Information and Consent
By accessing the platform www.hotel-kalypso.com or providing personal information, you agree to our privacy practice and policy as set out in this privacy statement. We may revise, update and change this policy from time to time in order to ensure you are aware of the most recent version.
Kalypso Hotel operates this booking system by its web site www.hotel-kalypso.com, through a data processor, as explained below. For the purposes of the General Data Protection Regulation (“GDPR”) (EU) 2016/679, our company is the Data Controller. There is a strict contractual framework between the data controller and the data processor for the protection of your personal information, described below.
The Data Controller has been contracted with the company under the name “WebHotelier Technologies”, based in Nicosia Cyprus, which provides software support, computer data services and direct “on line” electronic documentation while operating the booking system of the Data Controller on the site www.hotel-kalypso.com ,
The types of personal data that we collect include:
You may always choose what personal data (if any) you wish to provide to us. If you choose not to provide certain details, however, some of your transactions with us may be impacted.
Data we collect automatically
We may use your personal data for the following purposes:
A) Reservations: We use your personal data to complete and administer your online reservation or reservations made at the front office or telephonicall
B) Customer service: We use your personal data to provide customer service and to improve our services to you during your stay with us
C) Guest reviews: We may use your contact data to invite you by email to write a guest review after your stay. This can help other travellers to choose the accommodation that suits them best. If you submit a guest review, your review may be published on our website
D) Marketing activities: We also use your data for marketing activities, as permitted by law. Where we use your personal data for direct marketing purposes, such as commercial newsletters and marketing communications on new products and services or other offers which we think may be of interest to you, we include an unsubscribe link that you can use if you do not want us to send messages in the future.
E) Other communications: There may be other times when we get in touch by email, by post, by phone or by texting you, depending on the contact data you share with us. There could be a number of reasons for this:
F) Analytics, improvements and research: We use personal data to conduct research and analysis. We may involve a third party to do this on our behalf. We may share or disclose the results of such research, including to third-parties, in anonymous, aggregated form. We use your personal data for analytical purposes, to improve our services, to enhance the user experience, and to improve the functionality and quality of our online travel services.
G) Security, fraud detection and prevention: We use the information, which may include personal data, in order to prevent fraud and other illegal or infringing activities. We also use this information to investigate and detect fraud. We can use personal data for risk assessment and security purposes, including the authentication of users. For these purposes, personal data may be shared with third parties, such as law enforcement authorities as permitted by applicable law and external advisors. In that case processing of your data is lawful in order to comply with our legal obligations
H) Legal and compliance: In certain cases, we need to use the information provided, which may include personal data, to handle and resolve legal disputes or complaints, for regulatory investigations and compliance, or to enforce agreement(s) or to comply with lawful requests from law enforcement insofar as it is required by law.
If we use automated means to process personal data which produces legal effects or significantly affects you, we will implement suitable measures to safeguard your rights and freedoms, including the right to obtain human intervention.
Lawfulness of Processing Personal Data
In cases A to H above we shall always ask for your explicit and unambiguous consent to process your personal data, in a lawful, fare and transparent way. We inform you that we collect data only for the above purposes. In the case we shall collect or process data for another purpose beyond the above, we shall inform you in detail before processing your data, in order to receive your prior consent. The data we process are absolutely necessary for your service and the improvement of the quality of services we offer you. At your reservation we will ask you to update the data we store and to give your consent for their retention and processing. The time period for the retention and processing of data is set out in the national legislation, the E.U. treaties and the purpose of processing.
You may withdraw your consent at any point by communicating with us at the e-mail: [email protected]
Minor Data Protection:
Our Company does not process minor’s personal data that lead to identification of the subject. At check in we might collect only the ages of minors. In the case we are obliged to comply with a legal obligation that includes the processing of minor s data, we shall request the consent of one of the parents.
The services on our website are addressed to people above the age of 18. We are not in place to have knowledge and we bear no responsibility if the data processed on the website of our company are placed there by a person below the age of 18. If such an event comes into our knowledge, we shall proceed to their erasure immediately.
If you are under the age of 18, we kindly request not to proceed with an online reservation and to communicate with the person who has your parental responsibility or is your guardian.
Data Transfers to non E.U. Countries
Questions or Complaints
If you have questions or concerns about our processing of your personal data, or if you wish to exercise any of the rights you have under this notice, you are welcome to contact us via [email protected] . You may also contact your local data protection authority with questions and complaints.
Changes to the Notice
Our Company is subject to Greek Law. Any disputes arising under or in relation to this Policy and the Services provided there under shall be resolved exclusively by the Courts of Heraklion.
5 Ariadnis St., Malia, Crete
Tel.: +30 289 703 1012
GEMI Num: 077085127000