PRIVACY POLICY

The protection of Personal Data is extremely important to our Hotel Odera Tinos. We ensure full compliance with the European Regulation EU 679/2016 for the protection of Subjects (Persons), regarding the Processing of Personal Data and we process this Data in accordance with the applicable Regulatory requirements. Please read this Privacy Policy as it contains important information about how we use the Personal Data we collect from you or that you provide to us.

1.Identity

When this policy refers to “we”, “us” or “our”, “Data Controller”, it refers to Odera Tinos. Our website is https://www.oderatinos.com/ and uses the https protocol. In the https protocol, the connection between your device (PC, laptop, mobile) and the remote server is encrypted. This means that the Data transferred between your device and the server is converted into an unintelligible form and if a malicious user intercepts this Data, he/she will not be able to use it. When the encrypted Data reaches its correct destination, it is decrypted and returned to its original form. At the same time, with the use of an SSL Certificate, a secure connection is created between the server that hosts our website and the visitor’s browser, thus protecting all information transferred to and from our website.

2. Data Controller

Regarding the management of your Personal Data, our Hotel Odera Tinos is the Data Controller. Contact info:

Name: NAIN KSENODOXIAKES EPIXEIRISEIS EPE, Odera Tinos Hotel

E-mail: [email protected]

Phone: (+30) 22831 10200

Address: Vourni Location, Tinos, T.K 84200

3. Data Processors

Odera Tinos’s website has an integrated reservation system, as well as uses various reservation systems through Data Processors (such as Booking , Tripadvisor etc). There is a strict contractual framework between the Data Controller and the Data Processors for the protection of your Personal Data.  Booking , Tripadvisor etc. make certain reservations on behalf of Odera Tinos and are fully committed to protecting the Privacy of users of their systems. Please familiarize yourself with their Data Protection Policy on their Websites (click on the relevant Links in this paragraph 3 to be informed).

4. Obligation to provide the Data

All information requested on electronic or physical booking forms is, in general, mandatory (unless otherwise specified in the required fields) to fulfill the stated purposes. Therefore, if they are not provided or not provided correctly, we will not be able to process your requests.

5. What information we collect from you

Via our Homepage https://www.oderatinos.com/ :

When you subscribe electronically to the list of recipients of our newsletters. In this case, you share your email with us, while you should have read and accepted the Privacy Policy

Through the contact page https://www.oderatinos.com/contact/ :

When you want to send us your request and/or question electronically. In this case, you provide us:

• Your name,
• Your surname,
• Your phone number,
• Your email,
• Your message

while you should have read our Privacy Policy and Terms of Use.

Via the built-in reservation page:

In this case, you must provide us:

• Your name,
• Your surname,
• Your email,
• Your member no,
• Your Country,
• Your address,
• your phone number
• Your card details (number, expiry date, etc.)

while you should have accepted our Cancellation Policy.

Through Check-in in our Hotel Reception:

In this case, you provide us:

• Your name,
• your Arrival and Departure date,
• your date of birth,
• your nationality,
• your ID or passport number,
• the details of your companions (name, ID or passport number and date of birth),
• your address,
• your phone number,
• your email,
• your phone number,
• your nutritional information (any allergies)
• your card billing information (if required), and

your consent or not to our newsletter recipient list, or to our customer satisfaction survey. The Odera Tinos will not send you a newsletter unless it has your express Consent for it.

Social media:

If you use any social media by Odera Tinos:

• https://www.facebook.com/oderatinos
• https://www.instagram.com/oderatinos

either on our website or otherwise through a social provider Media, we may access information about you through this social provider Media, according to their Privacy Policies. When you use a social media feature and if you have chosen to include it in your social media account, we may access information such as your name, profile picture, gender, birthday, email address, city or region and any other information available. Depending on your friends’ Privacy settings, we may access the information you provide to a social media provider about your respective locations (“Location Data”) to provide you with relevant content. Please note that your Location Data may also be shared with your friends on a social media provider, in accordance with your privacy settings for that social media provider. See their respective Policies here:

• https://www.facebook.com/privacy/policy
• Data Policy | Instagram Help Center

6. How we use your information

Depending on the user’s requests, the Personal Data collected will be processed according to the following purposes:

• To manage bookings made, including managing payments (where applicable) and managing user requests and preferences.
• To manage your enrollment in loyalty or participation programs and the acquisition and redemption of points.
• To manage the user’s communication requests with us through the channels provided for this purpose.
• To manage the sending of personalized commercial communications by us, by electronic and/or conventional means, in cases where the User expressly agrees.
• To manage the provision of the contractual accommodation service, as well as additional services.
• To administer surveys and/or evaluations regarding the quality of services provided and/or the perception of our image as a Company.

7. Who we share your information with

With your consent, we may share your information with the following entities:

• Suppliers such as car rentals and activity providers who fulfill your bookings/wishes. All services provided by a third-party vendor are described as such. We therefore encourage you to consider the Privacy Policies of any travel suppliers whose products you purchase through their website. Please note that these suppliers may also contact you to obtain additional information about you, facilitate your travel booking or respond to a review you may submit.
• Third-party servers that provide services or functions on our behalf, such as credit/debit card processing, Data analysis, customer service, marketing, distribution of survey or sweepstakes programs, and fraud prevention. We may also authorize third-party vendors to collect information on our behalf, including as necessary to operate the features of our website or our applications or to facilitate the delivery of online advertising tailored to your interests. Third party vendors have access to and may collect information only as necessary to perform their functions and may not share or use the information for any other purpose. They are also required to follow the same Data security practices that we follow. Please note that these third-party service providers may be located in countries that may not provide a level of protection for your Personal Data that is equivalent to thatoffered in your country of residence. However, we will endeavor to protect all Personal Information we collect from you in accordance with strict Data Protection standards.
• Referring websites that link to our website from another website (for example, through a link you clicked on another website that directs you to ours), we may share some information about you with that referring website. We encourage you to review the Privacy Policies of any website that refers you to our website.
• Social media providers. When you access certain social media features through our website, you share information with the social media provider (such as Facebook), and the information you share will be governed by their Privacy Policies (including that we may access this information through of the social media provider). You may be able to modify the privacy settings for these social media providers.

We will disclose your Personal Data as we believe is necessary or appropriate:

• Comply with applicable law, including laws outside your country of residence.
• To comply with any Legal procedures.
• To respond to requests from Public and Governmental Authorities, including Authorities outside your country of residence, and to respond to National Security or Law enforcement requirements.
• To enforce our terms and conditions.
• To protect our business.
• To protect your rights, privacy, safety or property, and those of third parties.
• To enable us to pursue available Remedies or to limit the damages we may suffer from the activities of third parties.

8. Third Party Data (e.g. Booking for a Third Party)

In the event that the User provides third-party Data, he is required to declare that he has the consent of the third party and undertakes to provide the interested Data owner with the information contained in this Privacy Policy, duly exempting us from any responsibility. However, we can carry out the necessary verifications to verify this fact, adopting the corresponding measures of due protection, in accordance with the Data Protection regulations.

9. Sensitive Data

Unless you wish to do so, we ask that you do not send/disclose to us, directly or through third parties, any Sensitive Personal Data (e.g. social security numbers, data relating to racial or ethnic origin, political opinions, religious, ideological or other beliefs, biometrics or genetic characteristics, trade union membership or administrative or criminal proceedings and sanctions).

10. Use of Services by Minors

Our website is intended for the general public. If you know that a child under the age of 18 has provided personal Data through our Website, please notify Odera Tinos by sending an email to [email protected] . If Odera Tinos finds that a child under the age of 18 has provided Personal Information through its website, Odera Tinos will take steps to delete it immediately.

11. Data Retention

We will retain your Personal Information for the period necessary to fulfill the purposes described in this Privacy Policy, unless an extended retention period is required or permitted by Law or if the User requests that it be deleted from our records or withdraw his consent.

The criteria used to determine our retention periods include:

• The length of time we have an ongoing relationship with you and provide you with the Services (for example, if you have an account with us or continue to use the Services, or if you have a booking that has not yet been completed).
• Whether there is a Legal obligation that obliges us (for example, some Laws require us to keep records of your transactions for a certain period before we delete them).
• Whether the retention is appropriate considering the Legal status (e.g. conducting investigations by Public Authorities).

12. How we protect your Personal Data

We want you to feel confident about using our website and apps to make trips, and we are committed to protecting the information we collect. Although no Website or application can guarantee 100% security, we have implemented appropriate administrative, technical, and physical security procedures to protect the Personal Information you provide to us. For example, only authorized employees are permitted to access Personal Information and may do so only for permitted activities. In addition, we use encryption when transmitting your sensitive Personal Information between your system and ours, and we use security and intrusion detection systems to prevent unauthorized persons from accessing your information.

 13. Legal Basis Processing of Your Data

The Data Processing required to fulfill the aforementioned purposes requiring the User’s consent cannot be done without it. Likewise, whenever the user withdraws his consent to any Processing, this will not affect the Lawfulness of the Processing previously carried out. To revoke this Consent, the User may contact us through the appropriate communication channels. Also, in the cases where the Processing of the User’s Data is necessary for the fulfillment of a Legal obligation or for the execution of the existing contractual relationship between you and the User, the Processing is provided as it is necessary to comply with the purposes in question.

14. External links

If any part of our website or any application links you to other websites, they are not governed by this Privacy Policy. We encourage you to review the Privacy Statements posted on these other websites to understand their Privacy Policies on the collection, use and disclosure of Personal Information.

 15. User Responsibility

User:

• Guaranties that he/she is an adult, and that the information he/she provides us is true, accurate, complete, and up to date. For these purposes, the User is responsible for the correctness of all the Data he/she transmits and will keep the information updated so that the Data in question reflects reality.
• Guaranties that he/she has informed third parties on whose behalf he/she has provided Data about the references contained in this Privacy Policy. He/she also guaranties that she/she has obtained the authorization of a third party to provide his/fer Data for the purposes stated in this Policy.
• He/she will be responsible for false or inaccurate information that he/she provides through our website and for damages, direct or indirect, that may be caused to us or to third parties.

16. Cookies Policy

Like many other websites, our website uses Cookies and other similar technologies to improve its performance or to provide more relevant advertisements. Cookies are small text files sent by a website and stored in your browser while you visit a website. Cookies track how you use a website and allow it to remember your preferences and settings and help us analyze its functionality.

Our website uses or may use the following categories of Cookies:

Necessary Cookies: They are used to activate the basic functions of our website, for example to make a secure login or to set your consent regarding the use of Cookies.

Functional Cookies: They are used to enable functions such as sharing a content of our website on Social Networking platforms etc.

Analytics Cookies: They are used to let us know how users interact with our website (traffic etc.).

Performance Cookies: They are used to understand and analyze key performance indicators of our website and help provide a better user experience for users

Advertising Cookies: They are used to provide users with personalized advertisements based on their traffic patterns and to determine the effectiveness of advertising campaigns.

Uncategorized Cookies: Cookies are not categorized in the above Categories but may be used by our website.

When you visit our website, it may place a Cookie on your browser that may collect information, including Personal Data, about your online activities over time or across different websites. Many web browsers are set to automatically accept Cookies, but you can change your Cookie preferences through the options available in your web browser.

You can at any time choose the categories of Cookies you accept (our website shows all the cookies it uses by Category), however please note that this may affect the availability of some features of our website.

 17. Exercise of Rights

The User can contact us at any time free of charge, in order to:

• To obtain confirmation as to whether the User’s Personal Data is being Processed by us.
• To access his Personal Data.
• To correct any inaccurate or incomplete Data.
• To request the deletion of Personal Data when, among other things, the Data is no longer necessary for the purposes for which it was collected in the first place.
• To confirm withdrawal of Consent.
• To request the restriction of Data Processing when any of the conditions provided for in the General Data Protection Regulation (GDPR) are met.
• To request the transfer of his/her data.

In case the Odera Tinos is unable, due to the large number of requests, to fulfill your request immediately, it will inform you as soon as possible and in any case within one month of submitting your request about its progress and the reason for any delay in fulfilling it. If your requests are clearly having no ground or are excessive, especially due to recurrence, Odera Tinos may either impose a reasonable fee, taking into account the administrative costs of providing the information or communication or performing the requested action, or refuse to proceed with your request. In the event of a Data breach that may put your rights and freedoms at high risk, if this does not fall within one of the exceptions provided for in the Law, Odera Tinos undertakes to inform you of the breach without undue delay.

Similarly, the user is informed that he/she can at any time submit a complaint regarding the protection of his/her Personal Data to the competent Data Protection Authority https://www.dpa.gr/ . If you wish to access any of these rights, you can contact us (see < 2. Data Controller >)

18. Changes to this Privacy Policy

Any future relevant regulations that may come into force will be made part of this Policy. In any case, Odera Tinos reserves the right to change the terms related to the protection of Personal Data in accordance with the applicable Legal framework.

Therefore, these terms of protection of Personal Data may be revised and updated at any time without prior notice. Users of our website are requested to observe the reviewed terms for changes at regular intervals, as the continued use of the website indicates that they accept all possible modifications.

The current version of the Privacy Policy came into force in May 2024.