Privacy Policy
This privacy policy statement defines how Orestias Kastorias Hotel (ΟΚΗ) uses and protects information collected during hotel’s operation either from the reservation systems or from this website.
We are committed to ensure that your private data are protected. We take all necessary operational and technical measures for the protection of your personal data given to us through the above-mentioned channels. We do safe and legal processing according to the General Data Protection Regulation EU 2016/679 as well as with the National Data Protection legislation.
DATA CONTROLLER
Our privacy policy is in compliance with the General Data Protection Regulation EU 2016/679 as well as with the National Data Protection legislation. “Hotel Orestias Kastorias & Co E.E”, managing company for OKH is responsible for the handling and compliance.
WHAT DO WE COLLECT?
The hotel receives and stores all information given when you directly register on the website or by phone or via e-mail. Upon check-in we may ask you to provide certain personal information including:
- Data related to your ID (Name and surname – nationality – date / place of birth-passport or ID number),
- Information/ Data related to your stay (duration of stay / information on consumption of goods etc)
- Financial information (as TIN or VAT, Fiscal Office, credit card data)
- Information / Data related to your preferences / desires (special desires for food, allergies, nutritional needs, health data, providing access to people with disabilities, which are submitted to us voluntarily due to your declaration and after your explicit consent, for your safe, comfortable stay and best service.
- Image Data (photos / video shootings)
- Information, recorded for ordering a product or a service during your stay in or outside of the hotel (e.g. transfer, participation at activities, consumptions, product purchases)
- Contact information (e. home or business address, telephone number, E/mail), which are submitted in the reservation form
WHAT DO WE DO WITH THE INFORMATION WE GATHER?
We gather and process your personal data for the following reasons:
- Room reservation system management (reservation of a room and provision of relevant services, supply of additional services, mediation / support for the use of means of transport, planning and organizing events, charging for services and consumptions and payment processing etc)
- In order to comply with the current Greek and European legislations.
- In order to serve our and third party legitimate business interests.
- For purposes of commercial communication promotion of our services, conduct of surveys on customer satisfaction in the form of e-mail/newsletter/sms/letter.
- In order to comply with a legal obligation.
RETENTION PERIOD OF PERSONAL DATA
The Hotel keeps your personal data in written or and in electronic form only for the absolutely necessary period required, in order to fulfill the legal obligations and legitimate purposes, for which they were collected. (for the fulfillment of our fiscal obligation or after its termination for the fulfillment of the statutory limitation period of any claims). If the data collection was based on your consent it may be deleted at any time upon the withdrawal of your consent.
HOW DO WE SHARE YOUR DATA
In order for us to perform our contractual and legal obligations your personal data may be provided to various service providers and suppliers (outsourcing services companies, card payment companies and travel agencies). Those service providers and suppliers are bound by Data Processing Agreements, and they are obliged to safeguard confidentiality and data protection according to the data protection regulation. Furthermore, under compliance with the legislative and regulatory framework we will transmit your personal data to Supervisory Authorities, Public Services and Organizations or in case of corporate reorganization we may share those with the individuals, natural or legal persons, involved by any means.
SECURITY-DATA PROTECTION RIGHTS
Your Personal Data is retained and processed solely for the purposes declared and to the extent necessary for its fulfillment. It will be adhered to for the time necessary to serve the above purposes.
According to the General Data Protection Regulation 679/2016 / EU, you have the following rights in terms of your personal data:
- The right to ask for information and request access to your Personal Data,
- The right to have your Personal Data corrected or erased,
- The right to limit the processing of your Personal Data,
- The right to object to the processing of your Personal Data including objection to automated decision-making and profiling
- The right to data portability
- The right to withdraw your consent (any withdrawal of consent shall not affect the lawfulness of processing based on consent before it was withdrawn by you).
- The right to file a complaint to the Personal Data Protection Authority.
We are committed to ensure that your information is secure. In order to prevent unauthorized access or disclosure we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.
INFORMATION ON YOUR RIGHTS
Hotel Orestias Kastorias ensures that according to the General Data Protection Regulation 679/2016 / EU, you have the following rights in terms of your personal data:
- The right to ask for information and request access to your Personal Data,
- The right to have your Personal Data corrected or erased,
- The right to data portability
- The right to limit the processing of your Personal Data
- Right to objectin the cases of Article 21 of the General Data Protection Regulation, including profiling.
- The right to file a complaint to the Personal Data Protection Authority.
In order to exercise your rights or for any question about the privacy policy, you may at any time contact our privacy officer by sending an e-mail at the following address: kostas@okhotel.gr or by calling at any time at the following telephone number: +30 2310 269815.
CHANGES TO THIS PRIVACY STATEMENT
The hotel reserves the right to modify this Privacy Statement and related business practices at any time. You should check this page from time to time to ensure that you are accordant with any changes.