- Introduction
SPITI.PRO PRIVATE COMPANY (hereinafter referred to as “SPITI.PRO” or “Company”), a
company formed under the laws of Greek with registered office at 13 Kosma Mpalanou street,
Athens, PC 11 636, tel: 211 7358550, email: [email protected] with VAT No. 801645397 is the Data
Controller.
The company SPITI.PRO is a Greek company, which provides services of IT applications,
hospitality and infrastructure of technologies and information, provides advertising spaces while
also operating as a travel agency, office of organized trips and provides other activities of
reservation services and related activities.
As part of the above activities, the company operates the website https://traveltours.gr (“website”
or “site”).
It is our priority to respect your privacy regarding any personal data we may collect from you
across our website, that may be used on its own or in combination with other data to identify a
single person.
The following outlines our data policies in compliance with all applicable laws and regulations
(2016/679 Ε.Ε. GDPR)].
If you do not agree with the processing of your personal data, please do not provide us with
your personal data via the website.
When we refer to “you” or “your,” we mean the person accessing the site. If the person
accessing the site acts on behalf of another person, including a business or other entity, “you” or
“your” also means that other person/business/entity. If you accept these terms on behalf of a
third party, you confirm that the third party you represent has read and understood the terms of
this Privacy Policy and that you are authorized to accept them on their behalf.
Our services are not directed to persons under 18. We do not knowingly collect personal
information from children under 18. If you are a parent or guardian of such a child and become
aware that your child has provided personal information to us, please contact us and we will
take reasonable steps immediately to remove any such information.
We may update our Privacy Policy to reflect current acceptable practices, as laws change,
which will be in effect immediately after being posted on this page. We reserve the right to
update or change our Privacy Policy at any time. We will take reasonable measures to let you
know about said updates or changes. We will notify you through your contact details or by
placing a prominent notice on our website. Additionally, we display an effective date at the
bottom of this Privacy Policy, so that it will be easier for you to know when there has been a
change. Your continued use of this site after any changes to this Privacy Policy will be regarded
as acceptance of our practices around privacy and personal data. Please check this Privacy
Policy periodically for changes.
- Personal data we collect
We collect information by fair and lawful means, with your knowledge and consent. We also let
you know why we are collecting it and how it will be used. You are free to refuse our request for
this data, with the understanding that we may be unable to provide you with some of your
desired services without it. The personal data that we collect from you is the following:
• Name
• Email address
• Company
• Role/capacity
• Phone/mobile number
• Home/Mailing address
We use “cookies” to collect information about you and your activity across our site. A cookie is a
small piece of data that our website stores on your browser and accesses each time you visit,
so we can understand how visitors use our site. This helps us offer content, better site
experiences and tools based on preferences you have specified (e.g. language) or your
browsing habits. Facilitate access to and use of the website. Improve the functionality of the
website. Measure how you interact with the website content. Achieve system administration.
Report information for research purposes. You can instruct your browser to refuse all cookies or
to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be
able to use some portions of our site. Cookies and information captured through this site are
stored for a certain retention period, however you can eliminate these cookies any time before
the expiration date.
We collect information from you when you subscribe to our newsletter, fill out a form on our
website, enter information on our site and surf the website. - Legal grounds and main purposes of processing
We rely on the following legal grounds to process your personal data, namely:
• Performance of a contract: We collect and use personal data to enter into a contract or to
perform a contract that you have with us.
• Consent: We obtain your consent prior to collecting and using personal data.
• Legitimate interests: Our legitimate interests to improve our services.
We use personal data to understand who our visitors are, detect errors, how they use our
services and how we may improve their experience of our website in the future. It is used for
organizational, administrative and internal reasons.
We use your personal data for structuring your profile. As you use our services, we will use,
collect, store, record and structure this data to improve and personalize the experience and
features of our website. Also, as part of our services, we offer you connection with third parties
and we will only do so and provide the personal data required for this communication with your
consent.
We use your personal details to contact you regarding updates about our website and services,
along with promotional content that we believe may be of interest to you. If you wish to opt out
of receiving promotional content, you can follow the “unsubscribe” instructions provided
alongside any promotional correspondence from us and at your settings page.
We may also transfer your personal data outside the E.U. to third countries. If we do so, we
reasonably ensure that your rights and freedoms as a data subject are protected. - Principles of personal data processing
We process your personal data based on the following principles:
• Fairness and lawfulness: we process your personal data only after obtaining your
consent for the processing and for a determined specific purpose;
• Transparency: we process your personal data in a transparent manner and only
with your knowledge;
• Purpose limitation: your personal data is processed within the purposes outlined
above;
• Data minimization: we only process your personal data to the extent that it is
actually needed to achieve the processing purposes;
• Accuracy: we ensure that your personal data is accurate and kept up-to-date;
• Storage limitation: your personal data will be processed for as long as necessary
to fulfill the purposes for which it was collected and for legal or business requirements, if
no other contractual obligations with you allow a longer period of processing;
• Integrity and confidentiality: we secure your personal data with suitable
organizational and technical measures.
- Security of your personal data
We use a variety of security measures to keep your personal data protected from unauthorized
access, disclosure, loss, theft, misuse or alteration. In any case, keep in mind that no method of
transmission over the Internet is 100% secure. While we strive to implement effective security
measures to protect your personal data, we cannot guarantee its absolute security. - Access to your personal data
Only a limited number of our employees, contractors, internet providers, website hosting
partners, network administrators and other parties, who assist us in operating our website,
conducting our business or serving our users, have access to your data, having agreed to keep
this information confidential and having comparable levels of data security.
We use third-party services for:
• Analytics tracking with Google Analytics. This service is provided by Google Inc. |
Privacy Policy
• Email address management and message sending. This service is provided by
Mailchimp (Intuit Inc.) | Privacy Policy
• Hosting our services. We host our services in a secure server environment that uses
firewalls, intrusion detection systems, and other advanced technology designed to
prevent interference or access from outside intruders.
These services may access our data solely for the purpose of performing specific tasks on our
behalf. We do not give them permission to disclose or use any of our data for any other
purpose.
We may allow limited access to our data by external consultants for the purpose of analysis and
service improvement. This access is only permitted for as long as necessary to perform a
specific function.
We may also release data, in order to comply with the law or any legal process or defend
against legal claims or protect ours or others’ legal rights, property or safety.
- Third party provided content/links
This Privacy Policy only covers our own collecting and handling of data. We only work with
partners, affiliates and third-party providers whose privacy policies align with ours, however we
are not to be held liable for their privacy practices.
Our website may link to external sites that are not operated by us. Please be aware that we
have no control over the content and policies of those sites, and we are not to be held liable for
their privacy practices. - Your rights
Right of access: The right to be informed about your personal data collected and how it is
being processed. We will make such information available to you in a form that is generally
understandable, including explaining any abbreviations or codes and using an alternative
format, if required.
Opt-Out & Unsubscribe: We respect your privacy and give you an opportunity to opt-out of
receiving any communication, content or services from us.
Right to be forgotten: The right to request that your personal data is erased.
Right of rectification: The right to correct data that we hold about you that is inaccurate or
incomplete.
Right to restriction of processing: You are entitled to restrict our processing your data.
Right to object: The right to object to certain types of processing.
Right of portability: You have the right to receive your personal data, which you have provided
to us, in a structured, commonly used and machine-readable format and have the right to
transmit this data to another controller without hindrance from us.
Right to lodge a complaint with the supervisory authority: You have the right to lodge a
complaint with the Greek Data Protection Authority (1-3, Kifisias str., P.C. 115 23, Athens,
www.dpa.gr ).
You may send your requests related to the above on [email protected] . Please be as specific
as possible in your request, so that we can meet the applicable time lines.
We will make every reasonable effort to respond to each of your written requests not later than
30 days after receipt of such requests. If we cannot meet your requests for any reason within
this time limit, we will let you know in writing.
We may require that you provide us with sufficient information to identify yourself, before we
provide information about the existence and use of your personal data in our possession.
Feel free to contact us if you have any concerns or questions about how we handle your
personal data.
