Privacy policy.

1. GENERAL

1.1 The Privacy Policy is part of the Terms of Use of the website www.casabotanica.gr, which belongs to the Single-Member Private Capital Company under the name «PHAEDRA VILLAS SMPCC», which resides in Pallini Attica, 9 Pythagora str. (P.O 15351) with VAT No 997085641 issued by the Tax Registry of Pallini and Commercial Chamber of Companies Registration No 144740903000, as legally represented, hereinafter referred to as "the Company" or "the Enterprise".

The use of the services rendered to the visitor/user/customer, through this website, requires your unconditional agreement with this Privacy Policy on Personal Data Protection as a prerequisite.

Therefore, you must carefully read the contents of this policy and in case you do not agree with it or do not consent to it, you should immediately cease browsing this site and DO NOT make any use of the services provided by the Company through this website.

This Policy is subject to the information of data subjects in accordance with Articles 13-14 of the General Data Protection Regulation of the EU 679/2016 and its acceptance implies your consent to the collection and processing of your personal data as described in detail in it.

This Privacy Policy does not in any way cover the relationship between the visitors/users/members of the website and any services that are not subject to the control and/or ownership of the Company.

Users should be aware that our website may contain external links to other websites, but the Company does not bear any responsibility for the privacy practices and terms or content of such websites.

1.2 The Company respects your privacy and your personal data and fully complies with the Greek and EU GDPR legislation regarding the collection, the processing, the emission to third parties and the protection of your personal data.

This Privacy Statement informs you of our privacy practices in respect to your privacy and your personal data as well as of the choices you have in your discretion on the manner the information about you is collected and how it is used.

2. PURPOSE OF THIS DECLARATION OF PRIVACY

2.1 This Privacy Statement applies to all websites, domains, services, applications, and products owned by the present website, which is sequentially owned and administrated by the Company.

2.2 The Company collects, exports, and uses personal data to provide its services in a better way and to personalize your experience and interaction with the Company. This is made upon prior proper alert securing consent provided by you and with the necessary procedures of data protection authorities, where appropriate.

2.3 The Company may collect personal data from you on the purpose of completing various transactions, such as:

Processing requests for information (i.e reservations, pricing, additional services, availability etc )
Subscriptions to marketing or support services
Product/services and notification/marketing messages.

Additionally, the types of personal information you provide to us may include:

Identity and communication information such as i) Your name, age, address, telephone number, email, ID or passport number, nationality and country of residence, necessary for the provision of our services to you.

ii) Information for the payment of our services, such as credit/ debit card number(s), including associated billing address(es) and expiration date(s), according to your explicit consent, as provided by you at a specific authorization form and as described below.

iii) other information necessary to facilitate your travel or other services, including travel companion(s) names/ passport numbers/age, any dietary or other restrictions

– Use of products and services such as self-service devices, flight status notification and web check-in, necessary for the services required by us.

2.4 If you post, comment, express interest or complain or share personal information, including photos or videos, in any public forum on a Company site, social network, blog or other forum of this kind, you must be aware that any information you submit may be read, collected or used by other users of these forums and can be used to communicate with you, send unsolicited messages or for purposes that are not controlled either by you or by the Company. The Company is not responsible for the personal information you choose to submit to such forums.

2.5 In addition to the information you provide, the Company may also collect information when you visit a Company website, an application provided via the Web or a website "supported by" another company on behalf of the Company, through automated data collecting tools, including web alerts, cookies, and embedded web links.

These tools collect specific traffic information that your browser sends to a website, such as browser type and language, access times, and the location of the Web site from which you moved. They may also collect information about the Internet Protocol (IP) address, the unique ID of your device, your transfer behavior through links (that is, the pages you see, the links you follow, and other actions you make in relation to sites Business Web or supported Web sites) as well as product or services information.

The Company may also use some of the automated data collection tools for specific e-mails and newsletters that it sends and may therefore collect information using these tools when you open the e-mail or click in a link contained in it.

To learn more, read the section on how the Company uses the automatic data collection tools please refer to the relevant Cookies Privacy Policy of the Company.

2.6 The Company also collects information from sources that are publicly available or commercially available and are credited to be reliable. This information may include your full name, e-mail address, preferences, interests, and demographic/profile data. Information collected by the Company from its public or commercial sources may be used along with the information it collects when you visit its Web sites.

3. PROTECTION OF PERSONAL DATA

We collect and process your personal data only when this is absolutely necessary. We will never sell, rent, distribute, or disclose your personal data in any way unless the law requires it.

The services and content of the website are intended exclusively for adults. If you are under 16 years of age, you MUST have your parents' prior consent before using the services on this website.

In case a minor becomes a member of our website and our newsletter and provides personal data or if a provider tells us the details of a minor, the data will be deleted from our database.

4. RELEVANT LEGISLATION

Along with our company's internal IT systems, this site is designed to comply with the following laws/regulations regarding the protection of user's personal data:

EU Data Protection Directive 1995 (EU DPD)
General Data Protection Regulation 2016/679 / EU on General Data Protection of the EU (EU GDPR), as integrated by the national law is in effect

5. PERSONAL INFORMATION COLLECTED ON THIS SITE AND WHY WE COLLECT IT

The Company collects personal data of its website users/associates/clients only when they voluntarily provide them. Personal information is the information that can be used to identify or communicate with a person and other information about that person.

The administrator of the webpage may use this information for information purposes or to make proposals for new offers unless the latter wishes not to do so. The webmaster will NOT make available for sale or otherwise transfer or disclose personal information of the customers to third parties not related to the Company without the consent of the customer, except for the application of relevant legal dictates and to the competent authorities alone.

A. We collect the basic information from you when you are signing up to our newsletter. This information includes your name and your e-mail address. We also record your e-mail address and any other information provided to your email provider (Gmail, Outlook, Yahoo! Mail, etc.) when you contact us. Along with these, we also keep notes or details explaining what you asked for and how we responded when you contacted us.

We collect information that you post on the website and was intended by you to be posted on the Internet, which includes your username, your profile information and the content of your posts, information contained in any contact you make with us via e-mail or through the website, including communication content and metadata as well as any other personal information you send us.

Before disclosing any personal information belonging to any third party, you must have that individual’s consent to the disclosure and processing of his or her personal information in accordance with this policy.

We also use cookies and similar technologies on our site to collect information about interaction and usage. See the Cookie Privacy Policy for more information about what type of information we may collect and your choices about this data.

B. This website collects and processes personal information for the following reasons:

Tracking Website Traffic Like most sites, this also uses Google Analytics (GA) to track user activity. We use this data to determine the number of people who use our site to better understand how they find and use our webpage and to see their course on the site.

Although GA records data such as your geographic location, your device, your web browser, and your operating system, none of this information makes you personally familiar to us.

GA also records your computer's IP address, which could be used to identify you, but Google does not provide access to it. We believe that Google is a third data processor that is compliant with the requirements of European legislation.

Forms of communication and e-mail links If you choose to contact us using a contact form or an e-mail link, none of the data you provide will be stored from this site or transferred or processed by any third party as described below in the section "Our third-party data processors". Instead, these data will be sent to you via an SMTP protocol (Simple Mail Transfer Protocol).

Our SMTP servers are protected by a TLS security protocol (sometimes known as SSL), meaning that email content is encrypted before being sent over the Internet. The content of the e-mail is decrypted by our local computers and devices.

3) Advertising, Statistics, Repetitive Marketing We may collaborate with statistics companies (web/mobile app statistics) aiming to help us understand how the website is used to record statistics such as frequency of visits and duration of hosting on the website.

We collaborate with advertisers and third-party advertisement networks, who need to know how users interact with the website.

Advertisers and advertising networks use some of the information collected from the website, including, but not limited to, the unique identifier of the user's device and/or mobile phone number.

To protect the anonymity of information, we use encryption technology to ensure that third parties cannot cross-check the identities of individuals.

Affiliates may also collect anonymous information about other websites/applications you have used/downloaded, websites you visit, accurate information about your location, and other inaccurate information about your location, in order to display targeted ads within the website and elsewhere.

The encrypted information you have provided may be passed on to our partners and combined with other available information about you for statistical analysis or advertising purposes.

Our partners do not have an independent use of the information we transfer to them and have agreed to abide by the rules set by the respective legislation.

Users wishing to opt out should follow the procedures as described in the relevant section below.

4) Partnerships with third parties We may transfer data to third parties in order to provide a service you have requested for or an advertising offer promoted by us or third parties. The transfer of information between partners includes applications or websites that integrate with our API or otherwise our services and APIs or services with which the Company is connected.

5) Social Networking Networks Your website may offer the ability to share on Social Networks and other related tools that allow you to share your actions within the website with other applications, websites or media, and the media.

Using such features allows you to share information with your friends or the public, depending on the settings you have set in your personal profile.

Please see the privacy policies of these social networking services for more information about how they handle your data.

6) Mobile Alerts / Messaging We may work with partners who use mobile SDKs, including the OneSignal Messaging SDK, to passively collect information, which generally helps us send personalized alerts/messages.

This data can also be used to uniquely identify you, among other things, for the purpose of displaying targeted advertisements, messages, or content. Depending on the permissions granted to this application, this information may include personal information including your e-mail address.

This information may also include the exact location or WiFi information, applications that have been installed and activated, and unique device/user IDs (eg Android Advertising ID).

7) providing statistical data of our users to third parties (which will not be able to identify any user of this information).

8) maintain the security of the website and prevent any fraud or any other breach of law.

9) confirmation of compliance with the terms and conditions of provision of our website (including the monitoring of personal messages that circulate through our private online messaging service).

10) send out promotional communications, related to your business or to specific third party companies which we believe may be of interest to you, through notifications or, if you have agreed to it, via email or similar technology (you can let us know at any time if you no longer want advertising communications).

11) If you submit personal information for publication on our website, we will publish or use this information in accordance with your prior permission.

C. Disclosure of personal information We will not disclose on your personal information without your prior consent to any third party or to any third-party commercial division. However, we may disclose your personal information to any of our employees, executives, insurers, or professional consultants, representatives, vendors, suppliers, or subcontractors as required for the purposes set forth in this policy. Further, we may disclose your personal information to any member of our group of companies (this means our subsidiaries, our portfolio controlling company, and its subsidiaries) as required for the purposes set forth in this policy.

We may share personal information:

(a) to the extent required by law and in relation to any current or future legal proceedings

b) for the purpose of consolidating, exercising, or defending our legal rights (including the provision of information to third parties with a view to preventing fraud and reducing credit risk)

(d) to whoever on any reasonable grounds we believe that is part of any other competent authority relating to the disclosure of information may belong to the judiciary in the event that we consider that the relevant authority will require the disclosure of such personal information.

D. International data transfers

The information we collect may be stored, processed, and moved between any countries in which we operate so that we may use it in accordance with this policy.

The information we collect can be transferred to the following countries that do not have the same personal data protection legislation as in the European Economic Area: the USA, Russia, Japan, China, and India.

The personal information you post on our site or submit for publication on our site may be available online worldwide. We cannot prevent the use or misuse of such information by third parties.

You expressly agree to the transfer of the provisional data described in the section above.

6. RIGHTS AND OPT-OUT PROCEDURE

As a user you can revoke your consent to the collection of data by sending an e-mail to gdpr@casabotanica.gr.. Withdrawal of consent does not affect the legality of the Company to the point of processing the user's personal data.

Exception to OneSignal Push Notifications You can, in most cases, opt out for receiving notifications/messages by going to your device's "Settings" and locating the corresponding settings (possibly under "Notifications"), and then changing these settings for some or all of the applications on your device. (Different device configurations, or device updates, may affect or change how these settings work.)

Exclude Ads Based on Mobile Interests You can opt out of targeted ads that use unique mobile IDs to display ads based on user interests.

You can opt-out of these advertisements by opening the Google Settings app on your device by selecting Ads, and then selecting opt out of Interest Based Ads. (Different device configurations, or device updates, may affect or change how these settings work.)

In addition, the user may opt-out of the collection of data from third party cookies through the Network Advertising Initiative service and from the collection of Google Cookies data by modifying his personal settings in Google's Ads Settings.

If you do not want to record your geographical location, please turn off Location Services in your mobile device settings.

According to the provisions of 13 et seq. of the General Data Protection Regulation 679/2016/EU, you have the right to be informed, the right of access, the right for correction, the right of deletion, the right to restrict processing, the right to data portability, the right to object to the processing of your personal data including opposition to automated decision-making and profiling, as well as the right to lodge a complaint with the Personal Data Protection Authority.

To stop receiving newsletters, promotional e-mails, as well as to stop any communication with us, just click on the "Delete from our list" link at the end of each of our newsletters and all your personal data will be deleted automatically at that time. You are also allowed to edit your personal data, as well as select the e-mails you want to be sent to you from our site, if there is more than one newsletter or e-mail campaign.

Note: In the event that the link at the end of our newsletter does not work properly or shows problems, please let us know about the deletion or processing of your data, and we will make sure to make the necessary changes or delete your data within 48 hours.

If for any reason, at any time, you want us to delete any information, and of course the e-mail of your subscription to the newsletter (right to be forgotten), please send an e-mail to the e-mail address gdpr@casabotanica.gr on "Right to Oblivion". We will delete any information about you, and we will confirm the transaction by e-mail you will receive the next working day.

Your IP address as well as cookies are collected by third party services, including Google Analytics and Google Adsense.

Both services comply with GDRP regulations and all data on our site is automatically deleted every 38 months. You can read about how Google services collect your personal data here as well as how your data is automatically deleted from Google Analytics

The Company is committed in resolving complaints related to privacy and the collection or use of personal information.

The Company further undertakes to report any unresolved confidentiality complaints by EU citizens or residents regarding the transfer of their personal data within the authorities to an independent dispute resolution mechanism.

If you have questions, concerns or complaints about our Privacy Policy or our service practices, you may contact our Data Controller, mr Pericles Voultsos, by contacting the e-mail address gdpr@casabotanica.gr.

We will respond to all requests, questions or concerns within thirty (30) days. In addition, you can contact us through the special form which you will find on the website in the "CONTACT" section.

6. NOTIFICATION OF DATA IN THIRD PARTIES

Our website includes hyperlinks to, and information from, sites belonging to third parties. We cannot control and are not responsible for the protection policies and practices of third parties.

We may disclose your personal data to trusted third-party service providers as is necessary for them to perform services on our behalf. Data sharing examples include cookies, your IP address, your e-mail address, and your name. Your e-mail address and name are only used in trusted services that we use to create newsletters. We only share the minimum necessary information, and third parties are not permitted to use your information for any other purpose, as stated in our Privacy Policy. Each third party we use also complies with the GDRP regulations.

The website may provide links that redirect the user to third-party sites. The Company does not control these third-party websites and is not responsible for the content posted on them or any further links that appear on them. The Company is not responsible for the privacy practices of third parties or for the content of third-party websites.

Services, tools and third-party widgets we use

Below you can find the list of all third-party tools, services, and widgets we use, as well as links to information about managing your data from these services.

Google Analytics - We use Google Analytics to track the core statistics on our site. For more information about how Google manages your personal data, please refer to Google’s Privacy Policy.

Privacy Policy for Facebook

Our website uses features of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. When you visit our pages with Facebook plug-ins, a connection is established between your browser and the Facebook servers. Data is already being transmitted to Facebook. If you have a Facebook account, this data can be linked to it. If you do not wish to assign this data to your Facebook account, please log out of Facebook before visiting our page. Interactions, in particular the use of a comment function or the clicking on a "Like" or "Share" button are also passed on to Facebook. Learn more at
https://de-de.facebook.com/about/privacy.

Most mobile platforms (iOS, Android, etc.) have specified device data types that applications cannot access without your prior consent.

These platforms have licensing systems for obtaining your consent. The iOS platform will notify you the first time our application needs access to certain types of data and will give you the option to consent (or not) to this request.

Android devices inform about the rights that our application requires before using it for the first time, while the use of the application is your consent. The rights / licenses that our application requires may change over time.

b. sale/merger/change of control In the event that there is a sale, merger, consolidation, change of control, transfer of essential assets, reorganization or liquidation of the Company then, at its sole discretion, the Company may transfer, sell or assign information that has been collected or transferred. from the Website / Application, to one or more relevant third parties.

In this case, the Company will notify all members of the Website who are affected before the transfer of personal data or before they are subject to a different privacy policy.

c. request from judicial/police/governmental authorities

The Company may provide data to the competent judicial, police and other administrative authorities upon legal request in order to comply with applicable legislation, to respond to governmental inquiries (or inquiries from legal, governmental or semi-governmental or local or Internet Protection Authorities of any kind), to comply with a valid legal procedure and to protect its rights and property, the website and / or other users of the Website.

7. NEWSLETTERS, MARKETING E-MAILS AND COMMUNICATION

Users may be asked to subscribe to our newsletter by providing their name and e-mail address to access articles, videos and/or e-books.

The e-mail addresses we receive from our users upon registration will only be used for the purposes of the site without compromising users against spam.

The subscriber can be deleted from our newsletter database at any time by e-mailing us or by clicking on the "unsubscribe" link below each newsletter that we send it to.

All e-mails and names are organized through the third-party service called MailChimp, for which you can read more. The company complies fully with the new GDRP regulations.

9. SAFETY OF YOUR DIGITAL IDENTITY

Creating a digital identity requires dedication. These are the ways we help you protect yours.

Secure communication channels: We encrypt personal data provided through web forms using up-to-date standards to prevent the transmission of transmitted information.

9. DATA SECURITY BREACH

For any personal information you store in our database, all necessary steps will be taken to secure them.

We will report any unlawful violation of the database of this third-partydata processing site or database to anyone and to all relevant stakeholders as well as authorities within 72 hours from the violation if it is obvious that the personal data that is stored in recognizable form, have been stolen.

11. AMENDMENT

This Privacy Policy may be amended from time to time in accordance with legislation or industry developments.

For this reason, we consider it advisable to refer to it regularly for newer versions. In case of modification, it will indicate the date on which it took place.

The Privacy Policy is always considered valid, as formulated by the most recent amendment.

Your continued use of the website www.casabotanica.gr even after any changes to the Privacy Policy constitutes your unconditional acceptance of these terms.