(EN) Our approach to the protection of your personal data

We treat your personal data protection with responsibility and we believe that it should be collected and processed only when absolutely necessary. Therefore, all of our ASTRA SUITES’s systems and the website are designed with the appropriate operational and internal systems and comply to the applicable European and Greek legislation regarding data protection {mainly General Data Protection Regulation EU 679/2016 (hereinafter «GDPR») and Law 4624/2019}.

The present privacy policy has been adopted by the ASTRA SUITES «GEORGE KARAYIANNIS & SIA O.E.», having its legal seat in Santorini, Imerovigli, Thira, tel. (0030)2286023641, e-mail: info@astrasuites.com (hereinafter «ASTRA SUITES»), which is the Controller of the personal data that you provide us with and which shall to provide you with all the necessary information for their processing, in accordance with articles 12, 13 and 14 of the GDPR.

1. What is considered as Personal Data?

Personal Data is any information that relates to you, or may be attributed to you and allows us to identify you. Such data is, for example, your name, surname, father’s name, address, telephone number, e-mail etc. Additionally, personal data also includes some technical data relating to you, such as your IP address or the websites from which you entered our site, etc. Moreover, as special categories of personal data (sensitive data) are namely treated data that related to your health condition, your food allergies etc.

2. Which personal data are being collected by ASTRA SUITES and for which purposes they are being processed?

a. The personal data we collect include only necessary information we need for specific purposes, as described below. We may mainly process the following types of personal data related to you and/or your family members:

• contact detail and personal information (such as name, address, telephone number, e-mail, date and place of birth, nationality),
• billing and tax details (such as credit/debit card details, including card type, card number, security number and expiry date, VAT number and Tax Office),
• personal identification/ passport details, entry visa details, travel authorizations;
• preferences and interests (such as type of bed, sports, cultural interests),
• communications you exchange with us or direct to us via letters, e-mails and calls, as well as comments submitted during or after your stay,
• travel history, when you have previously used our services.

b. During the course of our business, we may collect special categories of personal data, such as medical conditions for passengers who have special medical requirements and/or dietary requirements. We shall process such data only if you provide us with your explicit consent or based on a legal obligation (e.g. mainly regarding our employees), and always in accordance with the relevant provisions of the applicable legislation.

c. Moreover, for security reasons and in order to protect our visitors, employees and premises, we have installed security cameras systems (CCTV) in commonly used areas of our hotel. In any case, we ensure that any recording is not directed to any of our employee’s working space and we only collect image data and not sound data.

d. The data we collect on persons under the age of 16 are restricted to name, surname, nationality, and date of birth and can only be provided by an adult or guardian. Should any information of this type be sent to us in any other way, you can communicate with us to delete them.

e. We shall only process your information when:

• you have given us your consent to such processing (which you may withdraw at any time, as detailed below);
• the processing is necessary to provide our contractual services to you);
• the processing is necessary for compliance with our legal obligations (e.g. for tax reasons); and/or
• the processing is necessary for ASTRA SUITES’s legitimate interests (e.g. safe internet connection) or those of any third party recipients/partner that may lawfully receive your personal information (e.g. lawyers).

3. For which purposes do we process your personal data?

We may process your personal data mainly in the following cases:

• to provide you the services you request from us (to arrange your travel details and preferences such as specific room or services)
• to archive your data at our archiving system/database, for the proper execution of our services to you
• to execute the payment of our services, according to your explicit authorization for the execution of our contract or in order to confirm the success or failure of your online payment
• for internal accounting and tax reasons
• for developing and improving our services
• to comply with any applicable customs/immigration legal requirements

More specifically:

3.1. Accommodation and other services you request

Following your request for a reservation, we shall collect and process your and your companion(s) personal data in order to provide you the accommodation services that you require from us and book your room, facilitate check-in and payment processes, help you book and make use of the services that our hotel provides (such as room service, wi-fi, restaurant, massage etc), as well as process any other kind of request or complaint.

3.2. Payment Information – Payment by credit, debit or prepaid card

a. When booking your accommodation or establishing a supplier relationship via us, we require certain financial information (like your bank account or credit card information) in order to process payments and comply to the applicable legal provisions. If you are either a visitor or a supplier, we may require additional information such as your ID/passport or VAT number (where permitted by applicable law) and other proof of identification, in order to provide the payment services to you and comply with applicable legal provisions. Moreover, if you are a visitor, we may retain your financial information to assist you with booking related experiences and activities during your stay. We shall only process such data according to your explicit consent and based on your written authorization.

b. Moreover, you may be asked to or choose to pay online for our services by credit, debit or prepaid card. In this case, you will be automatically transferred to a safe banking transaction environment. There, for the purpose of your payment, you will have to provide your card type and number, expiration date and CCV number, by filling all the relevant blanks on the secure form. Card transactions are protected by the most effective online protection systems, which guarantee a safe transaction environment to the majority of the world’s largest businesses. ASTRA SUITES does not obtain or retain the card’s details, which you may use online, to which we do not have access, except for the confirmation of the success or failure of the transactions, for obvious purposes related to the provision of our services.

3.3. Advertising and Marketing Related Purposes

In case you have explicitly requested and/ or consented (opt-in) to receiving such actions from us, we may use your personal details (e-mail) in order to send you information on offers relating to our services that may interest you, as well as greeting and festive messages.

3.4. Website Visitors – IP Address – Cookies

a. Website Visitors – general information: ASTRA SUITES may collect information about visitors of our website, where this is voluntarily provided to meet a request from those individuals (for example when you fill the contact form and request any information on our services), or where someone wants to apply for a vacant position with the ASTRA SUITES. Through the use of cookie-based technologies, ASTRA SUITES may collect various data linked to virtual identities allocated to visitors when they access our website (IP address). This data is used for various purposes, including site analytics and first party marketing.

b. IP addresses: When you access our website or open any electronic communications from us, our servers may record data regarding your device and the network you are using to communicate with us, including your IP address. An IP address is a series of numbers which identify your computer, and which are generally assigned when you access the internet.

We may use IP addresses for system administration, investigation of security issues and compiling anonymized data regarding usage of our website.

c. Cookies: Cookies are data files that are placed by a website operator on the hard drive of a visitor to their site. We may use cookies to ensure that our website functions properly, to remember repeat visitors; to know your experience navigation, to collect anonymous statistical information, such as which sections you have visited, and how long you have been in our environment. Your online relationship with ASTRA SUITES may be managed by using settings available on most internet browsers. For example, most browsers allow a visitor to choose which cookies can be placed on his/her computer or to delete or disable cookies. Please note that disabling cookies may prevent a visitor from using certain features on our website.

d. Moreover, we may use third-party web analytics services on our website, such as Google Analytics. The analytics providers that administer these services use technologies such as cookies to help us monitor and understand more about how our website is used and accessed, which in turn lets us optimize the user experience and build a website that suits the needs of our users.