Information about Personal Customer Data

Dear client,

Thank you for your trust.

Our company respects your privacy. Please find hereunder some useful information on how our company processes your personal data in compliance with the applicable law on personal data protection, including the European Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation):
Definitions:

“GDPR”: European Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).

“Data Controller”: The company under the name “Dragons Group Real Estate Management – Tourism – Commercial – Real Estate Private Company” and with the distinctive title “Dragons Group” (address: 82 Kiprion Iroon Ave. 16341, Ilioupoli, Athens), holder of VAT number 800864326, Tax Office of Ilioupoli, tel: +30.210.99.11.581 email: dragonsgroup.reservations@gmail.com (hereinafter “the Company” or “we”)

“Personal Data”: means any information collected and processed by Enterprise Greece in the context of its business activity, that relates to an identified or identifiable natural person (“Data Subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

“Data Subject”: you.

1. Purpose and legal basis of personal data processing
The Company processes the personal data that you submit for the provision of the services that you have requested. The legal basis of the processing is the performance of a contractual obligation (art. 6§1(b) GDPR).
In some cases, our Company may collect some information from travel agencies or other companies operating in the tourism industry. The categories of personal data collected by the Company in this case are the following: contact details (phone, email).

2. Recipients of your personal data

The Company may share personal data with third parties assisting in the provision of services to you. These third-parties acquire access to your personal data only in cases where the process of your data is absolutely necessary for the provision of the services that have been assigned to them by the Company.
In addition, we may disclose your personal data when it is necessary to satisfy any applicable law, regulation, legal process or governmental request.

3. Data transfers to third countries

The processing of personal data is carried out exclusively within the European Economic Area. Exceptionally, the Company may disclose some personal data to companies engaged in the tourism industry, which are located outside the European Economic Area (EEA); such disclosure shall be performed only when it is necessary for the provision of the service that you have selected.

4. How long we retain your personal data

We retain your personal data for as long as we need it in order to provide the services requested and in order to comply with the applicable law.

5. What are your rights as data subject

• The right to access, correct or update your personal data at any time.
• The right to object or restrict the use of your personal data, under the condition that personal data is not processed for purposes of legal compliance or contractual performance.
• You are entitled to ask the erasure of your personal data under the condition that personal data (a) are not necessary for the purposes mentioned hereabove, or (b) your personal data is not processed for purposes of legal compliance or contractual performance.
• You have the right to data portability, according to which you can ask to receive your personal data so that you can transfer them to another organization and without prejudice to the retention period that is in force for purposes of compliance with the applicable law.
• You have the right of recourse to the Hellenic Data Protection Authority (DPA). For more detailed information you can visit the website www.dpa.gr .