Last Updated: 27, April 2020
At ALIANTHOS GARDEN HOTEL we strive to provide excellent products, services, and experiences around the world. We recognize that the protection of personal data is an important issue. We have compiled this Privacy Statement to explain our practices regarding the personal information we collect from you or for you, on the website https://www.hotelalianthos.com, or through our applications, when you contact us in writing or orally, and the information we collect when you visit one of our facilities, or data from other sources. This Privacy Statement describes the practices we have adopted on the basis of European Law and our National Legislation.
By agreeing to this Policy and/or by using any of our products or services (e.g. in the context of registering for any of our products or services), you understand and acknowledge that we will collect and use your Personal Data as described in this Policy.
Please note that this Statement does not apply to the processing of personal data that may be made by us on behalf of and in accordance with the instructions of third parties, such as airlines, car rental companies and other service providers, companies that organize or offer travel packages, marketing partners or corporate clients. In this case, you will be asked for your consent again in accordance with the instructions of the third parties.
We collect personal data at every point of contact or interaction with the visitor. The types of Personal Data that we collect from you in the course of your reservation may include: your full name, home, professional and e-mail addresses, telephone and fax numbers, accommodation or visit to any of our facilities, participation in a member program or loyal customers (including payment cards bearing the name of a group or hotel or other partner programs), Participation in competitions, in a program of offers or marketing, data related to the purchase and receipt of products and services, personal characteristics, such as diet preferences, nationality, passport number, date and place of issue, history of visits to our hotel or one of our group’s hotels, payment details such as the number and other details of your payment card, as well as verification information and other billing and billing information, customer preferences, marketing preferences and contact information, information on vehicles you may bring to our facilities, reviews and opinions on the facilities of our hotels, or on the facilities, reservation for hotel packages, airlines you travel to notify of the flight you arrive and depart for your best service and rental cars if you request the mediation or security of your car in our area, groups with which you are connected to stay in hotels, information that you choose to provide us or that we may collect about you for a better service.
We also collect data on customers who are part of your group or event. If you visit us as a member of a group, we may have your personal information collected from the group and we may promote your services as a result of your stay with a group or your presence at an event according to your preferences, provided that law allows it and you have given your written consent.
We use your personal information in various ways to provide and customize the services you request and expect from the hotel, to provide the expected level of hospitality in all our rooms and facilities, to manage the membership program if you wish to become member, for the promotion of marketing and sales and as defined below with more details. We will obtain your consent before processing your data where required by applicable law.
We are required to collect specific information, such as your name, address, payment details, and, in some countries, travel documents in order to process your booking. Failure to provide this information will result in inability to process your reservation.
In order to provide the expected level of hosting and the best level of service, your personal information may be shared with third parties as follow:
The term “sensitive information” refers to information about your racial background, political, religious or philosophical beliefs, health history and sex life, or sexual orientation, genetic information, criminal record, and any biometrics data used for the purpose of unique identification.
We do not collect sensitive information at all, unless provided voluntarily or in accordance with applicable laws and regulations. We may use data on the status of your healthcare provided solely by you in order to serve you better and meet your needs (for example, providing access to people with disabilities, medical information to you are allowed to use spa etc.
We do not intentionally solicit collect personal data from children and adolescents. As a parent or legal guardian, do not allow your children to submit personal information without your permission.
We provide mobile applications, which you can download with a smartphone or mobile devices. These applications have a variety of functions that improve the customer experience. In combination with the provision of services, our applications may collect personal and other information which will be used in accordance with this Statement. For example, to make or change a reservation, including a reservation for a reward stay, you will be asked to enter certain personal details, such as the account you keep in the membership program or other necessary information. We provide customers with the link to this Statement before downloading any of our applications.
If you allow the applications of our mobile devices to have access to information about the location of your device, our applications may use the technology of the Global Positioning System (GPS) and other technologies (such as wireless transmitters, known as identification signals) for provide you with information and suggestions about the location of your device. Recognition signals allow us to collect information about your location in partner hotels by contacting other portable devices. We may use this location information to improve your experience in our premises by sending updates and other material to your mobile device, providing you with guidance as you move through our facilities, and sending you information and offers about products, services, or activities that we think you are interested in. You can prevent or restrict the collection of location data by changing the settings of your device.
We offer all of these location or mobile services only to the extent permitted by applicable local law.
The Company will take reasonable measures to: (i) protect personal data from unauthorized access, disclosure, modification or destruction and (ii) the proper maintenance of accurate and up-to-date personal information. The Company has a strong internal team of dedicated data security experts who are responsible for creating, updating and managing its security program. In the event of a security incident, the Company will notify the regulatory authorities and / or consumers as required by applicable laws and regulations.
We also ask our partners and service providers with whom we share personal information to make reasonable efforts to maintain the confidentiality of your personal information. In e-commerce, we use reasonable technological measures to protect the personal information you send to us through our website. However, no security system or Internet data transmission system guarantees complete security.
To protect your personal data, we recommend that you do not send us payment card numbers or other sensitive personal information via email.
We will never ask you for confidential personal information or card details via SMS or email. We will only ask you for your card details by phone when you book or book a promotional package over the phone. If you receive a request like this, do not reply. Please inform us at: firstname.lastname@example.org
Based on the applicable law, you may request us to inform you about your personal information we hold and you can, request where is possible to update/ or delete your personal information in our active database. We will make all the required updates and changes within the time period specified by the applicable law and as required by law. You can submit such requests via e-mail. To protect confidentiality, we respond to these requests only at the e-mail address you have provided. Remember that if you make a request like this, we may not be able to provide the same quality and variety of services as you are used to.
In addition, in some cases, under applicable laws, you may request that we discontinue the use of your personal information with our business associates or request that the Company stop using your personal information by contacting us at the above email address or our postal address. We will consistently meet these requirements in accordance with applicable law.
We retain your personal information for as long as it takes to meet the purposes of this Statement, unless applicable laws require or allow for retention for a longer period of time. We maintain the personal data collected for the purpose of satisfying customer reservations for five years after the expiration of the stay. We retain other personal data for shorter periods of time if this is possible and if permitted by law.
We will destroy your personal information as soon as possible and in a way that does not allow the data to be restored or rebuilt.
In case it was printed on paper, personal data will be securely destroyed, for example by using a document destroyer otherwise, and if they are stored in electronic form, personal data will be technically destroyed means in order to ensure that there is no possibility of subsequent recovery or reconstruction of the data.
If you have provided us with your contact details (postal address, email address or phone number) we may inform you, according to your preferences and with your consent, of our products and services or invite you to events via email, online advertising, social media, phone, text messages (SMS and MMS), announcements, application and mail notifications, through our call center for customer service, and other media (including sending messages in the installations, such as on the TV in your room).
If you do not wish to receive our email with marketing material, you can remove it at any time by deleting your registration from the emails you receive from us or by clicking on the following link www.mailchimp.com. The default requests can be processed within ten business days.
In order not to receive text messages anymore, inform the hotel reception that you do not wish to receive text messages from the hotel, or reply “STOP” to the message that will be sent to you.
This Privacy Notice may be amended periodically. When we make substantial changes we will post a link with updated versions on the homepage of our website. If you have registered with any of our products or services, we will also notify you via the contact form you have provided. Updated versions will be posted to our web site and date stamped so that you are always aware of when the Privacy Notice was last updated. The changes to our Statement apply from the publication of the Revised Statement on the Website. The use of the Website, any of our products and services, or/ and the consent to the Updated Statement following such changes constitutes your acceptance of the revised Statement.
If you have any questions about this Statement or the way in which the Company processes your personal information, or if you would like to submit a positive comment or a complaint, please contact us via e-mail at email@example.com or mail to the address of Plakias 74060, Rethymno Crete We will answer you within 30 days or sooner if possible.
For individuals residing in the EEA, this Annex describes additional information that the Company is required to provide to you, as well as any rights you have regarding the processing of your personal data, in accordance with the applicable European Personal Data Protection Regulation (GDPR 2016/679). This Annex will check to the extent that it is contrary to any provision in the main part of this Declaration.
The contact details of EMMAN VARDAKIS ALLIANTHOS SA are:
Alianthos Garden hotel
Telephone: 0030 28320 31280
Plakias 74060, Rethymno Crete
Any requests related to your personal data must be submitted to the controller, whose contact details are as follows:
Address: Plakias, 74060 Rethymno, Crete
Phone: (+30) 2832031280 / (+30) 6976880660
The Company processes your personal data for the purposes recorded in the Unit (Use of Personal Data Collected for You) and in the Unit (Personal Data that we disclose) of the main part of this Declaration, as detailed above. The legal bases of the Company’s processing actions include the processing of this information as necessary for compliance with our contractual obligations, compliance with our legal obligations, the protection of the safety of employees, visitors and others, for our legitimate business interests, and with your consent.
The specific legal basis for the processing of your personal data is based on the purpose for which this data was provided or collected:
Requests for Access, Correction and Deletion: You have the right to:
You have the right to ask the Company to stop processing your personal data:
Right to limit processing: You have the right to request the Company to restrict the processing of your personal data:
When we restrict the processing of your personal data upon your request, we will notify you before any resumption of this processing.
You have the right to request that we provide you or a third party with certain personal data in a widely used form that can be read by a machine. Please note, however, that data portability rights apply only to the personal data we have acquired directly from you and only if the processing is based on the consent or signature of a contract.
Submission of Applications:
You can submit your requests via email firstname.lastname@example.org
We will respond to all requests within 30 days of receiving your request, unless there are special circumstances, so it may take up to 60 days to respond. We will let you know if we are going to delay our response for more than 30 days. Note, however, that some personal data may be excluded from these rights under applicable data protection legislation. In addition, we will not respond to any request unless we are able to verify the identity of the applicant. We may charge you a reasonable fee for the corresponding copies of the data you requested.
If you have any questions about our practices regarding personal data or the exercise of your rights, you can either contact the Company at email@example.com
Or the supervisory authority in the Member State of your residence.
You have the right to revoke your consent to any processing we perform solely with your consent (such as sending direct marketing material to your personal email account). You may withdraw your consent to marketing actions as well as to all other actions for which you have given your consent by contacting, firstname.lastname@example.org