“Spyrou Group of Companies” fully respects your privacy and is committed to ensuring the security and confidentiality of the personal data you provide us.
Personal data, optional and mandatory, you must provide when entering the website, or signing up for various applications related to services and products provided by “Spyrou Group of Companies” and any additional personal data requested at later stages are being collected, processed, transferred, stored and used by “Spyrou Group of Companies”, in its capacity as data controller responsible for the benefit of Group members and its Hotels and its Associates, as well as service providers, including data processors and providers of services described below.
What categories of data we collect
“Spyrou Group of Companies” may process the following categories of your personal data:
➢ Personal details: name, surname, identity card or passport number, gender, date of birth, nationality
➢ Contact details: contact phone number, tele facsimile, email address, social networking page accounts
➢ Payment details: details of your credit or debit card
➢ Items related to your participation in our Loyalty Club program
➢ Details of your stay: date of arrival and departure, goods and services that you have chosen, participation and group of customers as well as the issue of your ferry tickets through our office
➢ Information related to your participation in our contests and lucky draws
➢ Your reviews and your assessment of the quality of your stay and our services, in general
➢ Information you provide us about fulfilling special requests and wishes during your stay
➢ Any personal data you choose to share with us in order to better serve you
How we collect your data
“Spyrou Group of Companies” collects your personal data:
➢From information provided directly by you:
➢ From travel agents and tour operators with whom “Spyrou Group of Companies” cooperates.
➢ From electronic platforms through which you communicate with us or make your reservations.
➢ From the issuance of advance payments, payments and balance payments.
In no event, we collect or process personal data that have not been provided with your consent.
Why do we collect your data
We collect, process, use and store your personal data to fulfill the following set purposes only:
➢ To fulfill our contractual obligations to you and to provide you with the best possible services and accommodation we promised you.
➢ To comply with obligations imposed by the relevant legislation, judicial or supervisory authorities and the applicable law.
➢ For information, research, or advertising purposes only if we have obtained your explicit consent to this effect.
➢ To certify you when logging in to our web pages, our application and our Wi-Fi internet connection.
➢ To fulfill your reservation and/or information requests and to remember your preferences and registration information.
➢ For Loyalty Club programs.
➢ To measure and obtain data for administrative and other communication purposes and to operate and improve the effectiveness of our services, our Websites and the Programs and Applications related to the operations of “Spyrou Group of Companies”.
➢ For our internal purposes (such as auditing, data analysis, and research to improve and develop our products, services, content, advertising, and communications).
Measures and guarantees to ensure the security of your data
We take appropriate and suitable technical and organizational measures to protect your personal data that we process.
We prevent unauthorized access to your data, and all staff members are bound to ensure the confidentiality of your personal data.
We do not disclose or transfer your personal data to third parties except in the context of our contractual relations with our Affiliates and for the fulfillment of specific purposes related to your best service.
In any case, we ensure that all of our Affiliates comply with the data protection legislation and, in turn, receive all necessary guarantees for the confidentiality, integrity and availability of any data they may receive.
Your personal data is collected, filed and processed by “Spyrou Group of Companies” exclusively for the provision of our services to you in accordance with the applicable laws. By accepting the terms here, you give your explicit consent to the “Spyrou Group of Companies” to transfer your personal data to its Affiliates, i.e. to third parties physical or legal entities that provide services in combination or in addition to its services (especially for travel services, excursions, internal or external activities, visit to places, product guarantees, etc.) and for reasons related to the rendering of best service of “Spyrou Group of Companies” to you.
With government or law enforcement authorities when required by applicable law to comply with a court order or other legal obligation or to respond to a government request.
When we believe in good faith that disclosure is necessary to protect our rights and/or our property, protect your security or the safety of others, or investigate theft or fraud.
With service providers and data processors we use to perform and improve our services and support our business.
For the purposes of special programs, special offers, lucky draws and contests, according to the more specific terms and conditions if / when you choose to join.
How long do we keep your data
We will retain your Personal Data for as long as you use our websites and / or our Application and for a reasonable period of time to meet the above-mentioned purposes or to comply with the applicable laws or statutes of limitations or terms of this Policy. We will automatically retain information collected for up to 24 months and then store them in an unrecognizable aggregate form. In any case, we delete your personal data completely and permanently from our physical and electronic records within 30 days of your request.
Please refer to the relevant section
You have the following rights with respect to your personal data we process.
You have the right to:
➢ Withdraw at any time your consent to the use of your data for advertising or information purposes.
➢ Ask for information about the type of processing that your data is undergoing and access to it
➢ Request to correct or update your data if it is inaccurate or incomplete.
➢ Request the complete and definitive deletion of your data from our records.
➢ Request that we limit the processing of your data, provided that the conditions laid down in the relevant legislation are met.
➢ Request a copy of all or part of your personal data in a commonly used and machine-readable format.
We are committed to meeting your requests free of charge as soon as possible and in any event within 30 days of their submission. This deadline can be extended for 60 days, depending on the complexity and the number of requests.
Please be advised that you may also address your complaints and concerns about the use and protection of your personal data with the responsible Personal Data Protection Authority.
No changes to our policy will be effective until they are updated and posted on our website.