Privacy Notice

Last Updated: May 24th, 2018

At XENODOCHIAKES EPIXEIRISIS ELECTRA A.E, we are committed to protecting and respecting your privacy. Please read this notice as it contains important information about how we use personal data that we collect from you or that you provide to us.

Information & Consent

This Privacy Notice describes how we collect, use, process, and disclose your information, including personal information about you (hereinafter, the “User”), in conjunction with your access to and use of our booking system.

By reading this Privacy Notice, the user is hereby informed on how we collect, process and protect personal data furnished through the booking engine.

The User must carefully read this Privacy Notice, which has been written clearly and simply, to facilitate its understanding, and to freely and voluntarily determine whether they wish to provide their personal data, or those of third parties, to XENODOCHIAKES EPIXEIRISIS ELECTRA A.E.

When this notice mentions “booking system,” “booking engine,” “system,” “website,” “platform,” “app,” “webapp,” “services,” “online services,” it refers to all pages and functions under https://electrapalacethessaloniki.reserve-online.net/ unless specified otherwise.

By accessing the platform or providing information, you agree to our privacy practices as set out in this privacy statement. We may change this notice from time to time. You should check this notice frequently to ensure you are aware of the most recent version.

Identity

When this notice mentions “we,” “us,” or “our,”, “data controller,”, “controller,”, it refers to XENODOCHIAKES EPIXEIRISIS ELECTRA A.E.

Data Controller

XENODOCHIAKES EPIXEIRISIS ELECTRA A.E operates this booking system through a data processor, as explained below. For the purposes of the General Data Protection Regulation (“GDPR”) (EU) 2016/679, we are the Data Controller. There is a strict contractual framework between the data controller and the data processor for the protection of your personal information. We are:

Electra Palace Thessaloniki “XENODOCHIAKES EPIXEIRISIS ELECTRA A.E”
9 Aristotelous Sq.
546 24, Thessaloniki
GR

The User may contact our Data Protection Officer:

Data Protection Officer
dpo@electrahotels.gr

Data Processor

WebHotelier operates this booking system on behalf of XENODOCHIAKES EPIXEIRISIS ELECTRA A.E and is committed to protecting the privacy of the users of this system. WebHotelier is:

Revplus Hellas S.A.
5th Km Rhodou-Lindou Ave.
851 00, Rhodes
Greece

For the purposes of the GDPR, where WebHotelier processes your personal data on behalf of XENODOCHIAKES EPIXEIRISIS ELECTRA A.E, WebHotelier is the the Data Processor. When this notice mentions “data processor,” “processor,” “WebHotelier,” it refers to WebHotelier Technologies Ltd.

WebHotelier is a certified PCI-DSS Level 2 Service Provider audited quarterly by Sectigo Limited.

The User may contact WebHotelier's Data Protection Officer:

Data Protection Officer
dpo@webhotelier.net

Obligatory nature of providing the data

The data requested in the forms accessible from the booking engine are, in general, mandatory (unless specified otherwise in the required field) to meet the stated purposes. Accordingly, if they are not provided or are not provided correctly, we will be unable to process the request.

Personal data we collect and process

This will include:

personal information about you which we ask you for (e.g. your name, address, and email address) when you make a booking from our booking engine;
financial details in order to process your booking when we require pre-payment;
details of transactions you carry out through our booking engine and details of the fulfilment of your orders.
our data processor may only collect and process personal data collected and/or processed on behalf of us in accordance with our instructions. WebHotelier cannot process it in any other way or for any other purpose.

We grant permission to our data processor:

to use your personal information for reserving rooms and/or other services for you at XENODOCHIAKES EPIXEIRISIS ELECTRA A.E;
to pass on your financial details to XENODOCHIAKES EPIXEIRISIS ELECTRA A.E and/or appropriate third party (for example, credit card company) for the purpose of confirming or paying for a booking;
to use your information for marketing purposes (where you explicitly agree to this); and
to pre-complete forms and other details on our website to make your next visit to our booking engine easier (e.g. when amending or cancelling a booking).

Social Login:

In the event of registration and/or access through a third-party account, we may collect and access certain information of the User’s profile from the corresponding social network, solely for internal administrative purposes and/or for the purposes indicated above.

Third-party data (e.g. book for a friend)

In the event that the User provides third-party data, they declare that they have the third party’s consent and undertake to provide the interested party -the data holder- with the information contained in this Privacy Notice, duly exonerating us and our data processor from any liability in this regard. However, we may carry out the necessary verifications to verify this fact, adopting the corresponding due diligence measures, in accordance with the data protection regulations.

Sensitive Data

Unless specifically requested, we ask that you not send us, and you not disclose, on or through the Services or otherwise to us, any Sensitive Personal Data (e.g., social security numbers, national identification number, data related to racial or ethnic origin, political opinions, religion, ideological or other beliefs, health, biometrics or genetic characteristics, criminal background, trade union membership, or administrative or criminal proceedings and sanctions).

Use of Services by Minors

The Services are not directed to individuals under the age of sixteen (16), and we request that they not provide Personal Data through the Services.

Purpose of processing personal data

Depending on the User’s requests, the personal data collected will be processed in accordance with the following purposes:

To manage the bookings made, including payment management (where applicable) and the management of the user’s requests and preferences.
To manage registration in loyalty or membership programs, as well as obtaining and redeeming points.
To manage the User’s contact requests with us through the channels provided to this end.
To manage the sending of personalised commercial communications from us, by electronic and/or conventional means, in cases in which the User expressly consents.
To manage the provision of the contracted accommodation service, as well as additional services.
To manage surveys and/or evaluations regarding the quality of the services provided by us and/or the perception of its image as a company.

Data Retention

We will retain your Personal Data for the period necessary to fulfill the purposes outlined in this Privacy Notice unless a longer retention period is required or permitted by law or if the User requests their withdrawal from us, opposes or revokes their consent.

The criteria used to determine our retention periods include:

The length of time we have an ongoing relationship with you and provide the Services to you (for example, for as long as you have an account with us or keep using the Services or if you have a booking that has not yet been fulfilled)
Whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them)
Whether retention is advisable considering our legal position (such as, for statutes of limitations, litigation or regulatory investigations)

Legitimate interest for processing your data

The data processing required in fulfilment of the aforementioned purposes that require the User’s consent cannot be undertaken without said consent.

Likewise, in the event that the User withdraws their consent to any of the processing, this will not affect the legality of the processing carried out previously.

To revoke such consent, the User may contact us through the appropriate channels.

By the same token, in those cases in which it is necessary to process the User’s data for the fulfilment of a legal obligation or for the execution of the existing contractual relationship between us and the User, the processing would be legitimized as it is necessary for compliance with said purposes.

Data Disclosure

We will use and disclose Personal Data as we believe to be necessary or appropriate:

to comply with applicable law, including laws outside your country of residence;
to comply with legal process;
to respond to requests from public and government authorities, including authorities outside your country of residence and to meet national security or law enforcement requirements;
to enforce our terms and conditions;
to protect our operations;
to protect the rights, privacy, safety or property of our own, you or others; and
to allow us to pursue available remedies or limit the damages that we may sustain.

We may use and disclose Other Data for any purpose, except where we are not allowed to under applicable law. In some instances, we may combine Other Data with Personal Data (such as combining your name with your location). If we do, we will treat the combined data as Personal Data as long as it is combined.

International transfers of personal data

We may transfer your personal information to our data processor(s) or/and sub-processor(s) based outside of the EEA for the purposes described in this notice. If we do this, your personal information will continue to be subject to one or more appropriate safeguards set out in the law. These might be the use of model contracts in a form approved by regulators, or having our suppliers sign up to an independent privacy scheme approved by regulators (like the US ‘ Privacy Shield’ scheme).

Our data is stored in the cloud using Amazon Web Services in N. Virginia, USA and in Frankfurt, Germany. If you are accessing any of our systems from outside the USA, you acknowledge that your personal information may be transferred to the USA, a jurisdiction which may have different privacy and data security protections from those of your own jurisdiction, to be processed and stored.

User's Responsibility

The User:

Guarantees that they are of legal age or legally emancipated, where applicable, fully capable, and that the information furnished to us is true, accurate, complete and up-to-date. For these purposes, the User is responsible for the truthfulness of all the data communicated and will keep the information updated, so that said data reflects their actual situation.

Guarantees that he/she has informed third parties on whose behalf he/she has provided data, where applicable, of the aspects contained in this document. Also guarantees that he/she has obtained the third party’s authorisation to provide their data to us for the purposes indicated.

Will be responsible for false or inaccurate information provided through the Website and for damages, whether direct or indirect, that this may cause to us or third parties.

Exercise of Rights

The User may contact us at any time free of charge, to:

To obtain confirmation about whether or not personal data concerning the User are being processed by us.
To access their personal details.
To rectify any inaccurate or incomplete data.
To request the deletion of their personal data when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
To confirm revocation of consent.
To obtain from us the limitation of data processing when any of the conditions provided in the data protection regulations are met.
To request the portability of your data.

Likewise, the user is informed that at any time he/she may file a complaint regarding the protection of their personal data before the competent Data Protection Authority.

Security Measures

We will process the User’s data at all times in an absolute confidential way and maintaining the mandatory duty to secrecy with regard to said data, in accordance with the provisions set out in applicable regulations, and to this end adopting the measures of a technical and organisational nature required to guarantee the security of their data and prevent them from being altered, lost, processed or accessed illegally, depending on the state of the technology, the nature of the stored data and the risks to which they are exposed.

Welcome to ELECTRA HOTELS & RESORTS GROUP

Our Group is comprised of the following companies that operate the Hotels listed next to each company name:

– The societe anonyme under the corporate name “HOTEL ENTERPRISES ELEKTRA SA”, which operates the hotels ELECTRA at 5 Ermou str in Athens and ELECTRA PALACE at Aristotelous Square in Thessaloniki.
Contact details of the data controller: HOTEL ENTERPRISES ELECTRA SA, Head office: 5 Ermou str, Athens, Tax Registration Number: 094075519, Tax Office: FAE ATHINON, Tel.: 2310294000

– The societe anonyme under the corporate name “HOTEL AND TOURISM COMPANY ELECTRA SA”, which operates the hotel ELECTRA PALACE at 18 Navarchou Nikodimou str in Athens.
Contact details of the data controller: HOTEL AND TOURISM COMPANY ELECTRA SA Head office: 18 Navarchou Nikodimou str, Athens, Tax Registration Number: 094030956, Tax Office: FAE ATHINON, Tel.: 2103370000

– The societe anonyme under the corporate name “HOTELS ELECTRA SA”, which operates the hotel ELECTRA PALACE in Rhodes.
Contact details of the data controller: HOTELS ELECTRA SA, Head Office: 5 Ermou str, Athens, Tax Registration Number: 094439368, Tax Office: FAE ATHINON, Tel.: 2103378000

– The societe anonyme under the corporate name “HOTEL ENTERPRISES AGIA DINAMIS SA”, which operates the hotel ELECTRA METROPOLIS at 15 Mitropoleos str in Athens.
Contact details of the data controller: HOTEL ENTERPRISES AGIA DINAMIS SA, distinctive title: ELECTRA METROPOLIS SA, Head Office: 15 Mitropoleos str, Athens, Tax Registration Number: 800648709, Tax Office: FAE ATHINON, Tel.: 21410062000

– The societe anonyme under the corporate name “ELECTRA MANAGEMENT SA”
Contact details of the data controller: ELECTRA MANAGEMENT SA., Head Office: 6 Filellinon str, Athens, Tax Registration Number: 800648709, Tax Office: FAE ATHINON,

– The societe anonyme under the corporate name “ELECTRA KEFALONIA SA”, which operates the hotel ELECTRA KEFALONIA HOTEL & SPA in Kefalonia.
Contact details of the data controller: ELECTRA KEFALONIA SA, Head Office: 2 Bouziki str., Athens, Tax Registration Number: 800966816, Tax Office: FAE ATHINON, Tel.: 2103370006

Α. Objects and purpose of this policy

Our Group, ELECTRA HOTELS & RESORTS GROUP respects your privacy and protects your personal data. Each of the above companies is commercially independent.For any issue that may be addressed herein, you may contact the data protection officer listed below. With this policy we aim to keep you informed of the personal data we collect and process during our operation. Your personal data is collected and maintained for the necessary time, for the specified, explicit and legitimate purposes described below, processed in a lawful, fair and transparent manner, always in accordance with the applicable legal framework and in a manner that guarantees completeness and confidentiality. This data shall be suitable, relevant, appropriate, and not exceed the data required in the light of the foregoing purposes and shall be accurate and, if necessary, updated.

Β. Concepts and Definitions

“Personal data”: any information relating to an identified or identifiable natural person (“data subject”). Identifiable is the natural person whose identity can be directly or indirectly identified, in particular by reference to an identifier such as name, identification number, location data, an online identifier or one of several special characteristics, which expresses the physical, physiological, genetic, mental, commercial, cultural or social identity of this natural person.

“Processing of Personal Data”: any act or series of acts performed with or without the use of automated means on personal data or on personal data sets, such as the collection, registration, organization, structure, storage, adjustment or alteration, retrieval, search for information, use, disclosure by transmission, dissemination or any other form of distribution, link or combination, restriction, deletion or destruction.

“Data Controller” is the natural or legal person, public authority, agency or other body that, alone or in along with others, determines the purposes and manner of processing personal data.

“Performer of the processing” means the natural or legal person, public authority, service or other entity that processes personal data on behalf of the data controller.

“Consent” of the data subject: any indication of a free, specific, explicit and fully aware will, with which the data subject indicates that he or she agrees, with a statement or a clear affirmative action, to the processing of personal data relating to him / her

“Personal data breach“: the breach of security that results in accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access to personal data transmitted, stored or otherwise processed

“Health Data”: personal data related to the physical or mental health of a natural person, including the provision of health care services, and which discloses information about his or her state of health.

“Special categories of personal data/Sensitive personal data” personal data revealing racial or ethnic origin, political beliefs, religious or philosophical beliefs or participation in trade unions, as well as the processing of genetic data, biometric data for the unambiguous identification of face, health data or data concerning the sexual life of a natural person or the sexual orientation.

C. General Principles for the Processing of Personal Data

The ELECTRA HOTELS & RESORTS GROUP ensures that the personal data it processes are

Subject to processing that is lawful and legitimate with respect to the data subject

Collected for specified express and legal purposes

Appropriate, relevant and limited to those necessary for the purposes for which they are processed

Accurate and updated

Processed in such a way as to guarantee the appropriate security of personal data, including their protection against unauthorized or unlawful processing and accidental loss, destruction or damage, by means of appropriate technical or organizational measures.

Retained only for the time required for the processing of personal data. In some cases they may be retained for a longer period, especially if the processing of such data is deemed necessary for:

– the compliance with a legal obligation imposed by a provision of another law.

– the compliance of the ELECTRA HOTELS & RESORTS GROUP with the duty to fulfill a public interest objective.

– archiving for purposes of public interest, scientific or historical research

– for purposes relating to the protection of public health

– for statistical purposes

– for the foundation, opposition, exercise or support of legal claims.

D. Legal Framework for the Protection of Personal Data

In addition to the Regulation (EU) 2016/679 of the European Parliament and of the Council (2016/679) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, any national law with respect to the processing and protection of personal data,
as well as the Directives issued by the Data Protection Authority, shall apply. Indicatively, the following laws are mentioned:

Law 4624/2019 (Measures for the Implementation of the European Parliament’s General Data Protection Regulation [2016/679])

Law 2472/1997 on the protection of individuals from the processing of personal data.

Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data.

Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector.

Directive 1/2011 of the Data Protection Authority on the Use of Video Surveillance Systems for the Protection of Persons and Goods.

Directive 115/2001 of the Data Protection Authority on the Protection of Personal Data in the Field of Labor Relations.

Law 3471/2006 on the protection of personal data and privacy in the field of electronic communications

Regulations of the relevant administrative bodies.

Health Protocols, Acts of Legislative Content, Joint Ministerial Decisions.

Ε. Purposes of Processing

In accordance with the above legal framework, personal data collected by the ELECTRA HOTELS & RESORTS GROUP are used for the following processing purposes:

a) To manage the booking of rooms as well as any other hosting service

b) To manage the relationship with you before, during and after your stay at the hotel

c) For the Company’s compliance with Greek and European Law

d) For marketing purposes

e) For the establishment, recognition, exercise or defense of a right and legal claims

f) To support business processes

g) To improve our hotel services

h) For the security of our information systems

i) For membership acquisition programs such as the Electra Rewards program.

j) For the performance of a task performed in the public interest and in the field of public health

F. Legal basis for the Processing of Personal Data

The ELECTRA HOTELS & RESORTS GROUP processes your personal data transparently, in accordance with the principles of legality, proportionality, confidentiality and integrity, limitation of purpose and accuracy, specific time of data retention and data minimization.

The legal basis for processing your personal data may be:

a) your consent

b) the need to process your data in the context of our contractual obligation or at the pre-contractual stage

c) the need to process your data in accordance with our legal obligation

d) the need to process your data in the context of safeguarding our legitimate interests

e) the need to process data to protect the vital interests of you or the person you accompany

f) the need to export statistics

g) the need for processing to fulfil a duty in the public interest, in particular in the field of public health.

G. Data that the ELECTRA HOTELS & RESORTS GROUP processes

For the above purposes, the ELECTRA HOTELS & RESORTS GROUP collects and processes personal data, including indicatively the following:

G.1 Employees / External Partners: full name, father’s name, mother’s name, year of birth, place of birth, gender, nationality, address, email address, contact phone numbers, identification card number (ID), tax registration number (VAT), AMKA, bank account number (IBAN), marital status, education and training status of the employee/ partner, work experience, curriculum vitae, salary, working hours, medical record / health certificate

Purposes / Legal basis for data processing:

–Managing the working relationship between the ELECTRA HOTELS & RESORTS GROUP and the employee/external partner. The processing of this data is considered necessary for the performance of the employment contract.

– Fulfilling the employer’s obligations of the ELECTRA HOTELS & RESORTS GROUP. The processing of data is necessary for the compliance of the ELECTRA HOTELS & RESORTS GROUP with its legal obligations.

G.2. Prospective Employees: name, surname, contact information, education, work experience, email, nationality, marital status

The ELECTRA HOTELS & RESORTS GROUP collects and processes candidates’ personal data for vacancies. This data is collected by the candidate upon submission of the relevant application. In case of non-recruitment, the CV of the candidate is retained for 2 years to cover any future job opportunities.

Purposes / Legal basis for processing

-Assessment of the candidate’s suitability for a particular job vacancy. The legal basis for processing is the legal interest of the ELECTRA HOTELS & RESORTS GROUP and the consent of the prospective employee.

G.3. Participants, speakers and invited to scientific conferences, actions and events

a) Full name, postal address, status, profession, email.

b) Image data (photo / video recording). As part of the implementation of the actions of the ELECTRA HOTELS & RESORTS GROUP, it is possible to take pictures and / or videotape the various events, conferences or workshops organized by the ELECTRA HOTELS & RESORTS GROUP. This data may be posted on the site or social media managed by the ELECTRA HOTELS & RESORTS GROUP.

Purposes / Legal basis for data processing:

– The purpose is the successful organization. The processing of personal data is considered essential for the successful management and organization of their actions and purposes.

G.4. Hotel Residents / Visitors: full name, passport number, date of birth, credit card number, length of stay, price, email, address, telephone, pricing information

Purposes / Legal basis for data processing:

– Performance of a contract to which the subject is a party

– Consent of the subject

– Compliance with the legal obligation of the ELECTRA HOTELS & RESORTS GROUP.

G.5. Suppliers: Full Name, VAT, IBAN, Telephone, Address, Email

Purposes / Legal basis for data processing:

– Performance of a contract to which the subject is a contractual party

G.6. Special categories of personal data

G.6.1 Employees: The ELECTRA HOTELS & RESORTS GROUP may collect and process data belonging to specific categories of personal data (“sensitive data”), such as data relating to the health of its employees, in order to meet its insurance obligations. Electra HOTELS & RESORTS GROUP may also process health data in the context of the obligation to comply with the National Legislation and the application of the Health Protocols, as they apply each time. Similarly, in exceptional cases, when required by applicable law, the ELECTRA HOTELS & RESORTS GROUP may collect and process data relating to criminal convictions or offenses, such as copies of criminal records, always respecting the principle of proportionality.

Residents / Visitors / Conference Participants: The ELECTRA HOTELS & RESORTS GROUP may process data belonging to specific categories of personal data (“sensitive data”), such as data on eating habits, allergies, religious beliefs, illnesses etc.. Electra HOTELS & RESORTS GROUP may also process health data in the context of the obligation to comply with the National Legislation and the application of the Health Protocols, as they apply each time.

Purposes / Legal basis for data processing in the above cases under Ε.6:

– Fulfillment of the obligations and exercise of specific rights of the ELECTRA HOTELS & RESORTS GROUP or the data subject in the field of labor law and social security and social protection law.

– Protecting the data subject’s vital interests

– The fulfilment of a duty in the public interest, in the field of public health.

G.6.2 Communication Data

Persons who have expressed their wish through valid consent to receive news and updates from the ELECTRA HOTELS & RESORTS GROUP.

Purposes / Legal basis for data processing:

Consent of persons wishing to receive updates and offers from the ELECTRA HOTELS & RESORTS GROUP

Η. Transmission of Data

The entire workforce of the ELECTRA HOTELS & RESORTS GROUP that processes your personal data is contractually bound by the terms of confidentiality and privacy of your data. At ELECTRA HOTELS & RESORTS GROUP, it is part of our philosophy and our basic principle that we shall not disclose your information to third parties for their own independent business or marketing purposes without your consent.

However, we may share your information with the following:

Affiliate companies.Your information may be shared with affiliates companies of the ELECTRA HOTELS & RESORTS GROUP.

Business partners. We may also share your information with trusted business partners. These partners may use your information to provide the services you requested and to provide you with promotional material, advertisments, and other material, in the event you have given your consent.

Service providers and / or any third party who may undertake the processing on our behalf. We may also disclose your information to companies that provide services on our behalf, such as IT subcontractors, companies that send bulk emails on our behalf, banks, credit card issuers, law firms, mail service companies, print service companies, etc.

Credit Approval: When you apply for a credit, your personal information is used and disclosed to appropriate third parties in accordance with the applicable law, in order to decide on granting and maintaining a credit limit for you.

Other third parties with your consent or by your order. In addition to the disclosures described in this Privacy Policy, we may share information about you with third parties if you give your consent or request it.

Public Bodies (e.g., National Public Health Organization), where expressly provided for by national legislation.

Exceptionally, the following are allowed to have access to your personal data:

a) the judicial and prosecutorial authorities in the exercise of their functions of their own motion or at the request of a third party claiming a legitimate interest and in accordance with lawful procedures;

b) other bodies of the Greek State, which by virtue of their statutes have such a right and competence.

H. Data Retention Time

We take reasonable steps to ensure that your personal information is retained only for as long as it is necessary and for the purpose for which it was collected or for as long as it is required under contract or applicable law.

The CVs collected by the relevant HR department are kept for two years and then destroyed.

Tax information is maintained in accordance with tax law.

Ι. Rights of the Subjects of Personal Data

The ELECTRA HOTELS & RESORTS GROUP ensures that data subjects are able at any time to exercise their rights under the law regarding the collection and processing of personal data. These rights are as follows:

● The right to access the data.

● The right to correct the data.

● The right to delete data (“right to forget”).

●The right to limit the processing of data.

●The right to data portability.

●The right to object to the processing of data.

Any request by the individual/ subject is submitted to the ELECTRA HOTELS & RESORTS GROUP at: dpo@electrahotels.gr

The ELECTRA HOTELS & RESORTS GROUP will respond to your request free of charge, without delay and in any event within one month upon receipt of the request, except in exceptional cases, so that the above deadline may be extended by a further two months if necessary, taking into account the complexity of the request and/or the number of requests. The ELECTRA HOTELS & RESORTS GROUP will inform you of any extension within one month upon receipt of the request, as well as of the reasons for the delay.

In the event that the satisfaction of your request is impossible, the ELECTRA HOTELS & RESORTS GROUP will inform you within one month upon receipt of the request, of the relevant reasons and of the possibility to file a complaint with the Data Protection Authority, as well as about your right to appeal to the competent judicial authorities.

If your claim is deemed by the ELECTRA HOTELS & RESORTS GROUP to be manifestly unfounded or excessive, it may give rise to the charge of a reasonable and proportionate fee, taking into account administrative costs to satisfy it or refusing to process your claim.

ΙΑ. DPO information

For any request regarding the processing of your personal data, please refer to the Data Protection Officer (DPO) of the ELECTRA HOTELS & RESORTS GROUP:

Full name: Giannis Bilianis

Τelephone: (+30) 2106462101

E-mail: dpo@electrahotels.gr

Website: https://www.electrahotels.gr

Address: 6 Filellinon Street, Athens, PC: 10557

ΙΒ. Right to report to the Competent Authority.

In case you feel that your privacy is in any way affected, you may contact the Hellenic Data Protection Authority (www.dpa.gr, 1-3 Kifissias Avenue, 115 23, Athens, +30 210 6475600, +30 210 6475628, contact@dpa.gr).

ΙC. Changes to this Policy

The ELECTRA HOTELS & RESORTS GROUP may unilaterally revise this Policy at any time for reasons of compliance with regulatory changes or for operational purposes.

We encourage you to review this Policy regularly to find out how the ELECTRA HOTELS & RESORTS GROUP manages and processes your personal data.

This Policy was posted on 29.04.2021.

For the Terms of Use please click here.