PRIVACY NOTICE
The protection of your personal data is important to us. This notice intends to inform you about the kind of personal data our group collects, how it is processed, how it is protected and your rights to such processing, in relation to the services we provide or when you visit our website or when you interact with us.
Definitions
- The terms “we” and the “Group” refer to MAVROMMATIS Group of companiess, i.e. companies “Saint Christopher S.A.” (TIN 094214770), “Saint Christopher Kos S.A.” (TIN 999698778), “Saint Christopher Crete S.A.” (TIN 998777028), “South Rhodes Investments S.A.” (TIN 099472747), and/or other affiliated companies, having registered office in Rhodes, at Parodos Georgiou Seferi Str, as legally represented.
- The terms “you” and “user” refer to each person who visits or uses this site and/or to each person we interact with through the execution of written agreement or other contract and/or any person who visits our premises or uses our services.
- The terms “site” and “website” refer to mgroup.gr site, which, along with its entire content, is owned by the Group.
- The term “GDPR” refers to the General Data Protection Regulation, namely the Regulation (EU) 2016/679 of the European Parliament and the Council in respect of the protection of natural persons, with regards to the process of personal data, the free movement of this data and the repeal of Directive 95/46/EC.
- The term “Law” refers to the Greek Law 4624/2019, which implemented the measures of GDPR, entered into force on 29.08.2019.
Introduction
We strive to protect and safeguard the privacy and personal data of the users/visitors of this site, our counterparties and our customers, and therefore have so far implemented a series of actions, rules and procedures, to ensure our full compliance with current European and national legislation. This Privacy Notice (hereafter the “Notice“) aims to inform you about the processing of your data in accordance with articles 12-14 of the GDPR and the respective articles of the Law (art. 31 seq.).
Please read the Notice carefully, in order to be informed about the data processed by our Group, how it is protected and what your legal rights are.
We process your personal data on the legal basis of performance of contract and/or compliance with other legal obligations and as the case may be on the basis of legal interest. In addition, we may process your personal data on the legal basis of consent, granted through our website or in person in our hotels and provided you have been previously informed, under this Notice, of the type of data, the purpose(s), the extent of the processing and the recipients. Your consent may be revoked at any time by contacting us at info@mgroup.com.
In any case, when visiting our website and/or using our services, every natural person accepts this Notice and is bound by its terms.
What are “Personal Data” and “Processing of Personal Data” (Article 4 GDPR)
“Personal data” means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is person whose identity can be identified, directly or indirectly, in particular by reference to an identifier such as name, identity number, location data, online identity card, or one or more factors specific to physical, physiological, genetic, psychological, economic, cultural or social identity of that person.
“Processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction .
Personal Data we collect and purposes of processing
By completing the contact form on our website and upon your consent, we collect, as a minimum, the following personal data of the visitors/users: name and e-mail address. From our counterparts, for the fulfillment of the purposes of the contract, we collect indicatively the following personal data: full name, e-mail address, telephone number, etc. When visiting or staying in our premises, we may also have access to Wi-Fi connection data, if used, as well as to video surveillance system material (CCTV), which operates in our premises, where relevant signposting exists, for the protection of persons and goods, in accordance with the respective legislation and the guidelines of the Hellenic Data Protection Authority. The relevant material is stored for seven (7) days, after which it is automatically deleted. In case we find an incident during this period, we isolate part of the video and keep it for one (1) more month, in order to investigate the incident. In case legal proceedings arise, the relevant material shall be stored until a final judgement is issued.
The aforementioned personal data is processed only for the following purposes: a) communication with us, at your own request, b) receiving information regarding our services and any other information you wish to know, c) to fulfill the purposes of our contractual relationship, d) to recruit new employees, e) to send important notices, such as communications about offers, upon your consent, f) for purposes of legal interest (protection of guests, property and goods) and g) to comply with obligations imposed by laws, regulations or Community legislation (including anti-money laundering laws) and the establishment or defense of a legal claim. Your personal data shall not be used for purposes other than those listed above, unless we obtain your prior consent or unless this is required or permitted by applicable law.
Data subject’s rights:
Once you have provided us with your personal data, you may exercise your rights (art. 15 seq. of GDPR and the respective articles, art. 33 seq., of the Law), including the right of access, the right to rectification, the right to restriction of processing, the right to be forgotten and the right to dataportability, where technically feasible, by contacting us by email at info@mgroup.com. Where the processing is based on your consent, you may at any time withdraw it, without affecting the lawfulness of processing based on consent before withdrawal. Please be informed that you have the right to recourse to the Hellenic Data Protection Authority for issues concerning the processing of your personal data. For more information, please visit the Authority’s website using the following link www.dpa.gr.
In case you exercise any of the above rights, we shall use our best efforts to respond to your request in writing within one (1) month, otherwise we shall explain the reasons why a right cannot be exercised, or a request cannot be satisfied in accordance with the GDPR.
We encourage you to keep your personal settings and personal data complete and current. Where applicable laws require so, we will ask you to consent to the processing of your personal data.
Transfer and retention of personal data
We do not share or transmit your personal data to third parties unless this is required by law or is a necessary action to fulfill our contractual obligation to you. Our personnel is properly trained regarding the need to protect your privacy and personal data and we continuously improve the protection of your personal data against unauthorized use, accidental loss, dissemination or destruction.
Time of retention of personal data
We keep your personal data for as long as your contract is in force and is provided by applicable law. Since we have no obligation by law for such maintenance, we shall delete your data as soon as it becomes unnecessary for any of the above purposes. The data you disclose to the Group through the contact form is stored for a period of one (1) year, unless otherwise provided by applicable law. Regarding the CVs of applicants not chosen, they shall be destroyed within six (6) months from their submission.
Security
Our Group implements the appropriate technical and organizational measures to protect your personal data. The information you disclose to us is processed exclusively by specially authorized personnel of the Group, that is under our control and only upon our order. For the prosecution of the processing, we choose persons with respective professional qualifications, that provide sufficient guarantees, in terms of technical knowledge and personal integrity to maintain confidentiality. Our Group uses a variety of security technologies and organizational procedures to protect your personal data, such as access controls, firewalls, antivirus and secure servers.
Children
Our website is general audience site and we do not intentionally collect personal data from children under the age of 15, unless such data is provided by our customers when providing our services. In this case, we take all necessary measures to ensure confidentiality and security of such data. Children should always get their parents’ permission before disclosing any personal data about themselves (such as their names, email addresses etc.).
Cookies
Cookies are small data files, composed of texts and numbers, stored in the browser you use (e.g. Chrome, Mozilla Firefox, Internet Explorer) and contain information that allows the site to memorize important information, in order to make the use of the site www.mgroup.gr more effective and helpful to you. Cookies allow us to enable specific information to make your navigation easier with regards to the provision of the service. For further information regarding the use of cookies please consult our Cookies Policy.
Third-party websites
During your online use of our website, you may encounter links to other websites for your convenience and information. These websites may operate independently from our Group, and may have their own privacy notices, statements or policies. We strongly suggest that you review them to understand how your personal data may be processed in connection with those sites, as we are not responsible for the content of non-Group-owned or managed sites, or the use or privacy practices of those sites.
Updates to this Privacy Notice
We reserve the right to amend or modify the Notice at any time, without notice, in order to monitor and ensure constant compliance with the requirements of GDPR and the Law.
Such changes, amendments, additions or deletions to the Notice shall come into force immediately, namely from the time they are posted on the website. Any use of the site, after such amendment or modification, will be considered as acceptance by the user/visitor of the amendments, modifications, additions or deletions.
How to contact us
For any further questions or comments about this Notice and how we proccess your personal data, please contact us by email at info@mgroup.com.
