Privacy Notice

PRIVACY NOTICE

1. PREAMBLE

This website is owned and operated by the company under the name "IRIDANOS - OINAMPELOS SA TOURIST HOTELS AND RURAL BUSINESSES/ ENTERPRISES" and the distinctive title "KTIMA AKRANI- IRIDANOS - OINAMPELOS SA"(“The Company”, “we”)based in the Αsfendiou area of Kos, Greece, which is committed to complying with any applicable Data Protection Legislation.

This Privacy Notice provides information on the collection of personal data during the use of this Website (“The Website”). It also explains how this personal data is used, shared and protected, as well as how the Website users (“the users”, “you”, “data subjects”) can exercise their rights in this respect.

2. PURPOSE AND LEGAL BASIS OF DATA PROCESSING, DATA RETENTION

	Purpose of  Data Processing	The categories of personal data we collect	Legal Basis of Data Processing	Data Retention Period
1	Ensuring that the Website operates properly	IP address, cookies, metadata: details about the type of the device (which can include unique device identifying numbers), the operating system and the browser.	The processing of this personal data is necessary for the performance of a contract or to take steps at your request prior to entering into a contract.	We process your personal data during your visit. Information collected though cookies  are further kept according to the Website’s Cookies Policy
2	Sales	Name, surname, email address, (mobile) phone number, full   (billing and/or shipping) address	The processing of this personal data is necessary for the performance of a contract or to take steps at your  request prior to entering into a contract.	The personal data is kept for 20 years according to the tax legislation
3	Handling your queries/ requests sent through the contact form	Name, surname, email address, any other personal data that may be included in a message sent through the contact form.	We process these categories of personal data on the legal basis of the legitimate interests pursued by the Company, for compliance with a legal obligation to which the Company is subject or in order to take steps at your request prior to entering into a contract -depending on the nature of your message.	We retain your personal data until we have adequately responded to your request. In case that your request relates to a legal claim, the retention period will be defined according to the relevant legislation.
4	Creating a user account	Name, surname, email address, user –account password and any personal data stored in the account (i.e. user’s “wishlist”). When users create accounts using “Facebook”, we collect their username, email address and any other information that becomes available to us according to the relevant Facebook Policy.	The processing of this personal data is necessary for the performance of a contract or to take steps at your request prior to entering into a contract.	We retain your personal data until your account has been deleted.
5	Signing up for our Newsletter	Email Address	Your consent	We retain your personal data for six (6) months after you unsubscribe from our Newsletter- retrieve your consent.

 

3. WHO WE MIGHT SHARE YOUR PERSONAL DATA WITH

We only share your personal data when this is necessary to fulfill the above-mentioned purposes, in particular with:

1. Authorized employees;
2. our contractors, namely third-parties providing services related to our website (web development, maintenance and hosting providers) for the purposes of the proper functioning of the Website.
3. third parties that undertake to provide services to you on behalf of our Company, e.g. express delivery companies.
4. Consultants/advisors/auditors for the purpose of seeking professional advice or meeting our audit responsibilities when deemed necessary;
5. lawyers, insurance companies/brokers when deemed necessary;
6. any third party in order to meet our legal and regulatory obligations, including statutory or regulatory reporting or the detection or prevention of unlawful acts, tax, regulatory or other public authorities.

Such sharing or transfers of personal data take place only when appropriate safeguards apply (e.g. appropriate contractual clauses, data processing agreements, policies/ rules for intra-Company disclosures of personal data, etc.).

4. DATA SUBJECTS’ RIGHTS

In accordance with the applicable Data Protection Legislation, you have the following rights:

• The right to be informed;
• The right to withdraw consent for future processing of that data (in case that a processing activity is based on your consent);
• The right to request access to and rectification of your personal data (under the circumstances laid down in the GDPR);
• The right to request restriction of the processing of your personal data (under the circumstances laid down in the GDPR);
• The right to request deletion/erasure of your personal data;
• The right to personal data portability (under the circumstances laid down in the GDPR).

You have the right to lodge a complaint with the competent data protection authority, the Hellenic Data Protection Authority, located in Athens, 1 – 3 Kifisias Avenue, P.C. 115 23 (tel. +30 210 64 75 628 – email: complaints@dpa.gr).

5. CONTACT US

To exercise any of the Data Subjects’ rights or make a complaint to us relating to your privacy or for any other questions about the use of your personal data, you can send an email to the Company’s DPO, email: dpo@koswinery.gr

6. CHANGES

We may change this Privacy Notice. Any changes will become effective upon upload of the revised documents to the Website. We encourage you to periodically review this Policy to stay informed about how we collect, use, and share your personal data.