Privacy Policy

Who we are and how to contact us

The seacreek.gr website (hereafter referred to as the “Sea&Creek”) was created and is operated by Sofia Mih. Tzamala (hereafter referred to as “ADMINISTRATOR”), which is based in Athens, 57 Nikolaou Gyzi Str., P.C. 11474, VAT no. 045479073– Athens IΓ Tax Office, and has an operational base in Kato Katelios, Kefalonia, P.C. 28086, e-mail info@seacreek.gr, telephone +302106411450. The Administrator is designated as the Processing Officer of data collected through its website. In cases where you are redirected to third-party websites for specific services and capabilities (transactions, social media), you are advised you to review the Terms of Use and Privacy Policy of these third-party websites that will process your personal data independently.

Overview

Protecting the personal data of anyone using this website is of great importance to the Administrator. We have taken all necessary steps to protect your personal data and to process it only to the extent necessary for servicing you. This Privacy and Data Protection Policy fully complies with the existing national and European legislation and in particular with European Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation, hereafter “GDPR”).

The Privacy Policy and the Terms of Use of the website describe the method by which we collect and process personal data, which is absolutely necessary for your browsing, as well as the way we ensure a high level of protection for you. The following passages inform you of all your rights regarding the collection and processing of your personal data and the ways you can make use of these rights.

The information and data you are voluntarily sharing with us is used by the Administrator for your prompt and effective communication with us, the provision of answers to your queries, your requests for suites reservation and the acceptance your deposits should you choose to stay in us. The data we collect through the website, with your consent, are designated to measure the website’s traffic and make it easier to use.

Gathering and Processing your Data

Our site is designed so that users can visit it without having to reveal their identity unless they wish to do so. We ask of our users to provide us with their personal information especially if they want to make a request for reservation; and/or send queries and requests through the website’s email or the available electronic communication form.

The kind of data we collect is the following and relate to the also mentioned processing purposes: (a) data provided by the user during a request for reservation process; (b) data provided by the user through the electronic communication form or our e-mail address; (c) data that the user provides in order to make an advance deposit.

Data provided to facilitate payments

When filling out any form on our website, you will be asked for your full name and e-mail address. If you wish to make a request for reservation, we will also store you’re your name, dates and number of guests, and contact info (email, telephone number), in order to communicate with you and to check availability. If you wish to make a reservation, we will store the advance deposit amount that you paid and the invoices that Alpha Bank and PayPal, containing only dates, amounts and your name, for transaction identification, security purposes and to facilitate our compliance with the tax regulation.

In the case of an advance deposit, after the availability and price of the suites has been confirmed by us, you will have the option to choose who you wish to pay, a/ through Alpha Bank, which is based in Athens, 40 Stadiou Str., P.C. 10252, with Alpha Bank e-Commerce Secure environment, b/ through «PayPal (Europe) S.à.r.l. et Cie, S.C.A.», which is based in Luxembourg, 22-24 bld Royal, L-2449,  with an invoice that we send you, by using your email address.

In case you chose to pay either with Alpha Bank E-Commerce or PayPal platform, PayPal and Alpha Bank will ask you to provide further information of your credit or debit cards (card’s owner name and surname, as shown in the card, card’s number, ccv and expiration date) and will separately ask for your consent for the use of its services. We advise you to carefully read PayPal’s and Alpha Bank Terms of Use and Privacy Policy before giving your consent and proceeding with any transaction. The Administrator shall bear no liability for any processing of your data after being redirected to the PayPal and Alpha Bank E-Commerce website. If you choose to make an advance payment by depositing the amount you wish in our bank account, we will use the information you provide us with in order to confirm your deposit.

We make use of the data you provide to us during the electronic submission of the form in order to: (1) accept the amount of your donation; (2) confirm and identify the users whenever needed; (3) inform you of our activities if you wish to be informed and if you have specifically given us your consent; (4) answer the queries and requests you submit to us.

Providing us with your personal data means that you consent to such data being used by the Administrator solely for the reasons outlined above. You may withdraw your consent, when consent constitutes the basis of the process, at any time, by e-mail directly to info@seacreek.gr; or by contacting us at +302106411450.

In which cases we have a lawful reason to process your personal data

Based on the requirements of GDPR, we commit to processing your personal data only if there is a corresponding lawful reason, refraining from any further unnecessary or unlawful processing. In particular, we process your personal data only in the following cases: (a) when you have given us your free, specific, explicit, fully informed and active consent for each specific processing purposes; (b) when it is required to process your personal data under a particular contract. Indicatively, if you choose to make an online reservation request, we will need to keep and use your personal data to contact you regarding prices and availability, and to facilitate the payment of the advance deposit through “PayPal” or “Alpha Bank E-Commerce” and to notify you for finalization of the reservation; (c) where there is a corresponding legal obligation or reason of public interest (for example, in order to comply with tax legislation); (d) when it is in the Administrator’s legitimate interest, such as in order to prevent fraud, to ensure the security of the network and the data of the technology we are using etc.

How long we keep your data for

The data you have provided shall be kept by the Administrator for the time necessary for the completion of your reservation; for the duration of our communication following your queries and requests; or until you withdraw your consent. Your personal data may be kept after completion of your reservation payment or ending of our communication, provided that there is a corresponding legal obligation (for example, compliance with tax legislation) or an important lawful interest.

Where we send your data

Please be advised that for the full protection of your personal data, we have ensured that those who work for our purposes, the maintenance persons and technicians of our website, will provide you with the security level mentioned in the Policy hereof.

Furthermore, we send your personal data to third parties who have been entrusted with processing of personal data on behalf of the Administrator. In particular, we send only data that is absolutely necessary to external partners who are assigned with sending information material or managing our accounts in social media on our behalf. In all the above-mentioned cases, the Administrator shall be liable for the processing of your personal data and shall determine the terms of data processing by third parties based on specifically laid out conditions and explicit confidentiality clauses, so that the other data processors may provide you with the same protection level as the Policy hereof.

At the exception of the above, we shall not share your personal data with any other third party without your prior consent unless required by the law (as in the case of a court order). In any case, you may at any time exercise your rights provided by the law, which are described in detail below.

Minors

Under the applicable law, you must be at least 16 years of age to use our website. In case you are under 16, you should browse the website with your parents or upon their consent.

Cookies

On our website we use small identification files, called cookies, which allow us to continuously improve and update your navigation on our website and the information you can get through it.

a) What are cookies and which kind we are using

Cookies are bits of information, which in the form of very small texts, usually consisting of letters and numbers, are stored in the browser you are using (Chrome, Firefox, etc.). These help make our website more efficient. Cookies do not in any way cause damage to users’ computers or to files stored on them. Information stored in cookies is used for identification purposes.

In the Administrator website we use the following cookies: (1) cookies that allow you to perform basic functions of the site (session and permanent cookies); (2) cookies that “memorize” your preferences while browsing our site (preferences cookies); (3) cookies analytics, which help us collect statistics on the functionality and navigation services of our website.

Duration

Τα «παροδικά» cookies αποθηκεύονται στον υπολογιστή ή στην ηλεκτρονική συσκευή κατά τη διάρκεια επίσκεψής σας στο διαδικτυακό μας τόπο και διαγράφονται με την έξοδό σας από αυτόν. Τα «επίμονα» cookies παραμένουν στον υπολογιστή ή στην ηλεκτρονική σας συσκευή για μεγαλύτερο χρονικό διάστημα μέχρι να διαγραφούν από εσάς.

name

info

duration

Third-party

__utmb,utmc

It records the time of stay of visitors to each web site of the site. It is used to measure the effectiveness of each webpage as well as to improve/upgrade its structure and content and to adapt it to the needs of visitors.

non-persistent

Google Analytics

__utma

It detects visitors who visit the site for the first time. It is used to measure the increase in website traffic.

Persistent

Google Analytics

__utmz

It records the origin / manner of visitors to the site. It is used to measure the effectiveness of website promotion on third-party sites or on search engines.

Persistent

Google Analytics

___utmx

It records the visitor preferences of the site (which particular websites are visited most often as well as which particular theme/content of the websites). It is used to measure the effectiveness of the website, to improve/upgrade its structure and content and to adapt it to the needs of visitors.

Persistent

Google Analytics

___utmv

It records the country of origin of visitors to the site. It is used to measure the effectiveness and impact of the site.

Persistent

Google Analytics

 

b) Exclude yourselves from cookies

You may set your browser (Chrome, Firefox, etc.) to notify you each time a cookie is about to be downloaded, so that you may decide to download or discard it. In this case, you may not be able to make the most of our website. We choose to use cookies because they allow us to avoid technical problems on our site; to recognize our frequent users and their usual choices, as well as to ensure their unobstructed access to the content they want to visit. To clear cookies and disable their use, select the browser you are using and follow the following steps:

Chrome – https://support.google.com/chrome/answer/95647?hl=el

Safari – https://support.apple.com/kb/ph21411?locale=en_US

Firefox – https://support.mozilla.org/el/kb/pws-energopoiw-th-leitoyrgia-do-not-track

Edge – https://privacy.microsoft.com/en-us/windows-10-microsoft-edge-and-privacy

If you are using another browser, consult the relevant information, or find more detailed guidance at youronlinechoices.com explaining how to check and delete cookies in most browsers.

Plug-in in social media and third-party service providers

The Administrator website uses Google Analytics third party cookie. Your personal information will not be automatically sent to Google Analytics by visiting our website; it will be sent to Google Analytics only if you choose so. By clicking on the third-party cookies box at the bottom of the website, you activate the corresponding plug-in and your data is sent and stored to Google Analytics. If you decide to do so, we cannot control the data collected by Google Analytics, the time period for which data is stored and the kind of processing. Since the third party uses cookies, you may limit the processing of data collected from our website by deleting and disabling cookies from your browser before you visit the provider’s website.

Even though the collection and processing of your personal data by third-party providers does not depend on whether you already have an account on that platform, if you are also logged in there, the information will be directly linked to your profile. The third-party provider may store the information they collect as a usage profile and then use it for advertising purposes. If you do not wish to link your profile with the third-party provider, we advise you to sign out before you click on the plug-in. For more information, please refer to the third-party Terms of Use, Cookies and Privacy Policy Statement. You may oppose the creation of a user profile at any time, by contacting the third-party provider and choosing the appropriate privacy and data protection settings available to you.

Data Protection

The Administrator is commits to keeping the user data collected on its website safe. We have adopted procedures that safeguard the personal data you provide us with electronically or by any other means. These procedures protect your data from any disclosure, unauthorized access, modification, or loss. They also help identify you and safely navigate and use the capabilities of the website.

In the event that, despite the highest level of protection we provide to you, unauthorized persons access your personal data by violating the security measures we have taken, we shall act immediately in order to stop the violation and comply with the GDPR procedure of informing the competent authorities and the website’s users.

Your rights regarding your data

At any time, you may exercise one of the following rights under GDPR: (a) the right to access the information you have provided us with and the right to obtain a copy thereof in order to ascertain the lawfulness of the processing; (b) the right to modify your personal data; (c) the right to delete your personal data or to withdraw your consent, unless you are unable to do so due to a contradicting legal obligation; (d) the right to restrict the processing; (e) the right to object in case you disagree with the purposes of the processing; (f) the right to transfer your personal data and to transfer it to other data processors if this is technically possible.

To exercise any of the above rights, please e-mail directly to info@seacreek.gr; or contact us at +302106411450; or use the online form available on the website.

At the same time, you have the right to bring a complaint before the competent Data Protection Authority (www.dpa.gr) with the following contact details: tel. +30210 6475600; fax. 210 6475628; email contact@dpa.gr.

Accepting our Privacy Policy Procedures

If you use this website, you accept and consent to the Data Protection Policy hereof and the Terms of Use. If you disagree with the above, you should not continue browsing our site. If we decide to change our privacy policy, we will post the changes here. If the changes are significant, we may also choose to email all our users with the new details. If required by law, we will get your permission or give you the opportunity to opt out of any new uses of your data.