If you wish to use this website of the company under the Lefkada Booking brand, you indicate that you accept the privacy policy / terms of personal data protection, as detailed below.

If you do not agree to our privacy and data protection policy, DO NOT access or browse our website, send messages or attempt to contact us.

This policy applies only to data collected directly from this website and does not apply to information collected through any third party website, third party service providers (such as ISPs, etc.).
Our website may contain web links that refer to other websites (facebook, instagram, twitter, etc.). We declare that we have no responsibility for the data processing carried out by these websites.

1. Identity of the Data Controller
Personal data controller:
Lefkada Booking
Address 
TEL. 2810 360 814
E-mail: info@lefkadabooking.gr

2. Collection and Processing of personal data

2.1 Visiting/Browsing our website
When entering, visiting and browsing our website, the following information is collected and recorded:

a) IP address of your computer
The above data is necessary to be collected by the website in order to enable your access to the website.
They are kept for a period of 30 days for security reasons to enable the investigation of security breaches and malicious attacks.

The legal basis for data processing is the existence of a legal interest of the data controller according to article 6 par. 1 f of the General Regulation on the Protection of Personal Data to enable your access to the website.
Please note that the website uses analysis and targeting cookies as detailed below, in particular in Section 12 of this privacy and data protection policy.

2.2 Communication
2.2.1 Sending Communication Messages
You can send questions to us through the contact form.

For the purpose of communicating with us and to send us a message, it is necessary to fill in the relevant forms:

your name
email adress
theme
message content
phone
address
city

By sending the message you declare that the information you have used when registering it is true and accurate and that it has not used personal data or any information of a third natural or legal person.
The user of the website is solely responsible for the content he sends to us and assumes all responsibility and the restoration of any kind of damage caused to our company or to third parties by his illegal behavior and the violation of the terms of this website.

Types of data collected and processed
The data collected by our company in this context are:
a) name
b) email address
c) message subject and content
d) telephone
e) address
f) city

Legal basis of the processing is
• on the one hand, the consent of the subject, who voluntarily sends his requests/queries through the relevant technical options of our company's website and
• on the other hand, the legal interest of our company, for the purpose of answering/responding to the request/question submitted by the user of the website.
The data in question is kept for the period of time that the communication and/or professional/contractual relationship between us lasts and is required for the purpose of the processing.

If there is no cooperation and contractual relationship between us, then your data will be deleted after five years have passed since they were sent and in any case after the completion of communication between us, unless there are legitimate reasons that require their further retention (e.g. e.g. avoidance of limitation of claims, legal dispute in pre-contractual stage, or stage of negotiations, etc.).
In case of cooperation and contractual relationship between us, the data is kept for as long as required by law, until the statute of limitations of relevant claims that our company has by law to defend its rights.

2.2.2 Telephone Communication
You can contact our company by phone by calling the phone numbers listed on our company's website.

We inform you that conversations from calls, both incoming and outgoing, are recorded by our company.

The legal basis of the processing is our cooperation and the company's legal interest in having evidence

personal information about conversations, transactions and requests made by telephone.

Recorded conversations are stored and retained for one year unless there is pending legal proceedings or an investigation by judicial, prosecutorial or other authorities, in which case they are retained until a final decision is issued.

3. Declaration of accuracy and legal use of personal information:
By using the website, communicating, sending a communication request or by sending any kind of content or data through relevant services or relevant form provided to you by our company, you agree and expressly and unconditionally declare that the information you have used is true and accurate and that you have not used unauthorized personal data or any information of a third natural or legal person.

4. Responsibility:
The user of the website (i.e. you) is solely responsible for the content and personal or any other kind of information, which he sends through a contact form or communicates through a telephone call to our company and assumes all responsibility as well as the responsibility to restore any type of damage caused from his illegal behavior to any natural or legal person.

5. Data retention period
As already mentioned above, the personal data of the users of our website is not kept for an indefinite period of time, unless there is a legal reason.

They are kept for an indefinite period of time, in the event that it is required by law due to an ongoing judicial process or prosecutorial investigation and until the issuance of an irrevocable decision.

Data collected through cookies or other internet tracking technologies directly from third party providers (e.g. Google, Facebook, etc.) are retained for the period of time defined by the third party in accordance with the confidentiality and privacy policy it applies.

6. Recipients of the data
Recipients of your data are:
a) our company's staff, who are committed to privacy and confidentiality and our company's security and data protection policy
b) external partners of our company, if this is required by the purpose of the processing, who are committed to confidentiality and confidentiality and the security and data protection policy of our company
c) processors, i.e. natural or legal persons, who process the data on our behalf in the context of the processing purposes as set out above. The processors have committed in writing with our company to comply with the current legislative framework for the protection of personal data, not to disclose the data to third parties and to take the appropriate technical and organizational security measures as defined by the personal data protection regulation .
d) public, prosecutorial, police authorities if there is a relevant request for disclosure or provision of any information or data.

7. Rights of data subjects
7.1 The data subject – user of the website that falls under the scope of the General Regulation on the Protection of Personal Data 679/2016 has the following rights:
a) Right of access (Article 15)
b) Right to rectification (Article 16)
c) Right to erasure (Article 17)
d) Right to restriction of processing (Article 18)
e) Right to information (Article 19)
f) Portability rights (Article 20)
g) Right to withdraw consent (article 7 par. 3)
h) Right to lodge a complaint (Article 77)

7.2 Right to Object
The data subject has the right to object, at any time and for reasons related to his particular situation, to the processing of personal data concerning him, which is based on Article 6 paragraph 1 letter e) or f), including profiling under the provisions in question. Our company does not process personal data unless there are compelling and legitimate reasons for the processing that override the interests, rights and freedoms of the data subject or to establish, exercise or support legal claims.

8. Submitting a request/complaint:
In case you want to exercise your rights or submit a request regarding the protection of personal data and this policy, you can send an email to the address: dpo@earton-services.gr.

In order to proceed with your identification and provide you with the information required, we reserve the right to ask you for further information for the purpose of confirming your identity.
If this is not possible, you will receive a reasoned response as to why we are not responding to your request.

9. Data Security.
Our company takes measures for a security of data, which are kept electronically but also possibly in physical form. It implements SSL technology. And the databases connected to its website are installed on the server of a company providing related services within the EU. All data is kept in an encrypted form.

The company processes any personal data of website users in a way that ensures compliance with the applicable legal framework for the protection of personal data. Without prejudice to what is specifically mentioned in this policy, our company does not transmit or sell the data collected through the website in the above mentioned ways to third parties, legal or natural persons. The company's staff and its external partners are committed in writing to the observance of confidentiality and the data protection policy of our company.