The main priority of our hotel is the protection of your personal data and therefore compliance with the European Data Protection Regulation 2016/679 (GDPR) and with Law 4624/2019. Please for your information, carefully read our hotel’s privacy policy and if you do not agree with this Privacy Policy please do not use our website or our services.

PROCESSING MANAGER – DATA PROTECTION OFFICER

The joint-stock company with the name “HERITAGE HILL SOLE REPRESENTATIVE COMPANY” and the distinctive title “HERITAGE HILL” with its registered office in Athens, Andrea Syggrou Avenue number 61 P.O. 11745, email: info@hhhotel.gr, tel: (+30) 2169397700, website: https://hhhotel.gr/ with A.F.M. 800880535 (hereinafter referred to as “Hotel”) informs you that, for the purposes of carrying out its business activities, it processes personal data of its customers, in accordance with the applicable national legislation and the European Regulation 2016/679 for the protection of natural persons against the processing of personal data and for the free movement of such data (General Data Protection Regulation, hereinafter “Regulation”) as applicable.

For any issue regarding the processing of personal data, you can contact the Data Protection Officer (D.P.O.) Mr. Nikoletta Vlassiotou in writing at the email address: nvlassiotou@gmail.com

PROCESSING OF PERSONAL DATA & PURPOSES OF PROCESSING

Our Hotel may process your personal data in order to be able to easily manage your reservation as well as to make your stay experience unique. Specifically:

a) Collection: When browsing our website https://hhhotel.gr if you wish to make a reservation at our hotel and in order to complete it, you will be asked to submit certain personal information (such as name, contact details – email and phone number, residence details and payment details). Similarly, when submitting any questions in the relevant “contact” field.
b) In case you proceed to book a room, it is possible for us to process, based on the legal basis of the execution of the contract between us, more details of a natural person and specifically name, surname, patronymic, V.A.T., TAX OFFICE, full address (street, number, postal code, city) of billing, mobile phone number, e-mail address (email), place of origin, time of arrival and time of departure, eating habits, number of children, companion details, ID number, passport number credit card and banking institution, room number, vehicle registration number, COVID 19 certificate or other document. In particular, regarding the data of minors, we assure you that the data is collected for the purposes stated in this policy, in accordance with the applicable legislation and always with the permission and consent of their parents/guardians, and it concerns data absolutely necessary for their safe stay at our hotel (age, sex, eating habits).
Your credit/debit card details will be requested upon completion of your order, provided you select the relevant payment method and will be used exclusively for their electronic transmission through the secure environment of the bank or banks with which our company cooperates for the completion of your payment only. The Hotel does not store any credit/debit card information in its electronic systems or in a physical file. Cardholder authentication may require the transfer of your card details to a third party provider, working with the bank that implements the completion of the card payment process. We may also collect information about you from third parties, including information from your airline, payment card and other partners, from your social media services and from other third party sources that have a legal right to share your data with us. We use and share this information only for the purposes described in this Statement and detailed below.
c) Storage of the data: In order to contact you and send you updates about products and services that we think are of interest to you. In any case, you have the possibility at any time to register at the electronic address (email) info@hhhotel.gr that you do not wish to receive promotional actions (right to unsubscribe).
d) In order to cross-reference information (possibly also with third parties cooperating, e.g. travel agents) in order to check that the data we have is relevant and correct with our customers, accurate in terms of the date of arrival and the level of payment of the reservation.
e) In order to safeguard the interests of our hotel, closed circuit recording cameras have been installed in the common areas of the hotel, exclusively for the purpose of ensuring the safety of our premises, staff and customers. It is pointed out, in any case, that your personal data are used purely and restrictively for the above purposes of processing and for any other legal purpose (e.g. in the context of our compliance with a legal obligation) and are only kept for as long as is necessary for to successfully perform the provision of our services on the basis of the contract between us, without prejudice to the contrary provisions of the law as the case may be, such as in relation to matters related to commercial or tax law.
In particular, when the processing is imposed as an obligation by provisions of the applicable legal framework, your personal data will be stored for as long as the relevant provisions impose. When the processing is performed on the basis of a contract, your personal data is stored for as long as is necessary for the performance of the contract and for the establishment, exercise, and/or support of legal claims based on the contract. For the purposes of promoting products and services (marketing activities), your personal data is kept until you withdraw your consent. This can be done by you at any time.

TRANSFER OF PERSONAL DATA

Our Hotel does not share or transmit personal data with third parties, unless this is required for the legitimate professional purposes and business needs, in order to process your requests and/or if required or permitted by law. In any case, access to your personal data is allowed only to authorized persons who are required to have access in order to be able to complete the purposes of their collection, use and processing, as disclosed in this Statement.

Persons who have access to the data are obliged to maintain the confidentiality of that data.

SECURITY OF PERSONAL DATA

Our Hotel guarantees that it has taken all appropriate organizational and technical measures for the security and protection of the Data from any unauthorized access, incorrect use, alteration, prohibited dissemination, disclosure, loss or accidental/unlawful destruction and any other form of unlawful processing . These measures are reviewed and amended when deemed necessary.

RIGHTS OF SUBJECTS

Regarding your personal data, we inform you that as a data subject you have the following rights:

  • Right of access: You have the right to enjoy access to the data held and to receive additional information about its processing.
  • Right to rectification: You have the right to request the correction or amendment – update of your personal data by contacting our Data Protection Officer.
  • Right to erasure: You have the right to request the erasure of your personal data.
  • Right to restriction of processing: You have the right to request restriction of the processing of your personal data in the following cases: when the accuracy of the personal data is disputed and until verification is made, when the personal data is not needed for the purposes of processing, but is nevertheless necessary for the establishment, exercise, support of legal claims and when you object to the processing and until it is verified that there are legitimate reasons that concern us and override the reasons for which you object in processing.
  • Right to portability: You have the right to receive your personal data free of charge in a form that will allow you to access it, use it and process it with commonly used processing methods. You also have the right to ask us, if technically possible, to transfer the data directly to another data controller. This right of yours exists for the data you have provided to us and their processing is carried out by automated means based on your consent or in execution of a relevant contract.
  • Right to withdraw consent: You have the right when the basis of the processing is your consent, you have the right to freely withdraw, without removing the legality of the processing based on your consent before the withdrawal.

To withdraw your consent, contact the email address: info@hhhotel.gr.

Right to file a complaint with the Personal Data Protection Authority (P.D.P.X.) You have the right to appeal to the Personal Data Protection Authority regarding issues related to the processing of your personal data. You will find instructions on the Authority’s authority and how to submit a complaint on the Authority’s official website.

CHANGES TO THIS PRIVACY POLICY

Please note that we may modify this privacy policy from time to time, so please review it regularly.