Our company adheres to a strict policy for the protection of the privacy of the visitors of the website hasika.gr. With this note we provide you with more information on how we use automated means in order to collect specific information about the visitors of our websites , such as the number of visitors to our websites as well as our most visited websites, through any browser and device used. By gathering this information, we learn how to better tailor our websites and our advertising to visitors.

What is GDPR;

The General Data Protection Regulation (GDPR) is the new regulatory framework of the European Union (EU) in this area. The purpose of the Regulation is to establish the conditions for the processing of personal data, in order to protect the rights and freedoms of natural persons and in particular the right to protection of personal data.

What categories of personal data do we process;

Your personal data that we process, are the absolutely necessary and appropriate for the achievement of our intended goals and are summarized as follows:

Personal data, which you provide to us, such as:

• Contact details (postal address, landline or mobile number, e-mail address, FAX)
• Regarding the personal data we collect directly from you, we inform you that you must notify us of any change in your data without delay, as well as respond to any of our requests for updates.

How and why we use your personal data;

• To provide our products and services

We collect personal data e.g., to provide the services you entrust to us and wish to receive from us.

• For the execution of online reservations
  
• For our communication with you and your best service

We may need to contact you by email or phone for administrative reasons, such as managing your grievances and generally providing better service. Through email or phone but also through the electronic platform of our website where you can enter your personal data (name, email, phone), we can contact you and help you with any problems you may encounter.

• For compliance with legal obligations

We process your personal data (name, address, phone, etc.) in the context of our compliance with legal obligations.

• To inform you about our news and offers

If you have consented to this or it is covered by our legal interest and under the specific conditions set by the legal framework, we will send you updates on products, services, offers, etc. via E-mail, SMS, instant messaging or telephone and the media social networking we maintain (e.g., Facebook / Instagram / Youtube).

• Personalized information (profiling)

In order to provide you with the best possible experience, the personal data collected by our websites may be used to send personalized updates, provided that you have given your consent, subject to the specific conditions set by the legal framework. Personalization based on your needs and preferences (profling) results from the data we draw from your personal data, such as occupation, area of ​​residence, etc., based on the results of the Customer Satisfaction Survey, based on the purchases you make, and based on of the personalized data we receive from the Newsletters sending automation platform.

What are the legal reasons for processing your personal data?

Our website processes your personal data with transparency according to the principles of legality, proportionality, confidentiality and integrity, limitation of purpose and accuracy, specific data retention time and data minimization.

The legal basis for processing your personal data on a case-by-case basis may be:

• the need to process your data in the context of fulfilling our contractual obligation or at the pre-contractual stage before concluding a product or service contract,
• compliance with an obligation imposed by law, which may in particular consist of tax legislation,
• the consent you provide under the specific conditions set by the legal framework, in order to receive updates on products, services, offers, etc., sometimes personalized to your personal preferences.

Storage Period

The period of data storage is decided based on the following specific criteria as the case may be: When processing is required as an obligation by provisions of the applicable legal framework, your personal data will be stored for as long as the relevant provisions require. When processing under contract, your personal data is stored for as long as necessary for the performance of the contract and for the establishment, exercise, and / or support of legal claims under the contract. For the purposes of promoting products and services (marketing activities), your personal data is kept until the withdrawal of your consent. This can be done by you at any time. Withdrawal of consent shall not affect the lawfulness of the proceedings based on the consent given in the period prior to its withdrawal. To revoke your consent, you can contact us.

What are your rights in relation to your personal data?

Every natural person whose data is processed by our website enjoys the following rights:

Right of access:
You have the right to access our website services.

Right of correction:
You have the right to study, correct, update or modify your personal data.

Right to delete:
You have the right to request the deletion of your personal data when we process it with your consent or in order to protect our legal interests. In all other cases (such as when there is a contract, obligation to process personal data required by law, public interest), this right is subject to certain restrictions or does not exist as the case may be.

Right to restrict processing:
You have the right to request a restriction on the processing of your personal data in the following cases: (a) when the accuracy of the personal data is disputed and until it is verified; (c) when personal data is not needed for processing purposes, however, it is necessary for you to establish, exercise, uphold legal claims, and (d) when you object to the processing and until it is verified that there are legitimate reasons that concern us and outweigh the reasons why you oppose the processing.

Right to object to the processing:
You have the right to object at any time to the processing of your personal data in cases where, as described above, it is necessary for the purposes of the legitimate interests we pursue as controllers, as well as to the processing for the purposes of direct marketing and consumer profiling.

Right to portability:
You have the right to receive your personal data free of charge in a form that allows you to access, use and process it using commonly used processing methods. You also have the right to request that, if technically possible, we transfer the data directly to another controller. This right exists for the data that you have provided to us and their processing is carried out by automated means based on your consent or in execution of a relevant contract.

Right to withdraw consent:
Finally, our website informs you that where processing is based on your consent, you have the right to revoke it freely, without prejudice to the legality of the processing based on your consent, before revoking it. To revoke your consent, you can contact us.

In the above cases, we will make every effort to respond to your request within (30) days of submission. This deadline may be extended for an additional sixty (60) days, if deemed necessary, taking into account the complexity of the request and the number of requests, in which case we will inform you within the aforementioned deadline of thirty (30) days.

Personal Data Security

Our website implements appropriate technical and organizational measures aimed at the safe processing of personal data and the prevention of accidental loss or destruction and unauthorized and / or illegal access to them, their use, modification or disclosure. In any case, the way the internet operates and the fact that it is free does not allow anyone to guarantee that unauthorized third parties will never be able to violate the applicable technical and organizational measures by gaining access to and possibly using personal data for unauthorized and / or illegal purposes.

Changes to the Privacy Policy

The information about our company privacy policy reflects the current state of data processing on our website. In the event of changes to data processing, this data protection information will be updated accordingly. Our site will always have the most up-to-date version of this data protection information so that you are aware of the extent of data processing on our site. We recommend that you always be aware of how we process and protect your personal information. All future changes regarding this Privacy Statement will be announced shortly before those changes take effect. The above information is provided in application of Regulation (EU) 2016/679 of the European Parliament and of the Council and the provisions of the Greek legislation on the protection of personal data adopted and applied in this context.