Ammos-hotel.com Privacy Policy
Information on Personal Data Processing
I. Introduction
The website Ammos-hotel.com (hereinafter: “the Website” or “we”), through its legal representative/administrator, with its registered office at 39 Agiou Dimitriou St. & Oikonomiou St., Agia Triada, hereby informs you about how we collect and process information about you.
Personal data (hereinafter “Data”) refers to any information relating to identified or identifiable natural persons (the “Data Subjects”).
The protection of your personal data is very important to us. We take all appropriate technical and organizational measures to protect the Data we collect and process. This Personal Data Protection Policy describes the type of information we may collect, the method and purpose of its processing, as well as your rights as data subjects. This policy applies to all visitors and users of the Website.
Data We Collect, Sources, and Processing Purposes
We collect and process Data that you provide to us directly, as well as data that may be collected automatically when you browse the Website.
- Data you provide to us:
- When you contact us via a contact form, email (e.g., at info@ammos-hotel.com), or phone (e.g., at +30 2392 051280), we may collect information such as your name, email address, phone number, and the content of your message, for the purpose of responding to your request.
- If the Website offers registration or account creation, we may collect the information required for the creation and management of your account.
- If you subscribe to newsletters, we collect your email address for sending them.
- Automatically collected Data:
- When you browse the Website, technical information may be collected, such as your IP address, browser type, operating system, date and time of access, and the pages you visit, for the purpose of ensuring the proper functioning of the Website, its security, and analyzing traffic to improve our services (see also section VII. Cookies).
- Sources: Data is primarily collected directly from you (via forms, email, phone) or automatically during your use of the Website. As a rule, we do not collect data from publicly available sources, unless there is a specific legal reason and we inform you accordingly.
III. Legal Basis for Processing
The processing of your personal data is based on the following legal bases of the General Data Protection Regulation (GDPR):
- Your consent (Article 6 para. 1 a GDPR): When your consent is required for specific processing purposes, such as sending newsletters or using non-essential cookies. You can withdraw your consent at any time.
- The performance of a contract or taking steps at your request prior to entering into a contract (Article 6 para. 1 b GDPR): If the processing is necessary for the provision of a service you requested or for the performance of a contract to which you are a party.
- Compliance with a legal obligation (Article 6 para. 1 c GDPR): When processing is necessary for our compliance with obligations imposed by law (e.g., tax obligations).
- Our legitimate interest (Article 6 para. 1 f GDPR): When processing is necessary for the pursuit of our legitimate interests, such as ensuring the smooth operation and security of the Website, analyzing its use for improvement, responding to your requests, and establishing, exercising, or defending legal claims, provided that your interests and fundamental rights do not override these.
Any refusal on your part to provide us with data necessary for a specific purpose (e.g., for the performance of a service) may make it impossible to provide that service.
- IV. Disclosure and Transfer of Data
We do not disclose your personal data to third parties unless it is necessary for:
- Fulfilling processing purposes: We may share data with trusted third-party service providers (Processors) acting on our behalf, such as website hosting companies, analytics service providers, email marketing service providers (if you have consented). These providers are contractually bound to protect your data and process it only according to our instructions.
- Compliance with the law: We may disclose data to public authorities if required by law or judicial decision.
As a rule, your data is processed within the European Union (EU) or the European Economic Area (EEA). In the event that data needs to be transferred to third countries outside the EEA, this will only occur if an adequate level of protection is ensured in accordance with the GDPR (e.g., through EU standard contractual clauses).
- V. Data Retention Period
We retain your personal data only for the period necessary to fulfill the purposes for which it was collected, as described in this policy, unless a longer retention period is required or permitted by law.
- Data collected based on your consent is retained until your consent is withdrawn.
- Data necessary for the performance of a contract is retained for the duration of the contractual relationship and, after its termination, for as long as necessary for the establishment, exercise, or defense of legal claims or for compliance with legal obligations (e.g., tax legislation).
- Data we process based on our legitimate interest is retained for as long as necessary for the specific purpose, taking into account the need for retention and any legal obligations or limitation periods.
After the necessary retention period has expired, your data is securely deleted or anonymized.
- VI. Your Rights
According to the applicable legislation on personal data protection (GDPR), you have the following rights:
(a) Right of access: To check whether and what type of personal data we hold about you and to obtain copies thereof. (b) Right to rectification: To demand the correction or completion of inaccurate or incomplete data about you. (c) Right to erasure (“right to be forgotten”): To request the deletion of your personal data, under the conditions defined by law. (d) Right to restriction of processing: To request the restriction of the processing of your data, under the conditions defined by law. (e) Right to object: To object to the processing of your data for reasons related to your particular situation, especially when the processing is based on our legitimate interest. (f) Right to data portability: To receive the data you have provided to us in a structured, commonly used, and machine-readable format, and to request its transfer to another controller, if technically feasible. (g) Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw it at any time, without affecting the lawfulness of processing based on consent before its withdrawal. (h) Right to lodge a complaint with the supervisory authority: To appeal to the Hellenic Data Protection Authority regarding issues concerning the processing of your personal data.
To exercise your rights (a) to (g), you can contact us:
- Via email at: info@ammos-hotel.com
- By mail at: 39 Agiou Dimitriou St. & Oikonomiou St., Agia Triada
We will respond to your request free of charge as soon as possible and in any case within one (1) month of receipt, unless the request is particularly complex or there is a large number of requests, in which case the deadline may be extended by two (2) additional months, provided we inform you accordingly.
For lodging a complaint (right h), the contact details of the Hellenic Data Protection Authority are:
- Address: Kifisias 1-3, P.C. 115 23, Athens, Greece
- Phone: 210 6475600
- Fax: 210 6475628
- E-mail: contact@dpa.gr
- Website: www.dpa.gr (My Rights → Lodge a complaint)
VII. Cookies
Our Website uses cookies to improve the Browse experience and analyze traffic. Cookies are small text files stored on your device. Some are essential for the operation of the Website, while others (e.g., analytics, advertising cookies) are used only if you give your consent. For more information about the cookies we use and how to manage them, please refer to the [Link to Cookie Policy] of the Website.
VIII. Changes to the Privacy Policy & Applicable Law
We reserve the right to amend this Privacy Policy from time to time. Please check the “Last Updated” date at the beginning of this Policy to see when it was last revised. Any revision will become effective as soon as the revised Policy is posted on the Website.
If we make material changes that affect your rights or the way we process your data, we will inform you appropriately (e.g., through a notice on the Website or via email, if we have your contact details).
This Privacy Policy is governed by Greek Law and the provisions of the General Data Protection Regulation (EU) 2016/679. For the resolution of any dispute that may arise regarding this policy, the courts of Athens are exclusively designated as competent.
