Privacy Notice for Personal Data Protection in the framework of the Forest Ambassador action
11.08.2023
Einführung
This notice applies to the protection of your personal data (hereinafter referred to as “Personal Data in the framework of the Forest Ambassador action in which the company IOANNIS MINETTOS SA (hereinafter referred to as “Company” or “we”) participates.
As a donator you are entitled to the protection of your Personal Data. The Company respects your privacy and your personal data and always complies with the Personal Data Protection Legislation. The hotel also undertakes to act transparently as to how to collect and use the data in the course of fulfilling its obligations.
Der Begriff „Gesetzgebung über den Schutz personenbezogener Daten“ (im Folgenden „Gesetzgebung“) bezeichnet alle griechischen oder europäischen Gesetze, Verordnungen, Richtlinien usw., die sich mit der Verarbeitung, dem Schutz und der Sicherheit personenbezogener Daten befassen.
Basic, but not exclusive, laws are the General Data Protection Regulation (GDPR), the e-Privacy Directive for the protection of privacy in electronic communications, and any other Opinions or Guidelines issued by the Hellenic Data Protection Authority or the European Data protection Board.
Es ist wichtig, dass Sie diese Richtlinie sorgfältig lesen und aufbewahren. Darin wird ausdrücklich erklärt, wie und warum wir Ihre personenbezogenen Daten erfassen, wie wir sie nutzen, wie lange wir sie aufbewahren, mit wem wir sie teilen, wie wir sie schützen und welche Möglichkeiten Sie haben. Auf diese Weise sind Sie sich immer der Art und Weise und der Gründe der Datenverwendung bewusst, sowie Ihrer Rechte gemäß der Gesetzgebung.
You can view this Privacy Notice in digital form at the following address.
https://www.lindos-imperial.gr/forest-ambassador-privacy-notice
Der Datenverantwortliche
The Company in accordance with the General Data Protection Regulation acts as “Data Controller”. This means that the Company is responsible for deciding on the ways and purposes for which it collects and uses (processes) your personal data.
Unsere Kontaktdaten sind:
Ioannis Minettos SA
Lindos Imperial Resort & Spa
Kiotari, Rhodes, 85109, Greece
Tel: +30 22440 29200
Fax: +30 22440 29209
Email: [email protected]
Grundsätze der Verarbeitung
Im Rahmen der Einhaltung unserer Datenschutzbestimmungen unternehmen wir alle Anstrengungen und insbesondere:
- We process your personal data in a fair, legal, fair, clear, objective and transparent manner.
- We collect your data only for specified, explicit and legitimate purposes that we deem appropriate and have been adequately explained to you. We also assure you that they will not be used in any other way except for those purposes.
- We collect and maintain the least possible data, which is appropriate, relevant and absolutely necessary for processing purposes.
- We confirm that the data is correct and kept up-to-date and accurate.
- We will retain your data only for as long as we need it to fulfill any processing goal.
- We will make sure that we store them with the appropriate security.
- We process it in a way that ensures that it will not be used unlawfully or contrary to your will.
Rechtsgrundlage für die Verarbeitung personenbezogener Daten
Wir verarbeiten Ihre personenbezogenen Daten anhand mindestens einer der nachstehend insbesondere genannten Rechtsgrundlagen:
- Processing of your Personal Data is necessary for the execution of the contract between us.
- Processing is based on your consent, given for one or more specific purposes.
Personal Data we Collect and Process
Personenbezogene Daten sind alle Informationen, die sich auf Sie als identifizierbare Person beziehen. Die personenbezogenen Daten, die wir erheben und verarbeiten, sind nachstehend beschrieben:
- Identity information (name, surname)
- Contact details (email address)
When you use our website, we also collect information automatically, some of which may be personal data. These include items like language settings, IP address, location, device settings, device operating system, usage time, redirect URL, etc. We can also collect data through cookies. Cookies are small files that store a website on a visitor’s computer and to which the Site has access to analyze the user’s behavior. In detail, both the types of Cookies that exist and the type of processing that is made are described in a separate policy (Cookie Policy)
Wir verwenden Google-Analytics auch, um die Nutzung unserer Website zu analysieren. Google-Analytics generiert Statistiken und andere Informationen zur Nutzung der Website, die zur Erstellung von Berichten verwendet werden. Die Arten von Daten, die über Google Analytics verarbeitet werden, werden in einer separaten Richtlinie beschrieben (Cookie-Richtlinie).
Wir verarbeiten keine Daten von Minderjährigen ohne die Zustimmung der Eltern oder Erziehungsberechtigten.
Verarbeitung von besonderen Kategorien personenbezogener Daten
The General Privacy Policy defines specific categories of data that need to be processed according to stricter procedures such as health data. We are not processing special categories of personal data in the framework of Forrest Ambassador action.
How we collect and source your personal data
The collection of your personal data is done exclusively from yourself
Warum erheben und verarbeiten wir personenbezogene Daten
Wir verarbeiten und nutzen Ihre personenbezogenen Daten für einen oder mehrere der folgenden Zwecke:
- For contacting you so that we can you the relevant certificate when the tree corresponding to the donation is planted
- For mentioning your name on the electronic map of planted trees (only with your consent)
Ihre personenbezogenen Daten werden ausschließlich für die Zwecke verwendet, für die sie erhoben wurden, oder für andere Zwecke, die mit den ursprünglichen Zwecken vereinbar sind. Wenn wir Ihre personenbezogenen Daten für einen anderen Zweck verwenden müssen, werden Sie darüber und über die Rechtsgrundlage informiert, auf der die Verarbeitung beruht oder Ihre Zustimmung erfordert wird.
In any case, your personal data is processed in accordance with the principles hereof and the rules of the Data Protection Legislation.
Automatisierte Entscheidungsfindung einschließlich Profilerstellung
Wir treffen keine Entscheidungen, die erhebliche Auswirkungen auf Sie haben können, einschließlich Profilerstellung, auf automatisierte Weise (d.h. Entscheidungsfindung nur unter Verwendung eines nicht-menschlichen computergestützten Systems).
Wann und wie geben wir personenbezogene Daten an Dritte weiter
We will disclose your name to Common Nature – Social Benefit Cooperation who organizes the Forerst Ambassador Action, for delivering your tree planting certificate (your name is mentioned on the certificate)
Internationale Übermittlung personenbezogener Daten in Drittländer
Sometimes your personal information may be transferred to third countries outside the EU for the purposes described in this notice. The transfer of personal data to a third country or international organization may take place if the European Commission has determined that these third countries offer an adequate level of protection or appropriate safeguards (eg standard contractual clauses approved by the European Commission); and provided that there are enforceable rights and effective remedies for you.
How long do we keep your data
We will maintain your Personal Data till your tree is planted and you receive your certificate.
Data will be destroyed in a secure way when it is no longer necessary.
Your rights on the protection of personal data
Under certain conditions set forth in the Privacy Policy, you have the following rights regarding your personal data:
- Right to Transparency. You have the right to know who is processing your data, how it processes, what are they and for what purpose.
- Right of access. You have the right to request free access to your personal data.
- Right to rectification. You have the right to request the correction of inaccurate personal data and fill in incomplete information.
- Right of remission (“right to delete”). You have the right to request the deletion of your personal data under certain conditions, such as when the data are no longer necessary in relation to the purposes for which they were collected, you have withdrawn your consent and there is no other legal basis for processing, the data have been subject to unlawful processing, etc. Deletion cannot be applied when processing is necessary to meet a hotel’s legal obligation, to perform a duty performed to the public interest, for the exercise of public authority assigned to the hotel on the grounds of public interest in the field of public health, for establishing, exercising or supporting legal claims etc.
- Right to limit processing. You have the right to request the limitation of the processing of your personal data when their accuracy is questioned, the processing is illegal, the data is no longer needed by the controller or you have objections to the automated processing.
- Right to data portability. You have the right to request the transfer of your data to another controller where technically feasible.
- Right of objection. You have the right to oppose to the processing of your personal data, provided that the public interest is not prejudiced. The right to oppose to certain forms of processing of your personal information, so not to be subject to the legal consequences of automated processing or formatting.
If you have given your consent to the use of some of your data, you also have the unlimited right to withdraw it at any time. Recalling your consent means that we will stop processing the data you have previously given your consent. There will be no consequences for the withdrawal of your consent.
You can exercise your rights by contacting the Company or by sending an email to [email protected]. If you exercise any of your rights in writing on request, we will take every possible action to process your claim within thirty (30) days of receipt. If you do not receive a response within 30 days or are not satisfied with our response, you have the right to complain to the Data Protection Authority.
Sie haben das Recht, bei der Datenschutzbehörde, die die Datenschutzgesetze durchsetzt, Beschwerde einzulegen, wenn Sie Bedenken hinsichtlich der Verarbeitung Ihrer personenbezogenen Daten durch das Hotel haben oder mit unserer Antwort auf Ihre Beschwerde oder Anfrage unzufrieden sind.
Griechische Datenschutzbehörde
1-3 Kifissias-Str. GR 115 23, Athen
Tel: + 30-210 6475600
Fax: + 30-210 6475628
email: [email protected]
Data Protection Officer
The Company has appointed a Data Protection Officer who can be contacted at [email protected]
Protection of Your personal data
Data is stored in a variety of resources, including the physical file, the Website, and other IT systems (including email). The data are stored in the whole and the format they are submitted to, without any interference with their content.
We have established a set of technical and organizational security measures to prevent the use or access of your personal information with an unauthorized or illegal way, accidental loss or damage to their integrity, their change or disclosure.
Darüber hinaus beschränken wir den Zugriff auf Ihre persönlichen Daten nur auf diejenigen, die diese aus geschäftlichen Gründen kennen müssen. Diese verarbeiten Ihre persönlichen Daten nur gemäß unseren Anweisungen und unterliegen einer Vertraulichkeitsverpflichtung. Ihre persönlichen Daten werden nur dann von einem dritten Auftragsverarbeiter verarbeitet, wenn dieser sich verpflichtet, die spezifischen technischen und organisatorischen Datensicherheitsmaßnahmen einzuhalten.
Im Falle einer Verletzung der Datensicherheit benachrichtigen wir Sie und alle zuständigen Aufsichtsbehörden, sofern wir gesetzlich dazu verpflichtet sind.
Amendments to this notice
The Company reserves the right to modify this Privacy Notice and its associated practices at any time. Such changes, modifications, additions or deletions will replace previous disclosures and will enter into force immediately upon publication.
Updates will be posted on the Company’s website at the following address and will be marked with a publication date so you always know when the policy was last updated.
https://www.lindos-imperial.gr/forest-ambassador-privacy-notice