Palma Villas

PRIVACY POLICY OF THE COMPLEX “PALMA VILLAS”

We take care to preserve and protect the privacy of personal data in our possession. At PALMA VILLAS, we follow strict procedures for the protection of our customers’ personal data, in accordance with European Regulation 679/2016 and the Greek Implementing Laws. It is important that you read this privacy policy, along with other privacy notices that we may show you from time to time, so that you know fully how and why we use your personal data.

1. INTRODUCTION

This privacy policy informs you how our company uses the information we collect from you when you use our website, when we welcome you as our guest, or when we communicate differently together. In collecting these data, we act as a data controller and by law, we must provide you with information about why and how we use your data and about the rights you have regarding them. We also inform you about your privacy rights and how the law protects you.

2. KEY CONCEPTS REFERRED TO IN THIS CHAPTER

When referring to personal data, we mean any information relating to a specific natural person or person whose identity can be ascertained, i.e., any information relating to an identified or identifiable natural person (‘the data subject’). Identifiable is that natural person whose identity can be ascertained, directly or indirectly, in particular by means of a reference to an identity element such as name, identity number, address, email, location data, online identity identifier, or one or more factors specific to the physical, physiological, genetic, psychological, economic, cultural, or social identity of the natural person concerned. When we refer to the processing of your personal data, we mean any act or series of acts that is carried out with or without the use of automated means, in personal data or sets of personal data. Processing includes the collection, registration, organization, structure, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or any other form of disposal, association, or combination, restriction, deletion, or destruction. ‘Controller’ means a natural or legal person, public authority, agency, or other body which, alone or jointly with other persons or bodies, determines the purposes and means of processing personal data. ‘Processor’ means a natural or legal person, public authority, agency, or other body that processes personal data on behalf of the controller. ‘Consent’ of the data subject is any indication of free, specific, explicit, and fully informed willingness, whereby the data subject declares that they agree, by a declaration or by a clear affirmative action, to the processing of personal data concerning them. ‘Personal data breach’ means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access of personal data transmitted, stored, or otherwise processed. ‘Health-related data’ means personal data relating to the physical or mental health of a natural person, including the provision of healthcare services, which reveal information about their state of health. “Specific categories of personal data/Sensitive personal data” are personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as the processing of genetic data, biometric data for the unequivocal identification of a person, data relating to health, or data concerning the sexual life of a natural person or sexual orientation. The purpose of this privacy policy and the personal data protection statement included therein is to collect only personal data provided voluntarily by visitors to our website so that we can provide them with information and/or services, information about the type of personal data collected by our hotel, the way of processing them (collection, storage, use, transmission), means of protection, and the rights enjoyed by users in relation to that processing, which in any event is carried out in a reliable and transparent manner. In order to be transparent in the way we collect, use, store, transfer, and protect personal data (PII), PALMA VILLAS encourages its website visitors and any interested party to read this Privacy Statement and Privacy Policy. We take all the necessary measures and maintain all globally accepted security standards based on international standards, so as to protect the personal data of customers processed in such a way as to ensure that the processing of personal data is always carried out in accordance with the obligations set out by the legal framework governing the company itself, as well as third parties who may process personal data on its behalf. The following legal framework binds our Company, which operates on the basis of current National and Community legislation: the relevant provisions of the National Law on Protection of Personal Data and on the Guarantee of Confidentiality of Communications (we mention N. 2472/1997 on the protection of personal data, N. 3471/2006 for the protection of privacy in the field of electronic communications, as applicable, the regulations of Privacy of Communications of S.A.D.A.E. as published in Government Gazette B’ 2715/17.11.2011 and applicable, the P.D. 47/2005) and the relevant provisions of Community law (European General Data Protection Regulation/GDPR – 2016/679) and Law 4624/2019 (Implementing Measures of the General Regulation on Protection of European Parliament Personal Data [2016/679]).

3. LEGAL BASIS FOR PROCESSING PERSONAL DATA

PALMA VILLAS processes your personal data transparently, in accordance with the principles of legality, proportionality, confidentiality and integrity, purpose limitation and accuracy, specific data retention time, and data minimization. In conclusion, we will use your personal data only when the law permits.The lawful basis for processing your personal data can be:

(a) Your consent. Where our legal basis is consent, you have the right to revoke your consent at any time. Actions such as accommodation service, personalized services (about your preferences, needs, etc.), communication with you, including analysis of your travel preferences and accommodation and catering preferences, so that we provide services exclusively for you and/or actions to update and send special offers for our services and products, or updates for attentive events or offers, receive information material (newsletter), etc.

(b) The necessity of processing your data, in the context of performance of our contractual obligation or in the pre-contractual stage to fulfill our legal obligations. For example, when you book our hotel, this constitutes a contract, or when we record identification upon your arrival.

(c) The necessity of processing your data in the context of compliance with a legal or regulatory obligation. For example, keeping records of our sales for tax compliance or facilitating the payment process.

(d) The necessity of processing your data in the context of safeguarding our legitimate interests (or those of third parties), as long as your interests and fundamental rights do not prevail over these interests. For example, when we conduct a fraud check as part of the check-out process or take steps to keep our website safe, to facilitate payments, your accommodation service, ensure compliance with our legal obligations, improve our services, analyze your personal travel preferences and interests, manage reservations (Stay and Restaurant), provide personalized services, conduct marketing, or facilitate administrative processes.

(e) The need to process data to protect vital interests of you or the person you accompany.

(f) The need to extract statistical data.

(g) Meeting your requests.

(h) Customer invoicing.

(i) Performing customer receipt updates in the company’s information systems.

When we consider legitimate interests, before processing your personal data for our legitimate interests, we take care to take into account your rights to balance any possible impact on you (both positive and negative). We do not use your personal data for activities where our interests override the impact of this processing on you (unless we have your consent or are otherwise required or permitted by law).

4. METHOD OF COLLECTING AND USING PERSONAL DATA

Personal data are collected following the express consent of the subjects, which is given either before any processing or collection of their personal data takes place or by the company itself when they visit our website, where we may collect data from them.The aforementioned consent clearly informs the data subjects, in accordance with the provisions of the current Personal Data Protection Legislation, that their personal data will be collected and processed to fulfill the intended purpose, and they are informed of all the recognized rights, which they can exercise. We also collect and analyze the data you enter using digital media (on our website and hotel applications), device data, connectivity and configuration, your arrival process, and convenience, including the protocol address (IP) used to connect your computer or device to the internet. This may occur when registering, accessing the account or your profile for executing payment orders or updating your details online, reporting network failures, submitting applications, etc. We may collect or receive data in various ways. Below we list the main ways in which we do this:

• We may collect Personal Data during your stay at our premises, asking you to fill in certain documents/forms in relation to the total stay. For example, when you check in and check out, use our accommodation, facilities, and services, use our concierge services, track our events, participate in a contest, promotion, or research, fill out a search contact information card, or provide us with your business card. We also collect Personal Data when you book by phone, contact us by email or through online conversations, or reach out to customer service. These communications may be recorded for quality assurance and training purposes.
• We collect Personal Data when you contact us through this website, or otherwise connect with us by mail, phone, email, chat, social media, or post on our social media pages, subscribe to a newsletter, or participate in a survey, contest, or promotional offer. We may also collect further demographic data or other personal data through surveys and questionnaires.
• For example, when you sign up to receive our newsletter or other direct advertising/marketing material, ask questions or request information, contact us in general, create an account on our website for booking accommodation, seek information about hospitality and room services, book our restaurant, contact us on social media, or participate in a competition, promotion, or research.
• We may receive some data automatically when you interact with us on this site or other media. For example, this may be data about your preferences, browsing, or how you use this website. We may also collect data when you click on one of our ads (including those you view on third-party websites or social media). The systems we use to manage visitors can also collect data automatically to help create a guest profile, which in turn helps us better understand how to improve your experience with us. We may receive some data from third parties as part of the booking process for your stay, hospitality, needs, care, catering, or services at PALMA VILLAS.
• If you are planning an event with us, or you are attending an event as a guest, we may collect your personal data about the subject and date of the event, statistics, and other personal information of the guests who are attending the event. We may share personal information about you with event developers or third-party service providers, or vice versa.
• We may also collect information about you from third parties (such as airlines, travel agents, travel agencies, and other business partners), as well as from other sources that share your data with us in accordance with legal or contractual obligations. We may further use and share this information for the same purposes. For example, from technology partners who help us manage our website and mailing list entries, from payment and fraud prevention service providers, analytic data providers, advertising networks and search information providers, data partners, publicly available sources, social media (where the privacy settings are set for public), and third parties to whom you have authorized to share your data with us and/or by third parties authorized by law to share your personal data with us.

PALMA VILLAS collects personal data and automatically stores information about you through the use of online technologies (e.g. cookies) and similar monitoring technologies when receiving reports of errors or usage data from software applications on your online interactions or via WiFi communications in the company’s offices. If you use a mobile device, we may also collect data that identifies your device, its settings, and location.

The personal data entered by the user are stored in the database of PALMA VILLAS. By registering and/or submitting your personal data to our website, you consent to the use of this data in accordance with this Privacy Statement.

5. PERSONAL DATA PROCESSING OBJECTS OF OUR CUSTOMERS

5.1. PALMA VILLAS respects your privacy and protects your personal data. The method of collecting data outlined above explains the different ways in which we can receive or collect data. Some of this data may be personal, so please read below to understand the different types we may be collecting from you.

The types of personal data we collect depend on how you interact with us. Your personal data is not used for purposes other than those intended by our business and subjects (e.g., requests by visitors to our website), who expressly consent to the collection and processing of their data unless we receive your permission or are required or permitted by law or professional standards. For any matter related to this, you can contact the following email address: info@palmavillas.gr

With this policy, we aim to inform you about the personal data we collect and process during our operation. Personal data relating to you shall be collected and retained only for the necessary time, for specified, explicit, and legitimate purposes. This data is lawfully and fairly processed in a transparent manner, in accordance with the applicable legal framework, and guarantees its integrity and confidentiality. The data collected is appropriate, relevant, and no more than necessary for the stated purposes, and is accurate and updated as required. If additional, optional information is required or further processing is necessary, we will inform you and request your consent for this new processing if needed.

PALMA VILLAS ensures that personal data processed are:

• Processed lawfully and fairly in relation to the data subject.
• Collected for explicit and legitimate purposes.
• Appropriate, relevant, and limited to what is necessary for processing purposes.
• Accurate and kept up to date.
• Processed in a manner that ensures the appropriate security of personal data, including protection against unauthorized or unlawful processing and accidental loss, destruction, or damage using suitable technical or organizational measures.
• Retained only for the required period for processing personal data. In some cases, data may be kept for longer periods, especially if necessary for:Compliance with a legal obligation imposed by law.Fulfilling our company’s duty to perform a public interest purpose.Archiving for public interest purposes, scientific or historical research.Statistical purposes.Establishing, refuting, exercising, or supporting legal claims.
• Compliance with a legal obligation imposed by law.
• Fulfilling our company’s duty to perform a public interest purpose.
• Archiving for public interest purposes, scientific or historical research.
• Statistical purposes.
• Establishing, refuting, exercising, or supporting legal claims.

5.2. PALMA VILLAS, in accordance with the law, collects and processes personal data. When you sign up directly to make a reservation or use our services, as well as when you check-in at our hotel, we may ask you to provide certain personal information, such as:

• Identity data: including title, sex, first name, maiden name, surname, nationality, place and date of birth, and marital status. If you interact with us via social media, this can include your social media username, as well as image-related information (e.g., from security cameras within the hotel).
• Stay-related data: such as length of stay, information about product consumption, etc.
• Contact information: including billing address, delivery address, email address, and phone numbers.
• Financial data: including payment card and bank account information.
• Travel data: including credit/debit card number or other payment information, travel itinerary, group or activity details.
• Transaction data: including details about payments to/from you and the products/services purchased from us.
• Profile data: including username and password, purchases or orders made, interests, preferences, comments, survey responses, social media account identifiers, photos, and any data added using analytics and profiling.
• Technical data: including IP address, connection data, browser type and version, time zone, location, browser plug-in types and versions, operating system, and platform.
• Usage data: including how you use our website, products, and services.
• Tracking data: including information collected from cookies and similar tracking technologies (web signals, pixels, mobile identifiers).
• Marketing and communication data: including your preferences for receiving direct marketing from us and third parties and your communication preferences.
• Data from CCTV for security purposes, as well as security reports, including incident reports or lost item reports.
• Aggregated data: such as statistics or demographic data, which may be derived from your personal data but does not directly or indirectly reveal your identity.
• Communication data: including postal addresses, email addresses, phone numbers (home/work/mobile), and fax numbers.
• Family data: such as names and ages of children.
• Social media and lifestyle data: including preferences, previous stays, interactions, purchased goods and services, interests, activities, hobbies, and food and drink preferences.
• Health data: such as required information for certain activities, services, or benefits, including dietary preferences (e.g., allergies, intolerances).

5.3. For specific cases, we collect and process the following data with the following legal basis:

• Employees/External partners: Name, surname, birth date, contact information, salary data, insurance data, employment record, medical information, and other related details necessary for employment contracts and compliance with legal obligations.
• Prospective Employees: Name, contact details, education, work experience, etc. This data is collected during the job application process and may be retained for six months for future job openings.
• Participants, speakers, and guests at conferences/events: Name, postal address, profession, email, and possibly image data. This information helps in organizing and promoting events, conferences, and workshops.
• Residents/Guests at the Hotel: Name, identification details, credit card number, stay details, email, contact address, and billing information. This data is necessary for fulfilling accommodation contracts and ensuring compliance with legal obligations.
• Vendors: Name, tax ID number, IBAN, contact phone, and business address. This data is necessary for executing contracts with vendors and meeting legal obligations.

5.4. Special Categories of Personal Data

• Sensitive personal data: PALMA VILLAS only collects sensitive data when necessary or legally permitted, such as race, ethnic origin, political beliefs, health information, etc. Sensitive data is processed only with explicit consent for legitimate purposes or legal obligations.
• Employees' health data: Collected to fulfill insurance and legal obligations.
• Guests' sensitive data: May include dietary preferences, allergies, religious preferences, and health conditions, where necessary for services.

If you have questions about providing sensitive personal data, please contact info@palmavillas.gr.

6. USE –
COMMUNICATION OF PERSONAL DATA

6.1. In accordance with the applicable legal framework, at PALMA VILLAS we collect a variety of personal information about our guests, customers, and visitors of our website and we fully commit to providing information about the collection and use of your personal data during your visit to our premises, using our websites, products, and services, only to the extent that we do or intend to use them for the following purposes:
a) in order to fulfill our legal contractual obligations (to process and complete your booking details, promotion and provision of rooms, hospitality, reservation of rooms, restaurant or other premises, and provision of the relevant services, provision of additional services, intermediation/support for the use of transport, planning and organization of events, charging for services and consumptions and processing payments, transactions, or services you request, registration as a new visitor or as a visitor of the website, etc.). We use personal data to provide services you request, such as: to facilitate bookings, payment, receive administrative information, confirmations or messages before arrival, assist you with meetings and events, and to provide you with other information about the area and the property you are about to visit.
b) For advertising and communication purposes in relation to our products and services, marketing partners, and other trusted third parties based on your consent. In this case, you may receive personalized offers and benefits, invitations to events, newsletters, and optional participation in surveys based on your preferences and interests. For your convenience in future reservations/stay at the hotel, for sending updates in the form of emails/sms/newsletter/letters, for your information about plans/offers/discounts, and/or other promotional actions of the hotel, for sending messages/forms within the framework of customer satisfaction research, etc. In any case, you have the right to revoke your consent at any time and/or object to this processing of your personal data, without any negative consequence to you.
c) Our legitimate interest, as shown by actions such as improving our services, facilitating administrative procedures, providing special offers and benefits, managing your reservations from the call center, providing personalized services, and direct marketing services, assessing applications and CVs of prospective employees, and managing the business/contractual relationship with partners or suppliers.
d) To conduct market research, through surveys to better serve your needs and improve your experience at PALMA VILLAS, improve the effectiveness of our websites and various means of communication, facilitate our advertising campaigns and/or advertising activities, based on our legitimate business interest.
e) For financial transactions, management of charges, fees, VAT, and recovery of financial debts on the basis of our legitimate interest.
f) In order to serve our legitimate business interests (ours and third parties). For example, to operate a CCTV system in order to avoid illegal actions and protect you, our staff, and our property.
g) In order to comply with our legal obligation and resolve or regulate legal claims that may arise in the relationship between us.
h) For the prevention and detection of illegal acts. Necessary for our legitimate interests (to protect our business and our visitors and visitors to the website through monitoring of fraud and suspicious transaction monitoring).
i) If you have given us your consent for the processing.

6.2. We may also use the information we have available for you in the following ways and for the following purposes:
・ providing, maintaining, improving, and developing relevant characteristics, content, and services offered,
・ identifying and protecting you from fraudulent, abusive, or illegal activity and maintaining the security of the website,
・ management of our website and business,
・ activate the use of our available services, send movements, invoices, and payment reminders to you, as well as collect payments from you,
・ send email notifications of your requests to our website,
・ management of requests and complaints submitted by yourself or related to our website,
・ maintaining website security and preventing any fraud,
・ for legal purposes: (i) legal proceedings, requests by legal and state authorities, (ii) claims for violation of rights of third parties by any content, (iii) protection of rights, property, or personal security, users or the public, (iv) establishment or exercise of our legal rights or defense against legal claims or (v) as otherwise required by law.
As part of our commitment to inform you, after you give consent and permission for any use that is consistent with the uses mentioned in this Privacy Policy or described elsewhere on the website and where you submit such personal information, such consent will be presumed by PALMA VILLAS and after we have obtained your consent, we may send correspondence, e-mail, telephone, text, or contact you by any other means to notify you of new products, accommodation, advertising services, and new services of PALMA VILLAS or upcoming special offers, events, or other relevant information that may be of interest to you. If, after you have authorized the use of your personal information, you decide at a later time that you no longer want us to include you on its mailing list or contact us otherwise or use your personal information in the manner described in this Privacy Policy or on the website, just let us know by sending us an e-mail. In the case of special categories of personal data – sensitive personal data – as described above, we ensure that we obtain prior express consent before any processing of such data.

6.3. We may, however, share your information with the following bodies:
・ Business partners. We may also share your information with trusted business partners. These partners may use your information to provide you with services you have requested and to provide you with promotional materials, advertisements, and other materials if you have given your consent.
・ Service providers and/or any third party that performs the processing on our behalf. We may also share your information with companies that provide services on our behalf or on our behalf, such as IT subcontractors, companies that send bulk emails on our behalf, banks, credit card issuers, law firms, services companies of mail, printing services companies, etc.
・ Credit Approval: When you submit a credit request, your personal information is used and disclosed to appropriate third parties in accordance with applicable law to decide to grant and maintain a credit limit for you.
・ Other third parties with your consent or by your mandate. In addition to the notifications described in this Privacy Policy, we may share information about you with third parties if you give your consent or request it.
We use your Personal Data to respond to your requests. The User’s Personal Data is not published, sold, or disclosed. PALMA VILLAS is part of our philosophy and our basic principle that we will not disclose your information to third parties for their own independent business purposes or marketing purposes without your consent, as access to the records which include the data of the data subjects it is limited solely to authorized individuals who have taken on the role of processors. When the information is transmitted in accordance with the above, we limit the range of information communicated to the strictly necessary for the attainment of that purpose.
Furthermore, given that some of our activities are carried out by third parties, we strive with contractual guarantees to ensure that the processing of your personal data is carried out in a secure manner and in full compliance with this Privacy Policy. It is excluded that the data are made available to supervisory, municipal, judicial, and public prosecutor’s authorities, at their request, in order to respond to requests from the government or law enforcement agencies or where required by the provisions of applicable legislation, judicial provisions, or state regulations.
Such revelations may also be required when we have your prior consent, when sharing or disclosure of your information is required, in order to offer you products or services (e.g. reservations), for Privacy Controls or security controls and/or to investigate or respond to complaints or threats to security and for our business purposes, in order to respond to your requests when third parties or service providers and suppliers (for example outsourcing service companies, companies managing payments made with cards, travel agencies, etc.) acting on behalf of PALMA VILLAS require such information, when it is necessary to comply with contractual obligations, and in case of emergency, such as the protection of a person’s life, health, or property. In all of the above cases, we will try to limit the scope of personal information disclosed to the amount of information required to perform the specified function. Unless otherwise ruled out by law, we require that third parties protect your personal data and comply with applicable privacy laws and regulations.
Service providers and suppliers are bound by data processing agreements and are obliged to ensure the confidentiality and protection of data in accordance with the Regulation on the Protection of Personal Data. The entire workforce employed at PALMA VILLAS and processed your Personal Data is contractually bound by confidentiality, confidentiality, and privacy clauses of your data.
PALMA VILLAS may also disclose Personal Data about the sale, assignment, or other transfer of the business of the website to which the data relates. In these cases, PALMA VILLAS remains responsible for the processing of your Personal Data and defines the individual elements of the processing and signs a special contract (DPA) with the third parties to whom it entrusts processing activities, in order to ensure that the processing is carried out, in accordance with the applicable legal framework, and that any natural person can freely and unimpeded exercise the rights conferred on it by the applicable legal framework.

6.4. MINORS

As reflected in the Terms of Use of the website and in the Cookie Policy, the services provided, through the website, are directed towards a general public. Our policy is never to collect or knowingly keep data about any person under the age of 18, unless this is part of an undertaking to provide professional services, we do not target minors and do not knowingly collect personal information from persons under the age of 18.
PALMA VILLAS understands the importance of protecting minors’ personal data, especially in an online environment. You must be at least 18 years old to make reservations and/or submit personal information on our website. If PALMA VILLAS obtains unintentional personal information or other data from users under 18 years of age, we will not knowingly provide such data to third parties for any purpose and any subsequent disclosure will be due to the fact that the user under 18 years of age used the website and submitted personal information without asking permission from PALMA VILLAS.
On the contrary, if necessary, we seek to collect the data of minors from their parents or their legal guardians and where necessary to obtain the relevant consent. As it is not always possible to determine the age of persons accessing and using our websites, however, we advise parents or legal guardians to contact us in case they observe the unauthorized transfer of data from minors, so that they can exercise their rights accordingly, such as the deletion of their data.

7. HOW WE STORE AND SECURE THE INFORMATION WE COLLECT – DATA RETENTION

The amount of time we retain the information we collect from you depends on the type of information we collect. The information deemed necessary during your registration, such as first name, surname, and email, is retained for the entire time your registration as a user continues to exist and for as long as required by the nature of the business-provided service for the purposes set out in this Privacy Policy, with express retention reservation for as long as the relevant legislation mandates. In each use, we make every effort to keep your information safe.

The period of storage of the data shall be decided on the basis of the following specific criteria depending on the case:

• When processing is imposed as an obligation by provisions of the applicable legal framework, your personal data will be stored for as long as the relevant provisions impose on them. Also, when it is necessary to comply with our legal or regulatory obligations, resolve various issues, or strengthen the terms and conditions of use, we can retain some of your data as required, even if the account has been closed or there is no longer a need to provide our services to you.
• When processing is performed on a contract basis, your personal data is stored for as long as necessary for the performance of the contract and for the establishment, exercise, and/or support of any legal claims under the contract. In any case, your personal data is limited to what is strictly necessary for achieving these purposes, accurate, and kept for a period determined by the processing purposes, protected by adequate security measures, having already taken all the necessary technical and organizational measures to this end, and not transmitted to third parties, but to authorized employees per service of the enterprise for the sole purpose of providing the service.

We will also keep your account data for as long as you keep it and have not requested its deletion. Your data, which you give us to provide services, will be kept for as long as necessary to continue providing these services. If it is reasonably necessary or required to fulfill legal or regulatory requirements, resolve disputes, prevent fraud and abuse, or enforce terms and conditions, we may retain some of your information, as required, even after your account expires or you no longer need our services. After the above intervals, the personal data of the subjects will be destroyed and can no longer be used for any purpose or in any way.

8. WHAT ARE YOUR PRIVACY RIGHTS

The user can update, change, or delete any information registered at any time with a simple notice/request via the email they declared when registering. Any request from the individual must be submitted to PALMA VILLAS at: info@palmavillas.gr.

PALMA VILLAS will respond free of charge to your request without delay, and in any case within one month of receiving the request, except in exceptional cases. In such cases, the above deadline may be extended by another two months, if required, taking into account the complexity of the request and the number of requests. PALMA VILLAS will inform you of any extension within one month of receiving the request, as well as the reasons for the delay. If your request is impossible to fulfill, PALMA VILLAS will inform you within one month of receipt of the request, provide the relevant reasons, and inform you of the possibility to submit a complaint to the Data Protection Authority, as well as your right to appeal to the competent judicial authorities. If your request is deemed manifestly unfounded or excessive by PALMA VILLAS, it may impose a reasonable and proportionate fee, considering the administrative costs required for its satisfaction, or refuse to grant your request.

For any request related to the processing of your personal data, as above, please contact PALMA VILLAS' Data Protection Officer by email at info@palmavillas.gr

Any natural person whose data is processed by PALMA VILLAS enjoys the following rights, in accordance with the Rules, related to the personal data we have stored at any time, in accordance with applicable law and free of charge:
(A) Right to transparent information on the exercise of your rights (Articles 12, 13, 14 GDPR). You have the right to be informed of the existence of the processing operation, its purposes, and any further information necessary to ensure fair and transparent processing, taking into account the specific circumstances and context in which the processing of personal data takes place.
(B) Right of access (Article 15 GDPR). You have the right to be aware of and verify the legality of processing. You have the right to access the data and receive additional information about its processing.
(C) Right of rectification (Article 16 GDPR). You have the right to correct, update, or modify your personal data by contacting the above contact information at info@palmavillas.com.
(D) Right of erasure (Article 17 GDPR). You have the right to request the deletion of your personal data, but this right is subject to specific restrictions. In cases such as contractual obligations, public interest, or legal requirements, this right may not be applicable.
(E) Right to restriction of processing (Article 18 GDPR). You may request the restriction of processing your personal data under specific conditions, such as when the accuracy of the data is in question or when the data is no longer necessary.
(F) Right to object (Article 21 GDPR). You have the right to object to the processing of your personal data in certain cases, including direct marketing.
(G) Right to data portability (Article 20 GDPR). You have the right to receive your personal data in a format that allows for easy access, use, and processing, as well as the right to request its transfer to another controller.
(H) Right to withdraw consent (Article 7 GDPR). You have the right to withdraw your consent at any time.
(I) Right to complain. If your personal data has been compromised by PALMA VILLAS, you have the right to complain to the Data Protection Authority.

To exercise these rights or if you have questions about our Privacy Policy, please contact us at info@palmavillas.gr

9. SECURITY AND INTEGRITY OF PERSONAL DATA

PALMA VILLAS complies with General Regulation (EU) 2016/679 on the protection of natural persons regarding the processing of personal data and strives to safeguard personal data. We have implemented security measures to prevent unauthorized access, accidental loss, or modification of data. Only business-related individuals, including employees, agents, suppliers, and third parties, can access your data in accordance with our confidentiality obligations.

All monetary transactions on our website are encrypted for security. We store personal data on secure, password-protected servers. While we take reasonable steps to protect your personal data, we cannot guarantee complete security over the internet. You are responsible for keeping your password confidential.

If any visitor or user becomes aware of improper use of personal data, they must communicate the issue directly to PALMA VILLAS.

9.1. DATA RETENTION TIME

We retain personal data only as long as necessary to fulfill the purposes for which it was collected, in compliance with legal, accounting, or reporting requirements. When determining the retention period, we consider the nature and sensitivity of the data, the potential risks, and the purposes for which it was processed. Data collected on the basis of consent may be deleted at any time upon the withdrawal of consent.

Your data may also be deleted when:

• It is no longer necessary for the purposes collected,
• Deletion is required to comply with legal obligations, or
• Upon your request, provided there are no compelling legal reasons for retention.

CVs collected by the HR department are kept for six months and then destroyed. Tax data is retained according to tax legislation.

10. CHANGES TO THE PRIVACY POLICY

This Privacy Policy was last updated on 05/09/2024. PALMA VILLAS may unilaterally modify this Privacy Statement to comply with applicable privacy practices and reflect changes, in accordance with applicable legislation or for operational purposes. When we make changes to this statement, we will update the “update date” at the bottom of this page.

Please refer periodically to this Policy to check the implementation date of this Policy and be informed about how PALMA VILLAS protects your data. Any revisions will take effect as soon as we post the revised Policy. If we make substantial changes to this Policy that extend our rights to use personal data, which we have already collected from you, we will inform you and provide you with a choice on the future use of this data. If we intend to use your personal data in a way not previously specified or for a different purpose, we will contact you to inform you about how the law allows us to do this, and if necessary, we will request your consent. The revised Privacy Statement will come into force from the date of its publication/posting on the website of our business.

11. LINKS TO THIRD-PARTY WEBSITES

Our website may contain links to allow you to easily visit other online sites of interest and to allow third parties to collect or share data about you. However, once you use these links to leave our website, we recommend that you read the privacy notice of any website you visit. We may provide links to a number of other sites that we believe may offer you useful information and services. These sites may, however, not follow the same privacy policies. Therefore, we are not responsible for third-party privacy policies or actions, and you should know that we do not have any control over these other websites you may visit. We cannot be responsible for the protection and privacy of the information you provide when visiting such websites, and these websites are not governed by this website's privacy statement. You should be careful and review the Privacy Statement that applies to the website.

12. CONTACT

If you have questions or recommendations regarding this Policy, comments or concerns related to the management or protection of your personal data by the company, or if you wish to modify your personal data or exercise any of your rights as a data subject, please contact the following email address: info@palmavillas.gr.

13. RIGHT OF COMPLAINT TO THE DATA PROTECTION AUTHORITY

Furthermore, you have the right to contact the Data Protection Authority for issues concerning the processing of your personal data. For the Authority’s competence and the way in which you can submit a complaint, you can visit its website (www.dpa.gr).