1. General information
The https://www.flowerapartments.gr website was created so that to offer information and services to its visitors. Its use is governed by the present terms and conditions, which the visitors are called to read carefully and comply with them.
We understand the importance of protecting the privacy of our visitors and we make every effort to store and process carefully and in accordance with applicable law the information you share with us. For this reason, we have prepared this Declaration of Privacy and Protection in order to inform you in accordance with Regulation (EU) 2016/679 and the provisions of the relevant Greek legislation on personal data protection (Law 4624/2019) on how collection, use and disclosure of your personal data.
For the purposes of the Privacy and Protection Statement, personal data means any information concerning you with which your identity is verified or can be verified. This information includes, for example, your name, your address, etc.
This Statement:
provides an overview of the categories of personal data that the https://www.flowerapartments.gr website collects, their purposes of processing, their duration, their sources and their recipients, offers a summary of the practices by which we collect, use, disclose, transfer and store your personal data, confirms the technical data security measures, the internal management procedures as well as the physical measures we take to protect them informs you about the type and manner of exercising your rights
addressed to individuals whether they are existing or potential customers and partners
2. Collection and Processing of personal data
Our website collects and processes data when
A) visiting/Browsing our website
B) making communication
as analyzed below:
2.1 Visit/browse our website
When you enter, visit and browse our website, the following information is collected and recorded:
IP address, Date, Time, Resource accessed (url), Browser, Operating System.
The above data is necessary to be collected by the website in order to enable your access to the website.
They are kept for a period of 2 days for security reasons in order to make it possible to investigate security breaches and malicious attacks.
The legal basis for data processing is:
A) the existence of a legal interest from our website according to article 6 par. 1 f of the General Regulation of Personal Data Protection to enable your access to the website.
It should be noted that the website cookies as described below and in particular in Section 4 and the Cookies Policy.
2.2 Sending recorded requests/communication messages via e-mail and or contact form
You can send us questions:
By email to info@flowerapartments.gr
Through the contact form available at : https://www.flowerapartments.gr/contact/
For the purpose of communicating with us, the user fills in the relevant contact form https://www.flowerapartments.gr/contact/ :
her/his surname and first name
email address
phone
message content
By sending us written requests / questions, the user declares that the information she/he has used during her/his communication is true and accurate and that she/he has not used personal data or any information of a third natural or legal person.
The user of the website is solely responsible for the content she/he sends to us and assumes all responsibility and the restoration of any type of damage caused by her/his illegal behavior.
Communication and sending messages to us is governed by the Terms of Use of this website.
Types of data collected and processed when communicating with us
The data collected are:
a) name and surname
b) e-mail address
c) telephone
d) subject and content of message
Legal basis of the processing is
on the one hand, the consent of the user, who voluntarily sends her/his requests/questions through the relevant technical options of our website and on the other hand, our legal interest for the purpose of answering/responding to the request/question submitted by the website user.
The data in question is kept for the duration of the communication is required for the purpose of the processing.
3. Data retention period
As already mentioned above, the personal data of our website users is not kept for an indefinite period of time but for a period determined based on specific criteria as analyzed above in Section 2.
They are kept for an indefinite period of time, in the event that it is required by law due to an ongoing legal process or prosecutorial investigation.
Data collected through cookies or other internet tracking technologies directly from third-party providers (e.g. Google etc.), are kept for the period of time defined by the third party in accordance with the confidentiality and privacy policy it applies.
4. Cookies Policy
4.1 Cookies
What are cookies:
“Cookies” are small files with information that a website stores on a user’s computer, so that every time the user connects to the website, the latter retrieves the information in question and offers the user related to these services. A typical example of such information is the user’s preferences on a website, as indicated by the choices the user makes on the specific website (e.g. selection of specific “buttons”, searches, advertisements, etc.).
4.2 Cookies are used for the following purposes:
a) Necessary cookies
to provide access to and browsing of our website.
for reading visual and audio content (flash cookies), if the user is requested access to corresponding material
The above cookies are absolutely necessary for the reliable and secure operation of our website and for you to be able to browse it if you wish.
Because they are necessary for the operation of our website, you cannot reject them.
b) Performance cookies.
which concerns the collection of non-personal data from our website in order to draw conclusions from the use of the website with the aim of improving functionality
c) Targeting/Marketing/Preferences Cookies.
- which allow our website to remember the choices you make (such as your username, your language, your location) in order to provide personalized features and targeted advertising.
- which enable us to draw conclusions and evaluate your activity for the purposes of better and personalized service provision
Third party cookies (third party cookies) described in detail in Section 5 below.
d) Social networking cookies
Our website provides you with the ability to share and/or share and republish content of our website on the social media in which you maintain an account.
You can opt-out or withdraw your consent to participate in the tracking and targeted advertising process carried out through performance and targeting cookies at any time by modifying the cookie settings on our business website accordingly.
Through corresponding settings in the browsers you use, you can delete the cookies that have been installed on your computer or choose that cookies cannot be installed on your device.
4.3 Tracking tools:
Third-party cookies are used on our website, which are analyzed immediately below.
The legal basis for processing is the user’s consent, which can be revoked at any time.
4.3.1 Analysis/Statistics Cookies:
Google Analytics: For the purposes of monitoring and exploiting the traffic of our website, for the purposes of optimizing the services provided, we use Google Analytics. Google Analytics is a service provided by Google LLC (1600 Amphitheater Parkway, Mountain View, California, US). Google Analytics is a Google tool that helps website and app owners understand how their visitors use their properties. It may use cookies to collect information and statistics about the use of a website, without personally identifiable information about each visitor. The main cookie used by Google Analytics is the “__ga” , “_gat” and “__gid” cookie.
Through Google Analytics it is possible to monitor and record data related to the use of our website by you.
You can find out how Google collects and processes data through Google Analytics at the following web link: https://policies.google.com/technologies/partner-sites (English version) and https://policies.google. com/technologies/partner-sites?hl=en (Greek version).
https://marketingplatform.google.com/about/analytics/terms/gr /
https://policies.google.com/privacy?hl=en
You can disable the collection of data through cookies by Google Analytics by following the instructions found at the following link https://tools.google.com/dlpage/gaoptout
4.3.2 Google maps
On our website, we use maps from Google LLC., 1600 Amphitheater Parkway Mountain View, CA 94043, USA.
The Google maps map is third-party website content that has been integrated into our website. If you enter a page where there is a google maps map and/or navigate on the map, the data may be transmitted to Google.
However, the use of Google Maps is necessary for the purpose of providing instructions and directions in order to locate the geographical location of our business. We declare that we do not bear any responsibility, nor do we provide any guarantee for the accuracy of such Google maps content.
Regarding the processing of the data collected by Google Maps for the user, the data protection policy of Google applies: https://policies.google.com/privacy?hl=en
5. Recipients of the data
Recipients of your data are:
a) https://www.flowerapartments.gr staff, who are committed to privacy and confidentiality and our company’s security and data protection policy
b) external partners of https://www.flowerapartments.gr, if this is required by the purpose of the processing, who are committed to confidentiality and confidentiality and our company’s security and data protection policy
d) public, prosecution, police authorities if there is a relevant request for disclosure or provision of any information or data
6. Rights of data subjects
6.1 The data subject – user of the website that falls under the scope of the General Data Protection Regulation has the following rights:
a) Right of access (Article 15 GDPR)
The data subject has the right to receive from the controller confirmation as to whether or not the personal data concerning him is being processed and, if this is the case, the right to access the personal data and the following information: a) the purposes of the processing, b) the relevant categories of personal data, c) the recipients or categories of recipients to whom the personal data have been disclosed or are to be disclosed, in particular recipients in third countries or international organizations, d) if possible, the period for which the personal data will be stored or, when this is impossible, the criteria that determine the period in question,e) the existence of the right to submit a request to the data controller for correction or deletion of personal data or restriction of the processing of personal data concerning the data subject or the right to object to said processing, f) the right to submit a complaint to a supervisory authority, g ) when the personal data are not collected from the data subject, any available information about their origin, h) the existence of automated decision-making, including profiling, provided for in Article 22 paragraphs 1 and 4 and, at least in the cases these, important information about the logic followed, as well as the significance and intended consequences of said processing for the data subject.
b) Right to rectification (Article 16)
The data subject has the right to demand from the controller without undue delay the correction of inaccurate personal data concerning him. Bearing in mind the purposes of the processing, the data subject has the right to request the completion of incomplete personal data, including through a supplementary statement.
c) Right to erasure (Article 17)
The data subject has the right to request from the controller the deletion of personal data concerning him without undue delay and the controller is obliged to delete personal data without undue delay, as long as this is possible in accordance with the more specific terms and conditions defines article 17 of Regulation 679/2016.
d) right to restriction of processing (Article 18)
The data subject has the right to obtain from the data controller the limitation of the processing if this is possible in accordance with the more specific terms and conditions defined in article 18 of Regulation 679/2016.
e) Right to information (Article 19)
The controller shall communicate any rectification or deletion of personal data or restriction of data processing carried out in accordance with Article 16, Article 17(1) and Article 18 to each recipient to whom the personal data was disclosed, unless this proves impracticable or if it involves disproportionate effort. The controller shall inform the data subject of such recipients if requested by the data subject.
f) Portability rights (Article 20)
The data subject has the right to receive the personal data concerning him, and which he has provided to a controller, in a structured, commonly used and machine-readable format, as well as the right to transmit said data to another controller processing without objection by the controller to whom the personal data was provided, when: a) the processing is based on consent in accordance with Article 6 paragraph 1 letter a) or Article 9 paragraph 2 letter a) of Regulation 679/2016 or contract in accordance with article 6 paragraph 1 letter b) and b) the processing is carried out by automated means.
g) Right to withdraw consent (article 7 par. 3)
The data subject has the right to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing that was based on consent prior to its withdrawal. Before giving consent, the data subject is informed accordingly. Withdrawing consent is as easy as giving it.
h) Right to lodge a complaint (Article 77)
Without prejudice to any other administrative or judicial appeals, each data subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence or place of work or the place of the alleged violation, if the subject of the data considers that the processing of the personal data concerning it violates this regulation. The supervisory authority to which a complaint has been submitted shall inform the complainant of the progress and outcome of the complaint, as well as the possibility of legal action in accordance with Article 78.
The website of the Personal Data Protection Authority in Greece is www.dpa.gr (email: complaints@dpa.gr , FAX +30 210 6475628). You can find information about making a complaint to the Protection Authority here.
6.2 Right to Object
The data subject has the right to object, at any time and for reasons related to his particular situation, to the processing of personal data concerning him, which is based on Article 6 paragraph 1 letter e) or f), including profiling under the provisions in question. We do not process personal data unless there are compelling and legitimate reasons for the processing which override the interests, rights and freedoms of the data subject or to establish, exercise or support legal claims.
7. Submitting a request/complaint:
In case you want to exercise your rights or submit a request regarding the protection of personal data and this policy, you can send an email to the address info@flowerapartments.gr .
In order to proceed with your identification and provide you with the information required, we reserve the right to ask you for further information for the purpose of confirming your identity.
If this is not possible, you will receive a reasoned response as to why we are not responding to your request.
8. Technical and Organizational security measures
8.1 Security protocol:
Our website takes measures for the security of data kept in electronic form. It implements SSL technology. The databases connected to its website are installed on the server of a company providing related services within the EU. Passwords are kept in an encrypted form. Our company processes any personal data of website users in a way that ensures compliance with the current legal framework for the protection of personal data. Without prejudice to what is specifically mentioned in this policy, our company does not transmit or sell the data collected through the website in the above mentioned ways to third parties, legal or natural persons. The staff of our company, its external partners are committed in writing to the observance of confidentiality and the data protection policy of our company.
9. Modification of privacy and data protection policy
Our sole proprietorship has the right to modify the privacy and data protection policy for the use of its website. In case of modification of this policy, the user will be informed in the form of a pop-up window when visiting the website of https://www.flowerapartments.gr .
This data protection policy is governed by Greek Law. Competent courts for the resolution of any dispute are agreed to be the courts of Heraklion, Crete.