We make the security and protection of your data a priority. The following explanation will provide you with an overview of the protection and usage of your data. This applies to those processes where we operate as the data controller, deciding what happens with your data. Under no circumstances will your personal data be sold, leased or released in any other commercial manner. Please note that we cannot guarantee the availability of and are not responsible for the content of external websites.
“Agios Pavlos Hotel”, “we”, “us” and “our” refer to the company of Agios Pavlos Hotel, registered at the following address: Agios Pavlos, Saktouria 740 53, Greece.
“Website” refers to the address of www.agiospavloshotel.gr and its sub-pages.
How we collect and use your data
Information we collect when you visit our Website (“Usage Data”)
When you view our website, we collect and log certain events in our server access and error
logs. This usually includes a description of an interaction, such as a failed attempt to access a certain page, and is attributed to your IP address. This data is collected by the internal logging systems on our web server.
Additionally, when you visit our Website, we process information about your interactions with
our Website. The purpose of this data collection is to gain an understanding of our visitors and how they behave on our Website. This gives us useful insights, ranging from what content appears to be read most frequently, to which menu options are clicked. By collecting this information, we can continually work to improve our website content and optimise our user experience for our visitors. The legal basis for this processing is our legitimate interest to prevent malicious attacks on our servers and to understand how visitors interact with our website, to then offer the best content and user experience possible.
The data we collect includes:
Online identifiers, including IP address and cookie identifiers
Device type, such as desktop or smartphone
Geographic location, obtained from the IP address
Mouse events, such as movements and clicks on navigation links
Pages visited and time spent on each page
Events, tracking what we determine to be Key Performance Indicators (KPIs), such filling out our contact and booking request forms.
This data is collected by our internal logging systems, as well as Google Analytics. Internal access and error log records are deleted after 1 month. Analytics data stored by Google Analytics are deleted after 26 months.
Information we collect when you send a booking request (“Interest data”)
When you send a booking request through our Website, we process information to maintain a record of those visitors that became customers of our hotel. This information is collected when filling out our booking request form.
This data includes:
This information is stored in our internal Data Base. The legal basis for this is our legitimate interest to maintain records of who we maintain business relationships with.
We may also use your information for direct marketing purposes, such as informing you via
e-mail of about offers and services. We may contact you via e-mail or telephone as part of our service to further discuss your wishes and requirements.
If you are not a customer of Agios Pavlos Hotel and there has been no further interaction between our parties, then we will delete this interest data after 2 years. This time frame allows us to match any interactions or communication between our parties to your account record.
Information we collect when you contact us via our contact form, e-mail or telephone (“Enquiry data”)
When you contact us via a contact form on our website, via e-mail or via telephone, we will
process information you provide us for the purpose of providing services to you and contacting you regarding your enquiry, whether this be answering initial enquiries regarding our offers or providing any other support.
The legal basis for this processing is our legitimate interest to provide you with the service you expect after such an enquiry.
This enquiry data is managed within our CRM. If you are not a customer of Agios Pavlos Hotel and there has been no further interaction between our parties, then we will delete this Enquiry data after 2 years. This time frame allows us to trace any previous enquiries you have made, should your interest in our Services arise once again.
In addition to those purposes listed above, we may also process any data collected from you or provided by you when required to comply with a legal obligation to which we are subject, to
protect your vital interests or to protect the vital interests of another person. We may also
disclose your information where disclosure is necessary for the establishment, exercise or
defence of legal claims.
We may share your data with any current or future member group of our company, including
subsidiaries and holding companies insofar as necessary to for the purposes within this policy.
Services and providers that we use
In order to provide the best solutions and services possible, we need to rely on partners that can offer their specialised skills to assist with our business operations. The following are our
partners which help us with our operations, and which services they provide us with:
ADMIN, 4 K. Paren Siganou Str, 74100 Rethymno, Greece
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States of America
Website Analytics, Website Optimisation
This website uses Google Analytics, a web analytics tool offered by Google LLC. The data
collected about your usage of this website is attributed to a unique identification number stored in a cookie, known as a Client ID. On every website where Google Analytics collects data about visitors, a new, unique identifier is created. This allows for analysis of such things as the number of pages a visitor viewed, or whether a visitor returns to you website later. Your identity is not associated with this Client ID.
The [link https://support.google.com/analytics/answer/2763052]IP anonymisation[/link] feature of Google Analytics is active for this Website. Your IP address is visible to every website you visit, but this anonymisation feature results in your IP address being truncated before being stored on Google servers. Truncating your IP address allows us and Google to gain an insight as to where you are visiting from (usually city and country), but does not allow a more precise identification of your location.
Google is an internationally renowned service provider which operates from multiple data
centers around the world. The aim of these clustered data centers is to improve resilience and redundancy by removing dependencies on individual data centres. It could be that data
collected through Google Analytics is stored outside of the European Union. Google LLC
employ appropriate safeguards for protecting personal data in the form of the EU-US Privacy
Shield, ISO 27001 certification and ISO 27018 certification (Article 46 GDPR).
For a greater insight as to how Google uses your data, see their explanation on [link
https://policies.google.com/privacy/partners]how Google uses data when you use partners‘
sites[/link]. If you are interested in the steps Google take to safeguard your data, then you can
find further information in their [link
https://support.google.com/analytics/answer/6004245]security and privacy principles[/link].
We use the Google AdWords online advertising program, offered by Google Ireland Limited, to serve text and visual advertisements of our products and services. We utilise the conversion tracking feature of AdWords. If you click on a display advertisement of Google, cookies for conversion tracking will be set on your computer. These cookie do not serve to personally identify an individual and are automatically deleted after 30 days.
The information stored within the conversion tracking cookies serves to provide reporting
features to customers of Google AdWords. We receive information regarding the number of
Website visitors which clicked on a particular advertisement and resulted in a conversion on our Website. These conversions are KPIs from our perspective, such as signing up for a free trial account of our application. This conversion data allows us to analyse the effectiveness of our adverts and provide more appealing content.
Please refer to Google’s guide on [link https://support.google.com/adwords/answer/1722022]conversion tracking[/link] for further
We use the remarketing functionality of Google LLC on this website. This is to be considered an Advertising Feature of Google Analytics (See section § 4.1.). Remarketing allows us to show personalised, interest appropriate display advertisements to the visitors of our website if they subsequently visit another website within the Google Display Network or Google Search Network. If you visit our website, a cookie for the purpose of remarketing is set on your device.
These cookies do not serve to personally identify an individual and are automatically deleted
after 30 days. We receive anonymised data regarding website usage, which are used as a basis for the creation of interest focused display advertisements. Advertisements will be displayed if you visit another site within the Google Display Network or Google Search Network. These advertisements will have a high probability of displaying appropriate information or products relating to previously visited websites, such as ours.
You can opt-out of such Google Analytics Advertising Features by editing your [link
https://support.google.com/ads/answer/7029158]Ad Settings[/link] directly with Google.
We host videos relating to our products and services with the renowned media streaming
platform YouTube. We use the privacy-enhanced mode for these embedded videos.
This website uses the map service Google Maps, which allows the display of interactive maps and the use of the map feature directly on our website. The Google Maps service uses persistent cookies. When visiting the page on our website that uses Google Maps, Google will receive a notification that you have accessed the page. In addition, the information will be transmitted to Google. Which data will be transferred to Google you can read at https://www.google.com/intl/de/policies/privacy/. This takes place regardless of whether you are logged in to a Google user account. If you are logged in to Google, your data will be assigned to your user account. If you do not want the data to be assigned to your account, you will need to log out before accessing the map feature. Google stores your data as a user profile and utilises it for advertising, market research and/or to provide personalised services on their website. More specifically, such analysis is carried out (even for users who are not logged in) to provide targeted advertising and to provide other social network users with information about your activities on this website. You have the right to object to the creation of these user profiles. This right can be exercised directly with Google.
Our Website uses the user rating tool of TripAdvisor registered at the following address:
TripAdvisor LLC, 400 1st Avenue, Needham, MA 02494, USA.
When using the TripAdvisor widget on our website to leave your ratings, your data will be processed to the company mentioned above. Further information about how TripAdvisor is processing user data can be found at https://tripadvisor.mediaroom.com/AT-privacy-policy
What are cookies?
When you visit a website, small bits of data are stored in files on your computer. These are
cookies. Cookies usually contain a unique identification number which is stored on your
computer and used by your browser when you use a website.
Cookies have various important use cases, but you would probably consider the vast majority of data attributed to a cookie as insignificant, such as your screen resolution and operating
Cookies usually do not contain information which you would deem important or sensitive, such as contact information or credit card details. However, even though the unique identification number in a cookie can be up to 128 random letters and numbers, this is still an identification number which is unique to you until it expires. As a result, it’s important that we look after it and tell you what cookies we use.
Cookies that we use
Additional cookies may be set by service providers. Further information on the cookies set by
our service providers can be found on their respective websites:
Google Analytics: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage
Google AdWords, YouTube: https://policies.google.com/technologies/types
Google Remarketing: https://developers.google.com/analytics/devguides/collection/analyticsjs/display-features
Managing your cookie preferences
You may withdraw your consent to certain processing operations by restricting the usage of
will not be usable if you do not consent to the use of those cookies.
You can use our cookie manager tool to control the cookies which are set by TimeTac. This can be found in the footer of every page on our Website.
For cookies which are not directly set by TimeTac (third-party cookies), you can restrict cookies
via your browser settings. Guides for how to do this in the most common browsers can be found here:
Google Chrome: https://support.google.com/chrome/answer/95647
Mozilla Firefox: https://support.mozilla.org/kb/cookies-information-websites-store-on-your-computer
Microsoft Edge: https://privacy.microsoft.com/windows-10-microsoft-edge-and-privacy
You can prevent the tracking of website usage data (inclusive of IP address) via the cookies set by Google LLC as well as hindering the processing of this data by installing the following
browser plugin: https://tools.google.com/dlpage/gaoptout .
Please note that preventing the setting of cookies will severely reduce your browsing experience and the functionality of websites. Preventing the setting of cookies will not remove display advertising from your browsing experience, rather that you will see non-targeted display advertisements which will be more frequently repeated.
How you can access your data
You are legally entitled to know which personal data we process relating to you. This could
include any CRM records from trial accounts you created or support tickets you raised with us.
You can make a request for such data via e-mail to email@example.com
In such requests, please inform us of:
Your full name and contact e-mail address
A description of the data you are requesting
Any additional identifiers we can use to find your data
A copy of a current and valid photographic ID, such as a passport
From the date that all of the above information is received, we will endeavour to process your
request as soon as possible. Please note that such requests may take up to the statutory 30
day time limit for processing.
Your rights regarding your data
Where any processing operation is based on your consent, you have the right to withdraw your consent at any time.
If you believe that information we process about you is incorrect or incomplete, then you have
the right to request a rectification of this information. You may also execute your other rights,
such as the right to restrict processing, the right to erasure, the right to data portability and the right to object to processing.
You can submit such requests via e-mail to firstname.lastname@example.org
You have the right to lodge a complaint with a supervisory authority, should you feel that we
have processed your data incorrectly.
Your trust is important to us. We are happy to answer any questions you may have regarding
cover, then please feel free to get in contact with us.
Our up-to-date contact details can be found at:
Name: Dimitris Grigorakis
Effective date: 20th December 2018