitors/users and within the existing or potential legal framework. If a visitor/user does not agree with the personal data protection conditions provided for in this section, he/she must not use its services https://favelas.com.gr/ This policy is valid and applied throughout the environment (physical or electronic) operated by the company “A. CHRISTIDHS E.E.” Contact Details: A. CHRISTIDIS E.E., Stavros Amygdaleona, P.O. 64012, Tel.: (+30) 6983586957, e-mail:favelasapart@gmail.com. You can browse our website without providing any personal information. Your personal information will only be requested when you want to proceed with communication with “A. CHRISTIDHS E.E.” or in detention. Our website is in compliance with General Regulation 2016/679 of the European Parliament and of the Council, of April 27, 2016, for the protection of natural persons against the Processing of personal data and for the free movement of such data (“GDPR Regulation “), which is a directly binding legislative act in conjunction with the Greek implementing law 4624/2019 (F.E.K. 137/A/29.08.2019) of this regulation. The General Data Protection Regulation (GDPR) creates some new rights for natural persons and strengthens some of the rights that already existed under Directive 95/46/EC. Directive 95/46/EC was repealed on May 25, 2018, when GDPR Regulation 2016/679 came into force. In the text of this policy, “User” means the person who uses the services of the website of “A. CHRISTIDHS E.E.”, as “Visitor” means the person who visits our website (https://favelas.com.gr/ ) and as “Customer” the persons who contract with “A. CHRISTIDHS E.E.” for making a reservation. Any processing of personal data carried out by “A. CHRISTIDHS E.E.” is conducted in such a way as to ensure its confidentiality. All information is stored securely and access to it is allowed only to authorized personnel. “A.CHRISTIDHS E.E.” implements and develops the necessary technical and organizational measures to protect the Personal Data of Users, Visitors and Customers (all these understood as “Subjects” of personal data) from unauthorized or illegal processing and use, as well as in the event of loss, destruction, damage, theft or illegal access.

Collection and Use of Personal Data

2.1. The legal basis for the use of your personal data

“A. CHRISTIDHS E.E.” collects only those personal data that are necessary in order to satisfy your requests. Whenever additional, optional information is sought, you will be informed at the time of collection of such data, and your prior consent to processing will be required The current legal framework allows us to process personal data, only if we have the legal basis to do so. Therefore, when we process your personal data, we rely on one of the following processing cases:

Giving consent:

Your consent may occasionally be requested in order for us to process some of your personal data. The processing of your data will be carried out in this way, only if you expressly agree to this (Article 6, Paragraph 1a of the GDPR Regulation). Execution of a contract: In cases where the processing of your personal data is necessary for the fulfillment of our obligations arising from the contract concluded between us (Article 6 paragraph 1b of the GDPR Regulation). Legal obligation: This happens where we are required to process your personal data in order to comply with a legal obligation, such as: a) to keep records for tax purposes, b) to provide information to a public body, c) to comply with the imperatives of some legislative or regulatory provision a court decision (Article 6 paragraph 1c of the GDPR Regulation). Protection of your vital interests: This happens in cases where the processing of your personal data is necessary to protect your vital interests (Article 6 paragraph 1d of the GDPR Regulation). Fulfillment of a task performed in the public interest or in the exercise of public authority: This occurs in cases where the processing of your personal data is necessary for the fulfillment of a task performed in the public interest (Article 6 paragraph 1e of the GDPR Regulation).

Legitimate interest:

We may process your personal data in cases where this processing constitutes a legitimate interest of our company during the execution of a legal activity, in order to ensure the continuity of this activity. This processing, of course, will not exceed your interests, freedoms and fundamental rights (Article 6 paragraph 1f of the GDPR Regulation). “A. CHRISTIDHS E.E.” does not process your personal data, such as personal data concerning a person’s race, nationality, political beliefs, membership in trade unions, religious beliefs, philosophical beliefs, physical or spiritual his health, sex life and orientation, data related to criminal convictions and criminal acts. The following sections cover the specifics of each of the aforementioned groups from which personal data is collected.

2.2. 2.2. Collection of Data Subjects

“A. CHRISTIDHS E.E.” collects the personal data of the Subjects, through the Customer service call center, its External Partners, as well as through its website. The following sections cover the Subjects whose personal data is collected. “A. CHRISTIDHS E.E.” can collect and process personal data for Users through the contact form, Website Visitors, Customers through the booking form and its External Partners. In the event that it is required by the applicable legal framework, we will request your express consent for the processing of your personal data, as collected by “A. CHRISTIDHS E.E.” Your personal data processed by “A. CHRISTIDHS E.E.” are the following: User Personal Data: Name, landline number, mobile phone number, home address, IP address, email address. Personal Data of Visitors: IP address, cookies Customer Personal Data: Name, residential address, billing address, Passport Number, landline number, mobile phone number and email address

Transmission of Data

1. Transmission of Data

“A. CHRISTIDHS E.E.” does not disclose your personal data to third parties outside the European Union in countries where there is no appropriate data protection regime. However, in the event that such a data transfer needs to be carried out, “A. CHRISTIDHS E.E.” will take every possible measure to ensure that your data is treated as securely as it is within the EU/EEA and in accordance with this Policy and applicable law. In addition, “A. CHRISTIDHS E.E.” will update the current Policy, in order to cover the cross-border transfer of data and the related safeguards for the privacy of the Users of its platform. 1. Data retention period “A. CHRISTIDHS E.E.” will not keep the data of the Subjects beyond the time necessary to fulfill the purposes for which they have been collected or as required by the applicable legal framework. In case of entering into a contract with “A. CHRISTIDHS E.E.” the latter keeps its client’s personal data until the expiry of the statutory general limitation period for claims, i.e. for a period of up to twenty (20) years from the expiry of the relevant contracts in any way. If, by the end of the above-mentioned time, legal proceedings are in progress with “A. CHRISTIDHS E.E.” that directly or indirectly concern the Clients, the above data retention time will be extended until the issuance of an irrevocable court decision. In some cases, specific personal information may be retained beyond this period of time, due to possible legal obligations, legitimate interests of “A. CHRISTIDHS E.E.” etc. Such cases are, indicatively, those related to each branch of law (tax, civil, criminal, etc. In case of non-establishment of the transactional relationship, the personal data of the User or Customer will be kept for a period of up to five (5) years from their collection. In the event that a shorter or longer data retention time is provided by law, the above data retention time will be reduced or increased accordingly. “A. CHRISTIDHS E.E.” can collect, record and process the data of the Visitors of its website. We may record your IP address and use cookies.

Use of the Website

According to the specific provisions of article 8 of the Regulation, minors under the age of eighteen (18) are prohibited from informing “A. CHRISTIDHS E.E.” through its website their personal data, without the prior consent of their guardian. We ask these persons not to submit information to us. In the event that the Users of the website fall into the above category and continue to communicate their personal data to us through our website, it will be considered by “A. CHRISTIDHS E.E.” that these persons have received the prior consent of their guardian.

The Rights of Subjects

The new GDPR Regulation provides you with the following rights regarding the processing of your personal data:

Access Right:

you can request access to your personal data. Thus you are provided with the possibility to receive a copy/s of your personal data kept by “A. CHRISTIDHS E.E.”.

Right of Correction:

you can request correction of your personal data. In this way, you are given the possibility to correct any incomplete or inaccurate data of yours that “A. CHRISTIDHS E.E.”. In this case we will need to verify the accuracy of the new data you will provide us.

Right to Erasure:

Right to Restriction of Processing:

You can request restriction of the processing of your personal data.

Right to Object:

You can object to the processing of your personal data, at any time, in cases where the processing of your data is based on the fulfillment of a duty performed in the public interest or in the exercise of public authority (case e of paragraph 1 of article 6 of the Regulation) , or if the processing fulfills the purposes of legitimate interests of “A. CHRISTIDHS E.E.” or a third party (case of paragraph 1 of article 6 of the Regulation).

Portability Right:

you can request the transfer of your personal data to you or to third parties. We will provide you or your chosen third party with your personal data in a commonly used, machine-readable format. Please note that this right of yours only applies to automated information that you initially gave us your consent to use, or whenever we used that information to perform a contract with you. Right to Withdraw Consent: You may withdraw your consent at any time, in cases where you have already provided your consent for the processing of your personal data. However, this will not affect the lawfulness of any processing that took place prior to the withdrawal of your consent. If you withdraw your consent, “A. CHRISTIDHS E.E.” may not be able to offer you some of its services. You will be informed about this at the time of submitting your request.

Manual decision making:

Automated decision making occurs when an electronic system uses personal data to make a decision without human intervention. In this case you have the right not to be subject to decisions made solely through automated processing including profiling which produces legal effects concerning you or which significantly affect you in a similar way, unless you provide us with your consent, or it is necessary to enter into or perform a contract between you or as otherwise permitted by law. You also have the right to challenge decisions made about you through the above process. “A. CHRISTIDHS E.E.” respects the rights you have in your personal data and facilitates your exercise of them. You can direct any request, query or complaint regarding your personal data in writing by calling (+30) 6983586957 or by email at favelasapart@gmail.com.