WEBSITE PRIVACY NOTICE
Welcome to the website https://www.experiencecentre.theellinikon.com.gr/en (hereinafter the "Website").
The website has been developed by the company “HELLINIKON S.M.S.A.”, a société anonyme duly incorporated and existing under the laws of Greece (with VAT Nr. 997674736 and General Commercial Number 115936901000), with its registered office at 37A Kifissias Avenue, 15123, in Athens Greece (hereinafter referred to as the “Company”), in order to provide information and services to the website’s users/visitors (hereinafter “Users”).
The Company is the Data Controller of your personal data, collected through the Website, pursuant to EU General Data Protection Regulation 679/2016 (hereinafter “GDPR”) and L. 4624/2019. This Privacy Notice is provided in order to inform you on the personal data collected, to explain the way and purpose of data processing, to state any third parties with whom we share your data and finally to inform you on your rights.
Personal data we collect
Personal data we collect and further process during your visit to the Website, are the following:
Technical information, such as IP address, date and time of visit, type of browser and operating system, device model, and other information collected through cookies and similar technologies, which are relevant to the analysis of your visit to the Website. For more information regarding data that are collected through cookies and similar technologies, visit the relevant section Cookies Policy.
If you wish to contact us regarding general information, we collect data, such as your name, surname, email address and mobile phone.
If you wish to contact us regarding retail information, we collect data, such as your first name, last name, position/title, email address, telephone number, mobile phone number.
If you wish to contact us regarding residential information, we collect data, such as your title, first name, last name, email address, phone number, country of residence.
If you wish to book a free visit to the Experience Centre, we collect data, such as your first name, last name, address, city, country, county, zip code, phone number, mobile, email address, and the date and time you would like your visit to take place.
If you subscribe to our newsletter, we retain the personal data you provide us with when you book a free visit. In any case, you retain the right to withdraw your consent at any time by choosing “unsubscribe” at the email that you receive from “the Company”.
If you wish to make a reservation at the Experience Park for the organization of events (e.g. children's party) or for your registration in a class or an event (e.g. Yoga sessions), we collect data such as name, surname, email address and mobile phone number.
If you wish to receive personalized commercial communication from the Company, we collect on the basis of your consent the personal data you provide us with when you book a free visit. In any case, you retain the right to withdraw your consent at any time by choosing “unsubscribe” at the email that you receive from “the Company”.
The Company may process personal data, such as your name, when you participate at the activities that take place at the Experience Centre.
Why do we process your personal data?
Within the context of the Website’s use, the Company processes your data according to the following purposes and legal bases:
Α. Legitimate Interest
In the aim of ensuring and fulfilling the Company’s legitimate interests, the aforementioned processes your personal data mentioned above, in order to ensure the uninterrupted, proper and secure operation of our Website, maintain backup copies and safeguard business continuity issues.
It is also in our legitimate interest to manage any communication we receive from you in general, so that we respond to your inquiries regarding general, retail or residential information.
Finally, it is in our legitimate interest to ensure the uninterrupted operation of the Experience Centre and the organization of bookings of free visits and activities that take place therein.
In case you wish to receive newsletter from us, following your consent through the specific area on the Website, you may subscribe at the relevant service, so we will process the personal data you provided us with for informative and promotional purposes. You have the ability to withdraw your consent at any time, by choosing “unsubscribe” at every communication.
In case you wish to receive personalized commercial communication from us, following your consent through the specific area on the Website, you may subscribe at the relevant service, and we will process the personal data you submitted while booking a free visit, so that you receive promotional activities based on your interests. You have the ability to withdraw your consent at any time, by choosing “unsubscribe” at every communication.
Furthermore, provided that you give your consent for the use of technologies such as cookies and the local storage area of your device, your data will be stored automatically, according to the Cookies Policy of the Website, for analysis, personalization or/and advertising purposes. You may change your option regarding cookies at any time and withdraw your consent, through the Cookies Policy of your Website.
In case you wish to make a reservation at the Experience Park for the organization of an event or for your registration in an event, the Company processes your personal data within the performance of the contract or in the context of pre-contractual obligations prior to the conclusion of the contract.
With whom do you share your personal data?
For the fulfillment of the aforementioned purposes, your data may be disclosed to third parties, such as:
Website support and management companies.
Social Media Coordinators and advertising companies.
Companies that commit to Data Protection Officer duties.
Other companies of the Group with which we collaborate for the fulfillment of the aforementioned purposes.
Any other administrative, judicial, or public authority or in general to a natural or legal person against which, on the basis of law or judicial decision the Company has a relevant obligation or right to disclose such data or in general, in order to defend our legitimate interests.
The Company has implemented all necessary measures, in order for the personnel and its partners to be specifically authorized for these purposes and fully committed to confidentiality and legal obligations under the legislation for the collection and further processing of the aforementioned personal data.
How does the Company protect your personal data?
We have implemented all appropriate organizational and technical measures, pursuant to the applicable legal framework and technical standards, in order to safeguard that processing of data is legitimate, appropriate and secured against any non-authorized or illegal access, deletion, amendment or any other use of the data.
How long we retain your personal data?
Your personal data are retained for as long as this is required for the fulfillment of each processing purpose. Upon expiration of these terms, your personal data will be deleted, unless otherwise required under the applicable legal and regulatory framework or for the establishment, exercise or defense of legal claims.
In any case, we would like to inform you that, according to applicable legislation, you may exercise the following rights, after verification of your identity:
Right of access to your personal data, including information concerning the processing of personal data,
Right to rectification of inaccurate or incomplete personal data,
Right to erasure (“right to be forgotten”),
Right to restriction of the processing, according to law provisions,
Right to data portability, in a structured, commonly used and machine-readable format (e.g. USB), to you or to another data controller,
Right to object to the processing based on the Company’s legitimate interests, and
Right to withdraw your consent directly and freely, as described above.
You can exercise any of the abovementioned rights by submitting a written request to our Company. You can expect a reply to such a request within one (1) month following its receipt by the Company and in any case, within two (2) months, depending on the perplexity of your request or the high volume of requests received.
Furthermore, our Company is responsible for informing you, without undue delay, for any breach concerning your personal data, which may put in danger your rights and freedoms and under the condition that it doesn’t fall under the exceptions provided in the law.
You may address any questions or requests regarding the protection of your personal data within the context of the Website’s performance, at TheEllinikon.PersonalData@lamdadev.com.
Right to Lodge a Complaint
In case you deem that we have not duly satisfied your request and the protection of your personal data is somehow affected, you may lodge a complaint through the dedicated online portal of the Hellenic Data Protection Authority (Athens, 1-3 Kifissias Avenue, 11523 Athens, Greece | +30 210 6475600). You may find detailed guidelines on how to lodge a complaint on the DPA’s website.
What happens with third party websites?
You may find more information regarding the collection of cookies at the Cookies Policy.