Privacy Policy

Privacy Policy of “Travel Tourism Maritime Limited Liability Company”, trading as “ASPIDA TRAVEL”

The company named “Travel Tourism Maritime Limited Liability Company”, trading as “ASPIDA TRAVEL”, hereinafter the “Company”, based at 5–7 Agiou Spyridonos Street, Piraeus, telephone 210 4122611, email: info@aspidatravel.gr, is the sole administrator of http://www.aspidatravel.gr/, is responsible for the personal data you submit to us, and manages your personal data in accordance with the applicable General Data Protection Regulation 679/2016. Please contact us with any questions.

01 / About the Company

“Travel Tourism Maritime Limited Liability Company”, trading as “ASPIDA TRAVEL” (hereinafter the “Company”), operates in shipping and tourism more broadly and processes personal data as described in this Policy.

02 / About the website http://www.aspidatravel.gr/

http://www.aspidatravel.gr/ is the Company’s website.

The personal data you provide while browsing our website or when sending us a message through the contact form are processed and retained in a file under the Company’s responsibility. Where website users voluntarily provide personal data, such as their name, address, telephone number or email address, the Company may collect them in a file and process them for the purpose stated above.

In accordance with its Policy, the Company does not collect unnecessary data from you and processes your information only as described in this Policy.

03 / What are personal data?

In this Policy, “personal data” means information about individuals, whether acting privately or professionally, such as full name, postal address, email address, contact telephone number, credit card details and other information that can identify a website visitor, hereinafter “Personal Data” or “Data”.

04 / What is personal data processing?

Personal data processing includes the collection, recording, organisation, storage, adaptation, alteration, retrieval, consultation, use, transmission to third parties, dissemination, alignment, combination, restriction, erasure and destruction of individuals’ personal data.

For further related definitions, you may visit the following website: https://eur-lex.europa.eu/legal-content/EL/TXT/HTML/?uri=CELEX:32016R0679&qid=1531741527557&from=EN

05 / About the personal data processed by the Company

To carry out its activities, the Company processes individuals’ personal data, specifically:

1. For employee and prospective employee management, we may process basic personal details, such as telephone number, address, email, full name, gender and date of birth; unique identifiers, such as identity card number; professional data, such as information in a CV; and financial data, such as IBAN.
2. For customer management, we may process basic personal details, such as telephone number, address, email, full name, gender and date of birth; unique identifiers, such as identity card and passport numbers; financial data, such as IBAN, credit/debit card details and frequent-flyer card details; and, less frequently, health data, such as disability certificates, to accommodate your needs during your journey.
3. For supplier management, we may process basic personal details, such as telephone number, address, email, full name, gender and date of birth, and financial data, such as IBAN and financial information relating to commercial agreements.

The above categories of personal data are processed exclusively in accordance with the processing principles established by the General Data Protection Regulation 2016/679.

06 / Why do we process your data?

The purposes for which we process your personal data relate to the services we provide, particularly:

(a) making bookings and arranging travel of any kind, including air and ferry travel;

(b) communicating with you using the details you provide through the contact form (Contact form ) or by other means, such as telephone;

(c) complying with obligations imposed by applicable legislation; and

(d) sending newsletters.

The legal basis for processing your personal data is the performance of a contract, your consent, compliance with legal obligations under national legislation, or the Company’s legitimate interests.

07 / Who receives your data?

Recipients of the Data are the Company’s strictly necessary personnel, who are bound by confidentiality, and partner businesses processing your Data on our behalf and under our instructions. These include Mailchimp, which provides email marketing services; partner airlines and ferry companies arranging travel; partner hotels; partner car rental companies; other partner travel agencies; and partner group tour operators.

We may also transfer data to competent tax and administrative authorities in accordance with applicable legislation and the instructions of the relevant authority.

08 / How do we ensure that processors respect your personal data?

We ensure that all partner companies take appropriate technical and organisational measures to protect your data.

Processors have agreed and contractually committed to the Company to:

• maintain confidentiality;
• not transfer Data to third parties without the Company’s permission;
• take appropriate security measures;
• comply with the legal framework protecting personal data, particularly the General Data Protection Regulation.

09 / Where your personal data are processed

Personal Data are processed within the European Union. Exceptionally, we may transfer personal data within and outside the European Union when you travel abroad, in the performance of a contract.

For this reason, we ensure appropriate safeguards for the security of your personal data under Article 46 of the General Data Protection Regulation and that the processor provides appropriate safeguards for their protection.

10 / When do we delete your data?

Your Data are retained only as long as necessary for the purposes described in section 6 above, unless a legal obligation requires the Company to retain them longer.

In particular, we delete consent Data for newsletters as soon as you indicate that you no longer wish to receive newsletters by selecting the link https://marketing.aspidatravel.gr/resubmission/ (To unsubscribe from the newsletter mailing list, click here), or within six months of the last newsletter being sent.

Data collected by Cookies are deleted in accordance with the Cookies Policy.

11 / The security of your personal data

We are committed to safeguarding your Personal Data. We have taken appropriate organisational and technical measures to secure and protect your Data against accidental or unlawful processing. The Company takes care to minimise, securely store and delete your data.

Our measures are reviewed and amended when necessary.

We use an SSL (Secure Socket Layer) security certificate to ensure the secure exchange of data between the website and your browser.

Your Data may be processed only by authorised persons, employees and partners, exclusively for the purposes stated above.

12 / What are your rights?

We protect and safeguard your rights concerning the use of your personal data: access, rectification, erasure, restriction of processing, portability and objection.

You may exercise your rights by completing the relevant form below and sending it to the Company’s postal address at 46 Filonos Street and 5–7 Agiou Spyridonos Street, Piraeus, or to the email address info@aspidatravel.gr with the subject “Exercise of right of access/rectification/erasure/restriction/objection”. We will examine your request and respond as soon as possible.

Forms:

• ERASURE REQUEST
• OBJECTION REQUEST
• DATA PORTABILITY REQUEST
• RESTRICTION OF PROCESSING REQUEST
• ACCESS REQUEST
• RECTIFICATION REQUEST

We will respond to your request within one (1) month of receipt. If the complexity of your request or the volume of requests requires a further two (2) months to respond, we will inform you as soon as possible and respond within that extended period.

If your request is complex or we receive a high volume of requests, we will inform you within the first month if we need a further two (2) months to respond. If your requests are manifestly unfounded or excessive, such as repeated requests for copies, a reasonable fee for administrative costs may be charged.

For updates on your requests, you may call 210 4122611.

If your request is not fulfilled, you may lodge a complaint with the Hellenic Data Protection Authority, postal address 1–3 Kifisias Avenue, 115 23 Athens, telephone 210 6475600, email: contact@dpa.gr).

13 / What legal framework applies to our processing of your data?

We process your Data in accordance with the General Data Protection Regulation 2016/679/EU and the applicable national and European legislative and regulatory framework protecting personal data.

14 / How will you be informed of changes to this Policy?

We update this Policy whenever necessary. If there are significant changes to the Policy or how we use your Personal Data, we will notify you by publishing a prominent notice before the changes take effect or by another appropriate means. We encourage you to review this Policy regularly to understand how your Data are protected.

For any matter concerning the processing of your Data and the exercise of your rights, you may contact us at 210 4122611, by post at 46 Filonos Street and 5–7 Agiou Spyridonos Street, Piraeus, or by email at info@aspidatravel.gr

Last amended: 27 June 2018.