TERMS

PERSONAL DATA PROTECTION POLICY

1. The purpose of this policy.

1.1. Protecting your personal data is important for the company A. PANOPOULOS & SIA O.E. commercial name “NIKITI COMFORT” hereinafter referred to as “company”. This Policy  informs you of business information collection practices, including the categories of data that may be collected, maintained and processed, the purpose of their collection, the categories of persons to whom your data and rights are disclosed. The company will make every effort to protect your personal data, provided that the personal information you provide to us is accurate and true.

1.2. The Policy also gives an indication of the security measures the company takes to protect the confidentiality of data and provides some guarantees of actions that the company will not take.

2. Legal and regulatory framework.

2.1. The management and protection of the personal data of the visitor / user of business services is governed by the terms of this Policy, with the relevant provisions of the General Data Protection Regulation-EU General Data Protection Regulation (GDPR) – Regulation (EU) 2016/679 (hereinafter referred to as the “Personal Data Protection Regulation”) for the protection of the individual, from the protection of personal data, from the decisions and recommendations of the Personal Data Protection Authority, and other relevant domestic authorities laws and regulations.

2.2. We reserve the right to change the terms of personal data protection by informing visitors / users and within the existing or possible legal framework.

2.3. If you do not comply with the terms of personal data provided in this section, you must not use the services of the business. You do not have to provide the personal information requested, but if you choose to omit this action, in many cases we will not be able to provide you with our products or services or answer any questions you may have.

3. Commitment of the company.

3.1. At Nikiti Comfort we believe that privacy and customer data protection are of the utmost importance and we are committed to provide all clients with personalized services that meet their requirements, and in a way that safeguards their privacy.

3.2. Personal information (personal data) is used exclusively by the company and its employees to respond to your requests and to serve you in accordance with this Policy. People who manage personal information are trained to use appropriate procedures. Business representatives and service providers keep your personal information confidential and do not use it for any purpose other than to serve specific services to us.

3.3. By accepting this Policy, the Company may only transmit your data (such as your full name or e-mail, for example) solely to its specialized partners, sponsors and strategic partners in order to provide the best and your most complete service, before and during your stay at the hotel, and afterwards for promotional and communication purposes with you.

3.4. We will only share the personal data of those of our customers who have accepted this Policy.

4. What kind of data does the company collect?

4.1. Any information included in the concept of “personal data” of the Privacy Policy and their collection is not based on the Law or on the conclusion or execution of a contract, is collected by the business only if you choose to express consent.

4.2. The following personal information is collected:

Identification data: Full name, ID / passport number, date of birth, telephone number.

Contact Information: Mailing address, email address, telephone number.

Transaction Data: VAT, type, location, time of products or services provided.

Contract Relationship Data: Contractual documents, information and consent forms, electronic will statements.

Transaction Data: Information about interests, preferences and participation in events, competitions, surveys.

4.3. We do not collect, or in any way gain access to, any special categories of (“sensitive”) personal data or data relating to criminal convictions and offenses of our clients. The Customer shall be obliged to refrain from providing such data relating to his or her third party data. In case a customer provides such data to the business, they will be deleted as soon as we become aware. The Company assumes no liability to customers or third parties for the provision and / or processing of sensitive data due to customer actions or omissions in breach of their above obligation.

4.4. Visiting the business website www.nikiticomfort.gr does not necessarily imply that you provide any kind of personal data. In some cases, however, it is necessary for you to provide some of your own personal information, which is indicated in the relevant data entry sections on the business website.

4.5. In the business we may collect and store the following personal information about you from the following restricted sources:

4.5.1. contact information when you contact us to ask questions or request information about the services provided by the business.

4.5.2. identification, communication, transaction, contractual and transactional behavior data when booking a room or place in a restaurant regardless of the means by which it is performed (online, by telephone via customer reception, etc.).

4.5.3. identification, communication, transaction, contractual and transactional behavior data, when dealing with an in-house leaseholder when using our hotel services. .

4.5.4. identification, communication, transaction, contractual and transactional behavior data when you enter into a contract with us to provide any business services.

4.5.5. identification, communication, transaction, contractual and transactional behavior data when you are purchasing online products or services provided by the business.

4.5.6. from publicly available sources.

4.6. The data collected through the business website can also be combined with data provided in other cases, for example, when you call us or participate in competitions and promotions. The personal data provided to the business in these cases may be incorporated into existing databases and stored for the purpose of simplifying your data management systems.

5. For what purposes the business collects personal data.

5.1. The use of personal or non-personal data that the business collects from you serves the following purposes:

5.1.1. Transactions: The business may use your personal information to process any transactions with you, such as credit card payments, end-of-life cards, etc.

5.1.2. Advertising / Marketing: The business may use the personal or non-personal information of the visitors / users for informational purposes and promotions related to competitions, gifts, discounts on products and services of the business and its affiliated companies and sponsors.

5.1.3. Website Improvement and Adjustment: This information will only be used by the business for the purposes for which it was collected and to provide information to you. It will also use them to tailor the content of the site to your needs and improve its composition, changes and dynamics.

5.1.4. Legal use: The business may collect, store, administer and generally process your personal information when required by the Privacy Policy and / or the Law or when necessary to protect or defend your privacy. her own interests and yours.

6. Use of information.

6.1. The information you provide to the business or which the business itself holds can be used by us to:

6.1.1. verifying your identity when asking questions.

6.1.2. help us manage and communicate with you about improving the management of services and products that have been provided to you by the company in the past, are now available or will be provided in the future.

6.1.3. to do marketing analysis and create customer profiles and generate statistical information.

6.1.4. to help us prevent and detect fraud or loss, and,

6.1.5. to contact you by any means (including mail, email, telephone, etc.) for other services and products offered by the business, and authorized selected affiliates.

7. Data Retention – Storage.

7.1. At the Company, we retain and store personal data only for the time required to perform a service that you have requested or for which you have given your approval, subject to the applicable provisions of the Law, when it comes to matters governed by commercial and / or tax laws, the various relevant provisions, etc. In any case, the personal data you provide to us and are embedded in written agreements, contracts, and contract execution or commercial e-mail shall be stored for a period of 20 years in a physical and electronic file in the Legal Department, Sales / and either directly or indirectly provide the above services or assist such departments in the performance of their duties or provide management services to the accounting office of the business or any other third party to us.

8. Cookies and Web beacons.

8.1. Cookies are data files that a site sends to your computer when you browse the site. These data files include data that allows our site to remember important information that will make our site more efficient and useful for you. Our site uses cookies for a variety of purposes. We use cookies and IP technology to obtain non-personal information about site visitors and to provide our registered visitors with the best personalized online experience possible.

8.2. How do we use cookies? Visitors to the business website use different web browsers and different computers. In order to facilitate your visits with the technology you use, we automatically record the type of browser and operating system a visitor uses, as well as the name of the visitor’s Internet Service Provider. We also record the total number of site visitors in a cumulative way so we can update and improve our site. This process does not extract any personal information. This data shows us whether more visitors prefer certain features or parts of the site than others, which helps us keep our site up-to-date with new material that is of interest to most of our visitors. In particular the cookies we use are:

8.2.1. Remarketing Cookies (FacebookPixel, AdWorks): Displays ads to people who have visited your site or used your mobile app. For example, when users leave our site without choosing something, remarketing helps us reconnect with them by displaying relevant ads on their different devices.

8.2.2. Carthook: Helps increase e-commerce revenue by automatically retrieving abandoned baskets. The automation of the basket defines an email campaign

8.2.3. Active Campaigns: Offers integrated email marketing, marketing automation and small business CRM. We can send beautiful newsletters, customize automations based on the behavior of users of our website and benefit from sales automation.

8.2.4. Moosend: These are e-marketing and marketing automation software. We can design and send campaigns or start personalized conversations and reach out to our users on a scale.

8.3. How do we use cookies to personalize your experience on our site? Cookie technology helps us provide content that suits a visitor’s interests and allows us to facilitate the registration and participation of our visitors for the benefit of our visitors and access to other features available on our site. Where possible, in such cases we may associate personal information with a cookie file.

8.4. What if you don’t want cookies? If you do not want cookies, you can set your computer to alert you whenever a cookie is sent to it or to disable downloading of all cookies through your web browser (Check the Help / Help menu in the program) browsers you use to learn how to change or update cookies correctly).

8.5. What are Web beacons and how does the Company use them? Some of the business websites and newsletters may contain electronic images called Web beacons, also known as single pixel GIFs, pure GIFs, or pixel tags. Their use on the site allows the count of visitors who have accessed the business pages. Their use in promotion emails and newsletters allows us to measure how many subscribers have read the material we send. Web beacons allow us to develop statistical information about activities and functions that are most relevant to our visitors / users in order to provide more personalized material. They are not used to access personal information without your consent.

8.6. Rejecting cookies may affect your ability to use any of the products / services on the business website.

9. Download CV.

9.1. The data from the Curriculum Vitae and its accompanying documents are collected by the company directly and only from the person concerned, as they are absolutely necessary for the assessment of candidate’s suitability for the particular job. In addition, it should be noted that by voluntarily submitting / sending the personal data and information contained in the above Curriculum Vitae and its accompanying documents, the person consents to the collection, storage, use, processing and transmission of this data for the purposes of this brief. In order to safely process the personal data of the candidate from the submitted CV, the company shall obtain all necessary technical and other means.

9.2. Access to the Personal Data from the CV is only authorized where appropriate and depending on the purpose of processing, staff of the business and / or staff of third party affiliates (with whom the business is contracted) subject to compliance with the relevant confidentiality obligations contained in the relevant contracts. The data (if any) is processed by the business and sent to the interested advertisers. The company will not disclose, sell, exchange, assign or otherwise dispose of, without the consent of the person concerned, any third party, natural or legal persons, personal data from the collection and processing of the CV, except as stated above for needs of the position to be covered and the selection process and due to the legal basis of Article 6 (1b) of the General Law. These companies will process the data solely for the needs of their business partnership.

9.3. With regard to the personal data transmitted by the person concerned, in the context of sending or submitting the CV, the purpose of the processing is the intent to conclude a cooperation agreement at the request of the person concerned (the “Data Subject”), to check his / her qualifications before conclusion of the contract (Article 6.1b of the General Law), the minimum necessary processing of this data for the purpose of evaluating the CV and whether it corresponds to the specific job position and the protection of business interests. Also, the classification of the candidate in the company’s programs, the need to communicate between the company and the “Entity”, the use of data (eg photos) on the company’s social media to promote its actions. It is clear that, once the person has been classified into the business plans of the company, the photos he has submitted or taken during these programs will be used on social media. This processing is carried out by the company solely for the purposes stated and does not extend to any other processing purpose.

9.4. Where the consent of the person concerned has also been obtained, the CV’s data will be stored by the company for future use / evaluation purposes, in the case of new positions with the company, for a period of 24 months after submission, they will be safely destroyed / deleted. If no such consent has been obtained, the CV data, after filling the relevant job posting for which the person concerned sent or deposited this note, will be safely destroyed / deleted within 1 month of the cover date of the post, unless the business is legally entitled or obliged to maintain it. If the person ultimately cooperates with the business, so the CV, its accompanying documents (photos, etc.) will be kept for as long as the work or work contract or cooperation is active. Also, any additional information required and necessary for the purposes of insurance-tax law will be processed only for purposes directly related to the cooperation of the person concerned. Once the co-operation period has expired, they will be maintained for as long as the law requires and for the maximum period of limitation of each of the claims, and will then be safely destroyed / deleted.

10. Disclosure of information.

10.1. By accepting this Policy from the client / user concerned, the company may only transmit your data (such as your full name or e-mail, for example) solely to its specialized partners, sponsors and strategic partners in order to provide the best and your most complete service before and during your stay at Nikiti Comfort, as well as for promotional and communication purposes with you.

10.2. Under no circumstances will we sell or rent your personal information to third parties. This information is used exclusively by the business to continually improve your service.

10.3. An undertaking may disclose information only if it is lawfully requested for legal or regulatory purposes, in the context of legal proceedings and / or any legal proceedings.

11. How secure your data is.

11.1. The company has strict security and control measures in place to protect your personal information. This includes a set of administrative measures, security policies, procedures and practices to verify your identity when you call us, encrypt data on our site, back up data to locations outside the business, etc., to ensure compliance with all applicable legal requirements.

11.2. We undertake technical and organizational security measures to safeguard the data collected by you against any voluntary or unintentional attempt, manipulation, loss, destruction or in general access by an unauthorized person. Where personal data is collected and processed, the information will be processed in an encrypted form to prevent any misuse of such data by any third party. Our security measures are subject to constant re-checks and refinements in accordance with the latest technological developments.

11.3. Access to your personal data is restricted to authorized employees only to provide you with products and services that come into contact with that data.

11.4. Physical, electronic and procedural safeguards have been activated, which comply with your personal data protection regulations.

11.5. The company takes every precaution to keep your personal information secure. However, due to the nature of the Internet, it cannot guarantee the protection of communications or data stored in browsers against any arbitrary third party access.

12. Internet access.

12.1. If you contact “Nikiti Comfort” over the Internet then we may occasionally use e-mail to contact you about our services and products,

12.2. Please be aware that Internet communications, such as emails, etc., are not secure unless they are encrypted.

12.3. The company is not responsible for any unauthorized access or loss of your personal information that is beyond its control.

12.4. Privacy Policy and Children: This site is designed and intended for use by adults. If you are a minor below the age at which parental consent is required in your country, you should review the terms of this Policy with your parent or guardian to make sure you understand and accept these terms. If it is found that we have obtained information from a minor without the consent of the parent or guardian, and such consent should have been obtained, we will delete the information as soon as possible. Access to certain parts of the Website and / or the ability to receive prizes, product samples or other gifts may be restricted to users under a certain age. We may use your personal information to conduct age verification checks and apply these age restrictions.

12.5. IP Addresses: The IP address through which the Visitor / User / Member’s PC is accessed on the Internet and then to the Website / Application is stored and can be retrieved from the site if necessary in case of violation of the Terms of Use of the Website / Application by the Visitor / User / Member.

12.6. Account Access: If you access our Services through a personal account, you will remain logged in until you click Disconnect from your account. If you are using a public computer or sharing your device with another user, we advise you to disconnect and erase cookies from the device each time you use the platform to protect your account and your personal information. Otherwise, every other user on the device will be able to see and access your account.

12.7. Communication through the Platform of the Website: In the event that a user communicates with us through the communication form or in any other way, the user provides his / her personal data voluntarily and exclusively at the user’s free will. We will only process such personal data provided to the extent necessary for this purpose.

12.8. Social Networks: Within our Site you may be offered the opportunity to share on Social Networks and other related tools that allow you to share your actions within the Site with other applications, websites or media, and vice versa. Using such features allows you to share information with your friends or the general public, depending on the settings you have set in your personal profile. Please see the privacy policies of these social services for more information on how your data is handled.

12.9. Special Data Categories: We ask you not to send us e-mails or to disclose sensitive personal data to us using the communication platform. The processing of personal data in this category does not in any way serve the purpose of the processing as defined above.

13. Communication monitoring.

13.1. All business communications with you (including telephone conversations, e-mails, etc.) may be recorded by the business for security, export statistics, quality assurance, and for legal, regulatory and training purposes.

14. What are your rights?

14.1. According to the EU General Data Protection Regulation (GDPR) 2016/679, as applicable, you have the following rights (Articles 12 GDPR):

(a) the right of access;

(b) the right of correction;

(c) the right to delete, under certain circumstances, such as when processing is no longer necessary for the purpose for which they were originally collected and there is no compelling reason to continue processing (or storing) it;

(d) the right to limit processing;

(e) the right to transmit the data;

(f) the right to object and the right not to be subject to a decision made solely on the basis of automated processing, including the preparation of profiles;

(g) the right to report to the supervisory authority.

14.2. That is, you have the right to receive, upon request, free information about stored personal data concerning you, or to object, upon request, to the processing of data concerning you, valid for the future, and revocation of your consent and, in accordance with the applicable provisions, the right to correct, limit the processing, transfer of data, delete such data and report to a supervisory authority.

14.3. In these cases, please contact us in writing by original letter or fax or by e-mail to the relevant section of the Company’s Privacy Policy, listed below, under clause 19 of this Policy.

15. Applicable Law and other conditions.

15.1. The above terms and conditions of use of the business, as well as any amendment, change or alteration thereof, are governed by and supplemented by Greek Law, European Union Law and the relevant international treaties. Any provision of the above terms is contrary to the Law, ceases to be effective and is hereby repealed, without prejudice to the validity of the other terms.

15.2. This is the entire agreement between the business and the visitor / user of the site and its services and is binding only on them.

15.3. No modification of these terms will be taken into consideration and will not form part of this Agreement unless it has been formulated in writing and incorporated therein.

16. Modifications.

16.1. The company may amend and update this Policy periodically by publishing a new version on its Website. You should check this page from time to time to make sure you are happy with any changes to this policy.

17. Links.

17.1. Our site may contain links to other sites. This Privacy Policy does not apply to user’s access to other websites.

18. Communication.

18.1. The company informs you that Agathoniki Panopoulou is appointed as a Personal Data Protection Officer with a contact email address nikipanop@gmail.com

18.2. If you have any questions or recommendations, you can contact at the above contact address.

18.3. Ongoing developments on the Internet in general make it necessary to adapt our data protection rules from time to time. The company reserves the right to make any appropriate changes to these rules at any time.