This data protection declaration informs you about how we process your personal data in connection with our service at www.pearl-of-thassos.com.
Responsible for Data Processing
Pearl of Thassos
Skala Potamias
Email: info@pearl-of-thassos.com
Data Protection Officer Contact Details
We have not appointed a data protection officer and are not legally required to do so.
Information on Processing Activities
We indicate the legal basis for individual processing operations. If we intend to transfer data to third countries outside the European Union (EU) or the European Economic Area (EEA), this will also be indicated.
Access (Art. 15 GDPR): You can request information about your personal data processed by us, including information regarding processing purposes, categories of processed personal data, recipients or categories of recipients to whom your data have been or will be disclosed, planned storage duration or criteria for determining storage duration, origin of your data if not collected from you, existence of automated decision-making including profiling and, if applicable, meaningful information about its details such as logic, scope, and impacts, the right to rectification or deletion of your data, the right to restrict processing or to object to this processing, and the right to lodge a complaint with the supervisory authority. You also have the right to know whether personal data have been transferred to a third country or an international organization and – if so – about the appropriate safeguards in connection with the transfer.
Rectification (Art. 16 GDPR): You can request immediate rectification of incorrect or completion of your personal data stored with us.
Deletion (Art. 17 GDPR): You can request deletion of your personal data stored with us, unless processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.
Restriction (Art. 18 GDPR): You can request restriction of processing of your personal data, if the accuracy of the data is contested by you, the processing is unlawful, you reject their deletion and we no longer need the data, you require the data for the establishment, exercise, or defense of legal claims, or you have objected to processing pursuant to Art. 21 GDPR, but it is not yet determined whether our legitimate grounds for data processing override your interests.
Data Portability (Art. 20 GDPR): You can request the transfer of your personal data that you have provided to us in a structured, common, and machine-readable format or the transfer to another responsible party.
Objection (Art. 21 GDPR): You can object to the processing of your personal data, if there are reasons arising from your particular situation or if the objection is directed against direct advertising, and the legal basis for the processing of personal data is legitimate interests according to Art. 6 Para. 1 S. 1 lit. f GDPR.
Withdraw Consent (Art. 7 Para. 3 GDPR): You can revoke your consent given to us at any time. This means that we may not continue the data processing based on this consent for the future.
Complaint (Art. 77 GDPR): You can lodge a complaint with a supervisory authority, especially in the member state of your habitual residence, your place of work, or the place of the alleged violation. A list of contact details of the data protection officers in the federal states can be found at Data Protection Officers List.
If you wish to assert the aforementioned rights of data subjects, you can contact us or our data protection officer at any time using the contact details mentioned above.
Unless otherwise regulated in this data protection declaration for individual cases, personal data will be deleted if these data are no longer necessary for the purposes for which they were collected or otherwise processed and if the deletion does not conflict with any legal storage obligations.
We delete the personal data processed by us under the conditions of Art. 17 GDPR upon request. Personal data necessary for other legally permissible purposes will not be deleted. For example, this applies to personal data necessary for pursuing any claims to which we are entitled or that must be retained by us for commercial or tax reasons.
In our service, we deploy cookies. Cookies are small text files that your browser automatically creates and stores on your end device (laptop, tablet, smartphone, PC, etc.) when you visit our site. Cookies do not cause any damage to your end device, do not contain viruses, or other malicious software. A cookie stores information related to the specific end device used. However, this does not mean that we directly obtain knowledge of your identity. The primary purpose of cookies is to make our internet offer more user-friendly, effective, and secure.
We use the WordPress content management system for our internet offer. Within this system, we utilize the Complianz plugin. Complianz helps us create a cookie banner and an overview of the cookies we use for our offer. You can view this overview at Cookie Overview.
If necessary, we also obtain your consent for the use of cookies and the associated data processing via Complianz. For each cookie, the name, purpose, any third-party access, as well as its function duration or after what period a cookie is deleted are specified. Session cookies are deleted after your respective use of our offer or after ending the browser session.
Complianz records the date, time, and extent of the consent you have given. If you agree or disagree via the form displayed on our website by Complianz that additional cookies may be set on your end device by our internet offer beyond the necessary cookies, Complianz stores this consent or rejection for one year in cookies on your end device. Our website can read out from these cookies stored in your browser or end device by Complianz during later visits, which cookies we may set. You can change or withdraw the consent declarations you have given at any time at www.fami-pack.com. Alternatively, you can also delete the cookies set by our internet offer in your end device or browser. However, you will then be asked again to give your consent when you visit our internet offer again.
The use of Complianz assists us in obtaining the necessary consent for our internet offer in an appropriate form to be able to use cookies lawfully. By clicking to activate, you consent to us storing and processing your personal data as described. Without this data transfer, the use of non-essential cookies in our internet offer is not possible. The legal basis for the processing of your personal data is your consent according to Art. 6 Abs. 1 lit. a GDPR.
Access Data and Logfiles
When accessing our internet offer or individual pages, the browser on your end device automatically sends information to the server of our internet offer. This information is stored in so-called log files by us or on our behalf by our hosting provider.
The following information is stored:
These data are processed for the following purposes:
These data are anonymized after 6 months, as far as they are no longer necessary for other purposes (for example, defense or assertion of claims).
The legal basis for data processing is Art. 6 Abs. 1 S. 1 lit. f GDPR. Our legitimate interest follows from the purposes for data collection outlined above.
Email Direct Advertising to Customers
If you are our customer and we have received your email address in connection with the use of our services, we may use your email address to directly advertise our own similar goods or services. This is applicable only if you have not objected, and we have clearly and distinctly indicated the possibility of objection when collecting the email address and with each use. For email direct advertising, we process your email address, your name, your company affiliation if you have used our offers as an employee of a company, the data we have collected about your use of our offers, and the type of goods or services you have obtained from us, to tailor our offers individually to you. The legal basis for processing is § 7 Abs. 3 UWG and our legitimate interest in direct marketing according to Art. 6 Abs. 1 lit. f GDPR.
Contact for Free Initial Consultation
If you use our contact form, you need to provide your salutation, name, email address, and phone number, so we can contact you and process your request for a free initial consultation. Additionally, you need to provide information about the nature and subject of your professional activity, your availability, and the reasons for seeking our free initial consultation.
Your data are processed based on Art. 6 Abs. 1 S. 1 lit. a GDPR, on the basis of your voluntarily given consent. All personal data collected through our contact form are deleted after handling your inquiry, unless the data are required for other processes (e.g., subsequent contract conclusion for the implementation of the free initial consultation or provision of other services by us or defense against claims asserted against us). Without this consent, you cannot contact us and avail of the free initial consultation. You can also contact us for a free initial consultation through other communication channels.
If you contact us using our contact form for the free initial consultation and transmit personal data to us, we use these data exclusively to process your concern and then delete them.
General Contact
If you contact us using the contact details published as part of our internet offer (e.g., by email) and transmit personal data to us, we use these data to process your concern based on Art. 6 Abs. 1 S. 1 lit. b GDPR, if your inquiry is related to the fulfillment of a contract or is necessary for pre-contractual measures. In all other cases, the processing is based on your consent according to Art. 6 Abs. 1 S. 1 lit. a GDPR and/or on our legitimate interest in effectively processing the inquiries directed at us according to Art. 6 Abs. 1 S. 1 lit. f GDPR. All personal data collected during general contact are deleted after handling your inquiry, unless the data are required for other processes (e.g., subsequent contract conclusion or defense against claims asserted against us) or must be stored for other reasons (e.g., due to mandatory legal retention periods).
Google Analytics
Where you have given your consent, this website uses Google Analytics 4, a web analytics service provided by Google LLC. The responsible entity for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
Scope of Processing
Google Analytics uses cookies that enable an analysis of your use of our websites. The information generated by the cookies about your use of this website is usually transferred to a Google server in the USA and stored there.
We use the User-ID function. With the User-ID, we can assign a unique, persistent ID to one or more sessions (and the activities within these sessions) and analyze user behavior across devices.
We use Google Signals. This allows Google Analytics to capture additional information about users who have activated personalized ads (interests and demographic data), and ads can be delivered to these users in cross-device remarketing campaigns.
With Google Analytics 4, IP address anonymization is activated by default. Due to IP anonymization, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
During your website visit, your user behavior is recorded in the form of “events”. Events can be:
Purposes of Processing
On behalf of the operator of this website, Google will use this information to evaluate your use of the website and to compile reports on website activities. The reports provided by Google Analytics serve to analyze the performance of our website and the success of our marketing campaigns.
Recipients
Recipients of the data can be:
It cannot be ruled out that US authorities may access the data stored by Google.
Third-Country Transfer
Insofar as data are processed outside the EU/EEA and there is no data protection level equivalent to European standards, we have concluded EU standard contractual clauses with the service provider to establish an adequate level of data protection. The parent company of Google Ireland, Google LLC, is based in California, USA. Data transfer to the USA and access by US authorities to the data stored by Google cannot be excluded. Currently, from a data protection perspective, the USA is considered a third country. You may not have the same rights there as within the EU/EEA. You may not have legal remedies against authorities’ access.
Storage Duration
Data sent by us and linked with cookies are automatically deleted after 14 months. Deletion of data whose retention period has been reached occurs automatically once a month.
Legal Basis
The legal basis for this data processing is your consent according to Art. 6 Abs. 1 S. 1 lit. a GDPR.
For more detailed information on the terms of use of Google Analytics and Google’s data protection, please visit Google Analytics Terms and Google Privacy Policies.
Perched on the tranquil edges of the emerald Aegean Sea, our hotel offers an unrivaled sanctuary where the sky kisses the ocean. Nestled in the heart of Thassos, Greece’s hidden gem, each window frames a picture-perfect postcard of the endless blue horizon.