Plan your adventures in Santorini and…Make every moment count!

Data privacy is of high importance for the Company, and we want to be open and transparent with our processing of your personal data.

We therefore have a policy setting out how your personal data will be processed and protected.

The processing of personal data is done in accordance with the provisions of the General Data Protection Regulation (GDPR 2016/679), more specific national and European legislation for certain sectors, the current Greek legislation for the protection of personal data (Law 4624/2019), as well as for the protection of personal data and privacy in the field of electronic communications (Law 3471/2006, as applicable) and the decisions of the Hellenic Data Protection Authority (HDPA).

Who is the controller of your personal data?

The Greek company under the trade name “TRAVEL AGENCY SANTORINI DREAMS PRIVATE COMPANY” (hereinafter referred to as the “Company“) is the controller of your personal data under applicable law.

TRAVEL AGENCY SANTORINI DREAMS PRIVATE COMPANY
Address: 125-127 Kifisias Avenue, Athens, GR-11524, Greece
General Electronic Commercial Registry (GEMI) No: 159579201000
Tax Reg. No: 801583538
Tel: +30 2142148637, Mr. Mistiloglou Christos
contact e-mail for personal data issues: [email protected]

Where do we store your data?
Unless otherwise provided in this Privacy Policy, the data we collect from you is stored within the European Economic Area.

Your rights
Right to access:
You have the right to request information about the personal data we hold on to you at any time. For this purpose, you can send us an e-mail at [email protected]

Right to portability:

Whenever the Company processes your personal data by automated means based on your consent or based on an agreement, you have the right to get a copy of your data on a structured, commonly used and machine-readable format. You can also request to have your data transferred to a third person. This only includes the personal data you have submitted to us.

In order to exercise the above right, you can send us an e-mail at [email protected]

Right to rectification:

You have the right to request rectification of your personal data if the information is incorrect, including the right to have incomplete personal data completed.

For this purpose, you can send us an e-mail at [email protected]

Right to erasure:

You have the right to ask for your personal data, which are processed by the Company, to be eased at any time, especially when:

• Your personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed
• The processing of your data is based on your consent, and you withdraw that consent
• Your data have been illegally processed.

The above right does not exist particularly where:

• The processing of your data is necessary to establish, exercise or defend legal rights
• The processing of your data is necessary to comply with a legal obligation of the Company that requires processing.

In any case, we will notify you whether your claim is satisfied or not, and in the event of non-satisfaction, the reasons involved in it.

In order to exercise the above right, you can send us an e-mail at [email protected]

Right to object: 

You have the right to object to the processing of your personal data which is based on legitimate interest of the Company. In that case, we will not continue to process the personal data unless we can demonstrate compelling and legitimate grounds for the processing which overrides your interest and rights or to establish, exercise or defend legal rights.

In order to exercise the above right, you can send us an e-mail at [email protected]

Right to object to direct marketing:

You have the right to object to the processing of your personal data for direct marketing purposes. You can state your preference by the following means:

• following the instruction in each marketing e-mail
• sending an e-mail at [email protected]

Right to restriction: 

You have the right to request the restriction of processing of your personal data under the following circumstances:

• If you question the accuracy of your personal data and until the Company verifies their accuracy.
• If processing of your data is unlawful and you object to their erasure by asking instead restriction of their use.
• If the Company no longer needs your personal data for the purpose of processing, but the data is necessary to establish, exercise or defend legal rights.
• If you object to the processing of your data by the Company which is based on legitimate interest of the latter and until the existence of the Company’s legitimate grounds overriding your freedoms or rights has been verified.

In order to exercise the above right, you can send us an e-mail at [email protected]

Right to complain with the competent data protection authority: 

If you consider the Company to process your personal data in an incorrect way, you can contact us at [email protected] or by phone at +30 2142148637. You may also raise a complaint to the Hellenic Data Protection Authority or any other competent supervisory authority.

Updates to our Privacy Policy:
We may need to update our Privacy Policy. The latest version of the Privacy Policy is always available on our website.

ONLINE PURCHASE

Why do we use your personal data?

We will process your personal data to manage your purchase online at the website by processing your bookings and refunds via our online services and send you notifications of your booking summary and the details of your reservation, in your e-mail, which you will state when creating your order.

Your personal data is being used to identify you and to validate your legal age for purchasing online and to confirm your address with external partners.

What types of personal data do we process?
We will process following categories of your personal data:

• passenger details, such as name and surname, gender, age, country
• passport or ID number
• e-mail address and telephone number
• payment method information (such as the payment method selected, the transaction date and the amount of payment)
• booking information and relevant comments

Who has access to your personal data?

Your personal data that is forwarded to third parties is only used to provide you with the services mentioned above. As a result, recipients of your personal data may be co-operating companies and our accountants/tax consultants.

In any case, only the data, which are necessary for the provision by each partner of the corresponding service for which the transmission is made, are forwarded.

Some of these recipient companies may have an independent right or obligation to process your personal data. In this case they act themselves as controllers.

What is the legal basis for processing your personal data?

The processing of your personal data is necessary for the Company to execute the sales contract concluded between us.

How long do we save your personal data?

We will retain your personal data for a period of 5 years from your purchase, unless they are required to be retained for a longer period for tax purposes or for the purpose of defending our legal rights and legal claims.

DIRECT MARKETING

Why do we use your personal data?

We will process your personal data to send you newsletters and marketing offers via e-mail and sms.

In order to optimize your experience as a user of our website, we will provide you with relevant information, recommended services, products and campaigns, send you reminders and offers.

What types of personal data do we process?
We will process following categories of personal data:

• name and surname
• e-mail
• telephone number

Who has access to your personal data?

Your personal data that is forwarded to third parties is only used to provide you with the services mentioned above. As a result, recipients of your personal data may be media agencies and technical suppliers for distribution of promotional messaging.

We never pass on, sell or swap your personal data for marketing purposes to third parties.

What is the legal basis for processing your personal data?
The processing of your personal data is based on your consent.

Right to withdraw your consent:

You have the right to withdraw your consent at any time by sending an e-mail at [email protected], and the right to object to the use of your personal data for direct marketing purposes.

When you do so, the Company won’t be able to send you any further direct marketing offers, or information based on your consent.

You can opt out from direct marketing by the following means:

• following the instruction in each marketing message
• sending an e-mail at [email protected]

How long do we save your personal data?

We will retain your personal data for direct marketing purposes until you withdraw your consent or opt out from the use of your personal data for direct marketing purposes.

CUSTOMER SERVICE

Why do we use your personal data?

We will process your personal data to manage queries, to handle complaints, enquiries, booking issues and technical support matters.

We may also contact you if there is a problem with your booking.

What types of personal data do we process?
We will process any data you provide to us, including the following categories:

• contact information such as name and surname, address, e-mail address and telephone number
• payment information
• booking information

Who has access to your personal data?

Your personal data is forwarded to third parties, such as co-operating companies, only to the extent necessary to provide you with the services mentioned above and for that purpose.

What is the legal basis for processing your personal data?

The processing of your personal data, when you have made a reservation, is based on the sales contract concluded between us, otherwise it is based on our legitimate interest.

How long do we keep your personal data?

We will keep your personal data for five years from the final settlement of the request, enquiry, complaint, query or other matter.

FULFILMENT OF LEGAL OBLIGATIONS

Why do we use your personal data?

We will use your personal data to comply with obligations in laws (including tax – accounting obligations), court rulings and decisions from authorities.

What types of personal data do we process?
We will process following categories of personal data, as an example:

• booking information and relevant comments
• name and surname
• postal address
• transaction amount and date
• payment method information (such as the payment method selected, the transaction date and the amount of payment)

Who has access to your personal data?

We will share your personal data with our associates, who will assist us in fulfilling our obligations mentioned above, such as our accountants and our tax and legal advisers.

What is the legal basis for processing your personal data?

The above processing is necessary to fulfil our legal obligations.

How long do we keep your personal data?

We will keep your personal data for as long as required by applicable law to comply with our obligations mentioned above.

PREVENTION OF MISUSE AND CRIME

Why do we use your personal data?

We will use your personal data to detect, prevent and deal with misuse of our services and to prevent and investigate cases of fraud and/or other criminal acts.

What types of personal data do we process?

We will process following categories of personal data, as an example:

• contact information such as name, address, telephone number and e-mail address
• booking and payment information

Who has access to your personal data?

Your personal data is forwarded to third parties only for purposes mentioned above.

We may share your personal data with insurance companies, legal authorities and consultants, law enforcement authorities to complete investigations. All or some of the above recipients may have an independent right or obligation to process your personal data acting in that case as controllers.

What is the legal basis for processing your personal data?

The processing of your personal data to prevent misuse of our services is based on our legitimate interest.

How long do we keep your personal data?

We will keep your data for the time we need to prevent and/or report potential fraud and other offences.