Privacy Policy
Introduction
At Ella Hotels and Resorts we prioritize your privacy and are committed to ensuring the security, integrity and confidentiality of the personal data you share with us. To this end, we are shaping our Personal Data Protection Policy to comply with the requirements of the current legal framework.
With this Personal Data Protection Policy, we would like to inform you of the characteristics of the progressing of the personal data you provide to us through the website www.ellaresorts.com and/or through our registration application.
Data Controller
This Policy is applied by the following Data Controllers:
- ΤΕΝ S.A.,
- PELEKAS MONASTERY XENODOCHEIAKI KAI TOURISTIKI MONOPROSOPI S.A.,
- XENODOCHEIAKES KAI TOURISTIKES EPICHEIRISEIS Prohotel MONOPROSOPI S.A.,
- LA GROTTA VERDE XENODOCHEIAKI KAI TOURISTIKI MONOPROSOPI S.A.,
- ELLA HOTELS AND RESORTS SMSA,
- XENODOCHEIAKES KAI TOURISTIKES EPICHEIRISEIS CAPO DI CORFU MONOPROSOPI S.A.,
- TALOS SYMMETOXON MONOPROSOPI S.A. (hereinafter referred to as Ella Hotels and Resorts):
The communication with Ella Hotels and Resorts is achieved by sending e-mail to: [email protected]
Data Protection Officer
For issues regarding the application of this Policy, as well as for any issue that may arise regarding the processing and/or protection of your personal data, please contact the Data Protection Officer by sending an email to: [email protected]
Categories of personal data
Ella Hotels and Resorts may collect through this website the following categories of personal data of its visitors:
• When making accommodation reservations in one of the hotels hosted on this website, Ella Hotels and Resorts may collect the customers’ personal information (first name, surname, identity card or passport number, date of birth, nationality), contact details (telephone number, e-mail address), payment details (credit or debit card or prepaid card details), information about the stay (arrival date and departure date, information about preferences in goods and services, indicatively but not limited to food and beverages preferences and/or allergies and/or intolerance, information about the customer’s needs and preferences during their stay at the hotel).
• When filling in the online registration form in order to check-in for their stay in one of the hotels hosted on this website, Ella Hotels and Resorts may collect the customers’ personal information (first name, surname, identity card or passport number, date of birth, nationality), contact details (telephone number, e-mail address), information about the stay (arrival date and departure date) and the company billing information (if needed).
• When browsing this website, Ella Hotels and Resorts may collect the visitors’ technical information (IP address, information about the type of program and technology used to access the website), especially due to, but not limited to, reasons related to cyber safety.
• Ella Hotels and Resorts may process the contact information (phone number, e-mail address) of the visitors who subscribe to the newsletter of this website. Furthermore, Ella Hotels and Resorts may process any other information that visitors to this website may wish to share with us, in order to better inform them, if they explicitly choose so, about the accommodation services provided.
Purposes and legal bases for the processing
Ella Hotels and Resorts processes the above categories of personal data in order to fulfil the following processing purposes, based on the following legal bases for processing:
• Ella Hotels and Resorts processes the personal data that visitors enter in the reservations field or/and the registration form, in order to make a reservation in their name for accommodation in one of hotels hosted on this website and, ultimately, to provide them with tourist and accommodation services. The legal basis for the above processing is the execution of the contract
between the customer who makes the reservation through this website and each hotel business in question.
• Ella Hotels and Resorts processes the visitors’ personal data related to their visit to this website, in order to better understand their preferences and improve the services provided through this website. The legal basis for the above processing is the consent of the website visitors, which concerns the activation of (certain or all) “cookies” and is provided by their (the visitors’) positive action.
• Ella Hotels and Resorts processes the personal data of visitors who subscribe to the website’s newsletter in order to send informative, advertising and promotional material in relation to the hotels hosted on this website and the tourist and hotel services provided by them, as well as for research purposes. The legal basis for the above processing is the consent of the visitors, which is provided through the completion of the relevant subscription form, that is of the data necessary to subscribe to the newsletter. With regard to research purposes, we may contact you to invite you to participate in surveys or to fill in questionnaire(s) on the quality of the services provided by the hotels hosted on this website and your level of satisfaction with your stay in one of them.
• Ella Hotels and Resorts may process personal data of website visitors in order to comply with its obligations imposed by law and/or by a court order and/or a decision of an administrative authority.
Recipients of the personal data
Ella Hotels and Resorts guarantees that your personal data will under no circumstances be processed without one of the legal bases for processing mentioned above. All staff members are committed, by signing a confidentiality agreement, to comply with the obligations under Regulation (EU) 2016/679 and relevant national legislation, as applicable. Ella Hotels and Resorts may disclose or transfer your personal data to the following categories of recipients, under the conditions set out below:
- To its partners, in the context of our contractual relationships and for the fulfilment of specific purposes set out in the relevant contractual documents, in particular to the hotel businesses hosted on this website. In any case, Ella Hotels and Resorts ensures that all its partners comply with the legislation on the protection of personal data (Regulation (EU) 2016/679 and relevant national legislation, as applicable) and take all appropriate and suitable measures to ensure the confidentiality, integrity and availability of your personal data.
- To judicial or administrative authorities, in compliance with an obligation imposed by the law and/or from a judicial decision and/or from a decision of an administrative authority.
Ella Hotels and Resorts shares, through or on the occasion of this website, content on social media platforms, including, but not limited to, Facebook, Twitter, Instagram and LinkedIn. We guarantee that all the data displayed on the abovementioned platforms and pages (and any others) have been duly and properly anonymized.
Transfer of the personal data to a third country
- Ella Hotels and Resorts does not transfer or intend to transfer personal data of the visitors of this website to third countries (countries outside of the EU, where Regulation (EU) 2016/679 is applicable) or any international organizations.
Retention period for the personal data of the visitors
- Ella Hotels and Resorts stores your personal data for the period of time strictly necessary to achieve the processing purposes, for which the data were originally collected. Ella Hotels and Resorts may store your personal data for longer than it is strictly necessary, solely for statistical purposes or if it is deemed necessary, in order for Ella Hotels and Resorts to comply with an obligation imposed by the law and/or from a judicial decision and/or from a decision of an administrative authority.
Rights
Ella Hotels and Resorts guarantees the full exercise of the rights provided for in Regulation (EU) 2016/679 and the relevant national legislation, as in force at any time. Specifically, you, at any given time, have the right(s):
• To withdraw your consent for processing operations based on it. In this regard, you are entitled to withdraw your consent at any time to the processing of the data you have shared/entered in order to receive informative and promotional messages via the newsletter of this website.
• To obtain information as to whether personal data that concern you are being processed and, when that is the case, access to your personal data and the relevant information set out in Article 15 (1) of (EU) Regulation 2016/679.
• To request the update of incomplete or inaccurate personal data that concern you.
• To request the complete and permanent erasure of your personal data from our records.
• To request the restriction of processing of your personal data, given that the requirements set out in Article 18 of (EU) Regulation 2016/679 are met.
• To receive your personal data in a structured, commonly used and machine – readable format.
• To request the transmit of your personal data to another Data Controller. In this case, it would greatly help us to list the reasons for the enactment of this right of yours, in order for us to retrieve any weak spots in the former Data Controllers work and work towards the direction of improving them.
• To lodge a complaint with the Hellenic Data Protection Authority (https://www.dpa.gr/en).
Ella Hotels and Resorts guarantees to satisfy your requests free of charge, without any undue delay and, in any event, within one (1) month of receipt of the request. We shall extend this period by two (2) further months, where necessary, taking into account the complexity of each request and the number of the requests.
Links to other Websites
Ella Hotels and Resorts shall not be liable in relation to any damage or loss caused when visitors to this website are transferred to other websites through links that may be contained in it. This Policy does not include information about any personal data protection policies and/or any cookies policies that these websites may apply.
Contact
In order to exercise the aforementioned rights, to express any question or complaint and to evaluate this Policy, please contact our Data Protection Officer by sending an email to: [email protected]
Modification of the Policy
This Personal Data Protection Policy may be modified in the future. Any change or addition will be displayed in this website, in order to always keep you up to date on how we process and protect your personal data. No change to this policy shall be applied before being uploaded to the website and you are fully and duly notified.