PRIVACY NOTICE
Preamble
This Privacy Notice applies to www.santacruz-watersports.com, a service provided by the company VAFOPOYLOS O.E., registered under the Greek Laws, located at Poseidonos Avenue, 186, Marathon, Schinias, Postal Code 19007, Attica, Greece (herein website).
Our website www.santacruz-watersports.com recognizes and respects the right to protection of personal data of users, in accordance with European Regulation 2016/679 and the Law 4624/2019. This notice describes the collection and processing of user data when visiting or using the services provided by our website. The visitor of our website and / or user of our services must carefully read the terms and conditions of protection of his personal information mentioned herein.
Managed by VAFOPOYLOS O.E. (herein company)
Address: Poseidonos Avenue, 186, Marathon, Schinias, PC 19007, Attica, Greece
Email: info@santacruz-watersports.com
Phone: +6943521743 / +6944383878
DEFINITIONS
What is personal data
Personal data is any information that concerns an identified or identifiable natural person ("data subject"), such as name, e-mail address, VAT number, etc. Identifiable is defined as a natural person whose identity can be verified, directly or indirectly, in particular by reference to an identifier, such as name, identity number, location data, online identifier (IP address, e- mail, etc.) or one or more factors that characterize his physical, physiological, genetic, psychological, economic, cultural or social identity.
What is special category data
Specific categories of personal data are personal data that reveal racial or ethnic origin, political beliefs, religious or philosophical beliefs or trade union affiliation, or the processing of genetic, biometric data for the purpose of identification of a person, data relating to health or data relating to the sexual life of a natural person or sexual orientation.
What is personal data processing
Processing of personal data is any act or series of operations performed with or without the use of automated means, on personal data, such as the collection, registration, organization, structure, storage, adaptation, modification, retrieval, use, transmission to dissemination, correlation, combination, restriction, deletion and destruction of personal data.
What is the controller
The controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and the manner of processing personal data.
What is the processor
The processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller. The processing of data by public authorities in the context of a specific investigation under Union or Member State law shall be carried out in accordance with the applicable data protection rules according to the purposes of the processing.
What is the consent of the data subject
The consent of the data subject is any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
STATEMENTS
Purpose of processing your personal data
The company collects and processes personal data of visitors of the website for the following purposes and only to the extent absolutely necessary for the effective service of these purposes. These data are always relevant and not more than what is required in view of the following purposes, and if inaccurate and, if necessary, are updated.
The purposes of processing your data are:
submit a quote for a reservation, an event, watersports booking,
information and participation in events-actions organized by the company,
communication with the company.
In particular, the collection and processing of personal data is based on the following legal bases:
processing is necessary for the performance of a contract to which the data subject (user) is a party or to take action at the request of the data subject prior to the conclusion of a contract (reservation)
processing is necessary for the purposes of the legitimate interests pursued by the controller (VAFOPOYLOS O.E.) in this case (information and communication).
Collection of data during your navigation on our website
When visiting and navigating our website, www.santacruz-watersports.com, the user's network protocol address is automatically recorded, which are used exclusively and only for statistical purposes of traffic in the web presentation. In addition, this website uses only one type of cookie, the strictly necessary ones. These cookies are strictly required for the operation of our website. You can find out more details in the Cookies Policy.
We provide the possibility of communication, by sending comments through a contact form, in which the name, e-mail address and telephone number of the user who wishes to contact us are registered.
Data transfers outside the EU
The personal data of the visitors and / or users of our website are transmitted outside the EU through the Squarespace application. This application helps us receive your quotes through our website. The transfer of your data is necessary for the execution of a contract between the company and the users or in a pre-contractual phase upon your request.
Data retention
The personal data concerning the visitors of the website are collected and kept for the absolutely necessary time and then are deleted. In particular, data from visits are automatically deleted after six months and contact details, unless otherwise specified by law.
Data Security
To protect the personal data of users and visitors of our website we use measures to prevent the risk of loss, misuse, unauthorized access and disclosure of your personal information.
Your Rights
With regard to the protection of personal data concerning you, you have the following rights:
1. the right of access, i.e. the right to be informed if personal data concerning you are being processed;
2. the right to rectify, i.e. the right to demand the correction of inaccurate personal data;
3. the right to delete, i.e. the right to request the deletion of personal data concerning you;
4. the right to restrict processing when the accuracy of the data is disputed, is illegal or for other reasons;
5. the right to portability, i.e. the right to request to receive the data relating to you in a structured, commonly used and machine-readable format, as well as to transfer this data to another e-processor; and
6. the right to object to the processing of your personal data, unless there are compelling and legitimate reasons for the processing which outweigh your interests, rights and freedoms.
For the exercise of your rights, under the restrictions of the current legislation (Regulation 2016/679), you can contact the company, at:
Address: Poseidonos Avenue, 186, Marathon, Schinias, PC 19007, Attica, Greece
Email: info@santacruz-watersports.com
Phone: +6943521743 / +6944383878
Right of termination
According to Regulation no. 679/2016, you have the right, if you consider that your rights regarding the protection of your personal data are violated, to file a complaint to the Data Protection Authority, which is based in Athens (1-3 Kifissias, PC 11523), by phone +302106475600 or by e-mail contact@dpa.gr.
This Notice will be updated with any changes to the services offered or with any additions in general.