This Privacy Policy outlines the collection and processing of personal data from website visitors and users while browsing and using our website as adopted by the company under the name “MELTEMI BLUE BOAT RENTAL P.C.” with the distinctive title “MELTEMI BLUE BOAT RENTAL” (VAT number 802092620, Tax Office Thira (Santorini), Registration number within General Commercial Register “169786738000”), whose registered office is at Perissa, Santorini, tel. +30 6945459603, email: info@meltemiblueboatsantorini.com (hereinafter “Company”). Company is the controller of the personal data that you provided us and is responsible for providing you with all the necessary information on their processing in accordance with the Articles 12, 13 and 14 of the General Data Protection Regulation.
We are responsible for the protection of your personal data and we believe that your data should be collected and processed only when this is absolutely necessary for the operation of our website. For this reason, our Company’s systems, as well as our website, are designed in accordance with the applicable European and Greek legislation on the protection of your personal data, the General Regulation (EU) 679 / 2016 (hereinafter “the Regulation”) and the Law 4624 / 2019.
- Personal Data
Personal Data is any information that relates to you, or may be attributed to you. Such data is, for example, your name, surname, father’s name, address, postal code, city, country, county/region, telephone number, mobile phone number, as well as your email address, etc. Additionally, personal data also includes some technical data relating to you, such as your IP address or the devices from which you make use of our website, etc.
- When and what types of Personal Data does our Company collect and process?
Our Company collects those types of personal data whenever this is necessary for the operation of our website and the provision of our services to you.
Our Company does not collect personal data of specific categories or personal data concerning individuals of age under 16 years old.
In particular, we collect and process personal data from our website visitors in the following cases:
- Upon your entrance and browsing our website
Upon your entrance and browsing our website, our servers may record technical data relating to your electronic device and the network from which you enter, including your IP address. The IP address is a series of numbers which recognize your computer and are generated when using the internet. Your IP address may be used on behalf of the Company in order to manage our system, investigate security issues and develop anonymous statistics regarding the use of our website. We also collect access data (so-called server log files) including your browser type, your operation system, any file downloaded etc.
- Upon the submission of the online form
For the submission of an online form (contact/ lead generating), you are required to submit personal data such as your full name and your e-mail address, which are automatically sent to our company’s email address and are not stored in our website.
- Upon clicking the “BOOK” button in order to complete a boat rental
Our Company does not collect or store in any way any data for this process, since upon clicking the “BOOK” button for the rental of the boat of your choice, you will be automatically redirected to an independent third-party operator/platform, namely Travelotopos, within which the whole process for the rental of such boat shall be executed.
- Cookies
Cookies are small data files which are installed on the electronic device through which you use our website. We use Cookies to ensure the most efficient operation of our website and provide you with a customized experience while browsing our website, as well as to collect anonymous statistical data so as to improve the operation of our website and the provision of our services to you.
You are able to adjust the operation of the cookies according to your preferences through the browser settings from which you enter our website, for example by choosing which Cookies will be placed on your device, or even by deactivating Cookies. However, the deactivation of specific Cookies categories may also affect and restrict and / or fully prevent some specific functions of our website.
More details on the categories and Cookies that we use shall be found in our
- Google Analytics
Our website also uses web analytics services as developed by Google Analytics. This service uses technologies and tools such as Cookies in order to help us record and comprehend the way you gain access and use our website, so as to improve your experience and configure the website that serves better your needs. Data collected by Google Analytics shall include visits, location, user’s operation system, device type, browser type, pages visited, time spent on each page etc.
- Google Tag Manager
Our website also uses web analytics services as developed by Google Tag Manager. This service is a tag management system (TMS) that allows us to quickly and easily update measurement codes and related code fragments collectively known as tags on our website. It allows us to deploy analytics and measurement tag configurations from a web-based user interface. Data collected by Google Tag Manager shall include clicks, visits, location, user’s operation system, device type, browser type, pages visited, time spent on each page etc.
- Social Media Features
Our Company uses social media features (“Social Features”) provided by companies and services such as Facebook, WhatsApp and Instagram to enable you to share information via these channels. The Social Features are identified on our website by these companies’ respective logos. These cookies are owned and controlled by third parties, and therefore the third parties – and not our Company – are responsible for their use. As such, we can’t guarantee that we have listed every cookie you might get from a third party since a third party could change these cookies at any time as their needs change. For information on the purpose and scope of data processing by the social network, as well as your options for protecting your privacy, please visit the appropriate social network web site’s privacy policy:
Facebook: https://www.facebook.com/privacy/policy/?entry_point=facebook_page_footer
WhatsApp: https://www.whatsapp.com/legal/privacy-policy-eea
Instagram: https://privacycenter.instagram.com/policy
- Purposes and legal basis of processing Personal Data
Our Company endeavors to use your Personal Data only in ways that either is necessary for the purposes for which we have collected them or explicitly authorized by you. We are taking reasonable steps designed to ensure that we collect Personal Data that is essential for the website intended use, or otherwise reliable in relation to the purposes for which we have obtained the information, for as long as our Company retains possession of such information.
Our Company shall treat your Personal Data as strictly confidential and shall only process them in accordance with the requirements of the Data Protection Laws and Regulations. We will only process your Personal Data, when:
- you have given your consent to such processing, which you may withdraw at any time,
- the processing is necessary for the operation of our website and the provision of our Services to you,
- the processing is necessary for compliance with our legal obligations (e.g., for compliance with tax obligations, or the applicable accounting standards),
- the processing is necessary for our Company’s legitimate interests or third parties/partners’ interests who may legitimately receive your personal data (e.g., accountants, lawyers),
- the processing is necessary for the secure storage of your data required for the proper execution of our contractual obligations towards you and the development and improvement of our website and services.
Specifically, we may process your data for the following purposes:
- To provide services offered through our website.
- To provide you customer support, when requested by you.
- To monitor the usage of our website and detect, prevent and address technical issues.
- To gather analysis or valuable information in order to improve our website.
- To undertake market analysis and research (e.g., understanding audience preferences, adjusting content strategy etc.), only if you have explicitly requested and / or have given your consent.
- Personal Data Retention
We will not retain any Personal Data longer than necessary to fulfil the purposes for which it was collected, unless the law requires us to hold your Personal Data for a longer period (e.g., in accordance with applicable tax legislation), or delete it sooner, or unless you exercise your right to have the information erased (where it applies) and we do not need to hold it in connection with any of the reasons permitted or required under the law.
- Transfer or Disclosure of your personal data to third parties
Our Company does not and will not sell, rent out or trade your Personal Data. Access to your Personal Data shall only be provided to our duly authorized employees or business partners who act on our behalf for the above purposes of processing, by offering us IT or other services for the registration and storage of your data and/or for the operation of our website. We will only disclose (transfer, share, send, or otherwise make available or accessible) your Personal Data to third parties in the ways set out in this Policy.
We may disclose your Personal Data if required to do so by law, if disclosure is required to be made to law enforcement authorities, if we believe disclosure is necessary or appropriate to prevent vital individual’s interests (e.g., from physical harm) or in connection with an investigation of suspected or actual illegal activity.
Your Personal Data may be transferred to countries outside the European Economic Area (EEA), to third countries and international organizations only in ways that either is necessary for the purposes for which we have collected them or explicitly authorized by you. In this case, we take all the appropriate measures in order to ensure that any such international transfers are made subject to appropriate or suitable safeguards as required by GDPR and any other applicable law.
Our Company transfers personal data to third parties, to whom we delegate the processing of your personal data on our behalf, only in the following cases:
- to third persons or entities which are necessarily involved in the provision of services requested by you and to the extent that they have been assigned to the performance of part of the completion of the services provided to you
- To Google, mainly for email services and the provision of Google Analytics and Google Tag Manager;
- to third persons or entities operating on behalf of our part on issues such as hosting, operation and technical support of our website;
- to independent service providers or/and business advisers, such as accountants and lawyers etc.;
- to government agencies and public authorities, regulatory bodies and enforcement agencies, to comply with a valid and authorized request, including a court order or other valid legal process;
- as required or authorized by applicable law, and to comply with our legal obligations.
Company shall ensure that all the above-mentioned third parties / entities or independent service providers will not use your personal data for any other purpose than to provide the services for which they are contractually bound. For this reason, we are drawing up contracts with any independent contractors, which oblige them to comply with the requirements of personal data protection legislation and to use the data only for the purposes for which it was transmitted to them.
Finally, our Company takes appropriate measures to ensure that our employees who have access to and process your personal data are specific and properly trained, acting only based on the data they need to know regarding the processing of your personal data, while they are bound by confidentiality terms.
- Appointment of Data Processors and Sub-Processors
You acknowledge and agree that our Company may employ third party companies and individuals, agents, contractors or partners to facilitate the provision of its services related to our Company’s website and provide part of these services on our behalf or to assist us in analyzing the use of our website, or to provide to us technical or legal support. These third parties, when appointed, are considered as Data Processors.
In any such case, our Company shall ensure that any third subscribes to the principles set hereby and is subject to applicable legal framework (including GDPR), providing the same level of privacy protection as required by the present Policy and agree in writing to provide an adequate level of privacy protection. Any such sub-processors will be selected with due care and we will provide that they will be bound by adequate contractual arrangements pursuant to Article 28 of GDPR.
Our Company shall be liable for the acts and omissions of its Processors and Sub-Processors regarding the protection of your Personal Data to the same extent our Company would be liable if performing the services directly.
- Security measures for the protection of your Personal Data
Company shall implement appropriate technical and organizational measures to protect and safeguard your personal data against any unauthorized use or accidental or unlawful disclosure, alteration and destruction, such as:
- access to personal data is limited only to our employees and cooperating third parties who are required to know these data in order to provide us with their services.
- application of protocols and classified access, storage and processing tools, including security measures for the protection against an unauthorized access to them.
- use of data encryption methods to and from our website.
We are not responsible for any third-party actions or their security measures in relation to the information that these third parties may collect or process through their websites, services or otherwise.
- Your rights regarding the protection of your personal data
Our Company ensures that you can exercise all of your rights under GDPR in relation to your Personal Data that our Company holds and processes.
Specifically, upon your request we will:
– allow access to copies of your Personal Data within a reasonable timeframe;
– correct your Personal Data where inaccurate;
– withdraw a previously provided consent to processing of your Personal Data etc.;
– restrict or oppose to your data processing;
– get free access to your Personal Data (depending on the volume of data, we may ask you to cover some of our costs).
We will use our best endeavors to evaluate and respond to your requests within a reasonable time, while we will inform you of their progress.
Our Company reserves the right to reject requests that are unjustifiably repetitive, or their implementation is contrary to our legal obligations, or require disproportionate technical efforts or have disproportionate technical implications for the operation of our website. In any event, you have the right to submit a complaint before the competent supervisory authority.
If you wish to exercise any of your rights with respect to your Personal Data, you may inform us in writing at info@meltemiblueboatsantorini.com.
- Changes to this Privacy Policy
Company reserves the right to amend or renew the terms of this Privacy Policy, in accordance with the applicable legislation or any developments in the sector, without prior notice. For this reason, please check this page regularly. When you use our website, after the announcement for any such modification of this Privacy Policy, it is inferred that you agree with the new terms, as they are hereafter established.
- Contact us
In case that you need further clarification or information on the terms of this Privacy Policy or you wish to exercise any of your aforementioned rights, or you have a complaint, please communicate with us via email to info@meltemiblueboatsantorini.com.
