VOURYIA PRIVACY POLICY
NOTICE TO THE DATA SUBJECT
This Privacy Policy (hereinafter referred to as “Policy “) describes how VOURYIA HANDCRAFTED TRAVEL EXPERIENCES. (hereinafter referred to as “Vouryia” and/or “Vouryia Handcrafted Travel Experiences” and/or “we” and/or “our” and/or “us”), with registered office in Ath anassiou Diakou Str., No 30, P.C. 14671 Nea Erythraia-Athens, Greece, uses your personal data collected via its website www.vouryia.com (hereinafter referred to as “Website “) and by any other means (e.g., via telephone calls, social media, cookies, etc.). Please read this Policy carefully.
Vouryia, as data controller reassures you that the protection of your personal data is of paramount importance and informs you pursuant to the General Data Protection Regulation (EU) 2016/679 and the respective provisions of the applicable Greek legislation on the protection of personal data, that we or third parties, at our request or on our behalf, shall process your personal data, either in view of the establishment of your contractual relationship with Vouryia or as part of your existing contractual relationship therewith, for a service.
Generally, the type of personal information we collect about you is limited to any information which is necessary to enable the provision of any services you purchase from VOURYIA HANDCRAFTED TRAVEL EXPERIENCES, such as your cultural and culinary tours, guided tours, workshops, cooking lessons, team building activities and other services, or to arrange the provision or purchase of ancillary services and/or products on your behalf from 3rd party suppliers, or to provide information about such services.
(Α). What personal data does Vouryia collect?
Vouryia processes Data that enable the use of our services, such as:
Your identification data: such as surname, name, age, sex, ID number, passport details and nationality.
Your contact data: such as postal and e-mail address and mobile phone number, hotel in which you are staying, company name.
Vouryia process Data that enable the use of Vouryia’s website:
Recognition data of your electronic identity, such as your IP Address and data from the use of electronic or/and digital products and services of Vouryia, (e.g. cookies – see cookies policy here).
Vouryia processes data from transaction payments and from the provision of payment services. Payment details (such as credit card name owner, credit card expiry date, credit card type, credit card issuer and the last four digits of credit card number).
Image data from photos and videos taken by Vouryia during the Experiences
Vouryia processes Data on your health and the health of your dependent member’s and/or your family members, such as:
Dietary Restrictions and/or Preferences
General Health Condition general health
When you are the one purchasing any service from Vouryia on behalf of any other person or person(s) (as above referred), you agree you have obtained the consent of said person or persons to collect, use and disclose their personal information in accordance with this Privacy Policy and that you have otherwise made the other person or persons aware of this Privacy Policy. If you become aware that your personal information has been provided to us by another person without your consent, or if you did not obtain consent before providing another person’s personal information to us, you should notify us immediately in written.
(Β). Where does Vouryia collect your personal data from?
Vouryia collects identification data, contact data information directly from you, when you deal with us either in person, by telephone, letter, facsimile, email or when you visit our website.
Vouryia collects personal information about you when you purchase or make enquires about cultural and culinary tours, guided tours, workshops, cooking lessons, team building activities and other services, when you enter competitions, when you register for promotions, when you subscribe to receive marketing from us (e.g. e-newsletters) or when you request brochures or other information from us. We may also collect your personal information when you complete surveys or provide us with feedback.
Vouryia collects data regarding transactional payments either directly from you or from the payment service providers, at your request.
Vouryia collects recognition data of your electronic identity, such as your IP Address, data from the use of electronic or/and digital products and services is collected by cookies (see cookies policy here) or/and publicly accessible sources, including social media networks and network service providers (indicatively Google, YouTube)
Vouryia collects Health data as submitted on your own initiative either directly by you or by a person authorized by you.
Vouryia collects Image data from Vouryia’s recording systems (camera used on Experiences)
Vouryia in some circumstances may collect personal information about you from a third party. This includes where a person purchases or reserves any service from Vouryia on your behalf, such as (but not limited to) a family or group reservation, or a reservation made for you by a travel agent. Where this occurs, we will rely on the authority of the person purchasing such service to act on behalf of any other traveler/participant on the reservation.
Vouryia collects data by third-party providers that help us provide our own services. Service providers may be located inside or outside of the European Economic Area (“EEA”). In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us. However, the information collected through such means is disclosed to and gathered directly by these service providers as listed below, and any service provider’s use of such information is subject to the service provider’s privacy policies, and not Vouryia’s.
For these providers, Vouryia strongly recommends that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.
• Google, Outlook and Roundcube for the use of Gmail Suite where Vouryia email accounts & files are stored.
• PayPal and Stripe, as payment processing provider.
(C). Why does Vouryia collect your personal data and how it uses?
The aforementioned personal data is collected to:
Process your online requests and bookings/orders and provide you with the requested services and information offered through the Website,
Verify and carry out financial transactions in relation to payments you make,
Audit the downloading of data from the Website,
Improve and customize the Website, Vouryia’s products, services and Vouryia’s business in general, such as by tracking your preferences, history and interactions with the Website,
Identify visitors to the Website,
Carry out data analytics, market research and data enrichment, such as by analyzing your preferences, shopping history and interactions with the Website together with data collected from third parties, such as data that you agree to share with us on social networks (e.g., Facebook, Instagram, etc.) and/or that we may collect from publicly accessible databases,
Correspond with you to resolve your queries or complaints; and send you marketing communications containing news, information and updates about our products and services, offers, promotions and special events, and other marketing communications that may be of interest to you by SMS, email or telephone and customize your experience with us to your interests and shopping habits and improving our services.
Whenever Vouryia processes your personal data, is based on lawful “justification” (or legal basis) for such processing. In most cases, the processing of your personal data will be justified on one of the following bases
Processing is necessary to perform a contract with you or take steps that you have requested in order to enter into a contract by filling the online booking form (e.g. sale contract),
Processing is necessary for Vouryia to comply with a legal obligation,
Processing is in Vouryia’s legitimate interests as a business, and Vouryia’s interests are not overridden by your interests, fundamental rights, or freedoms. Vouryia’s legitimate interests may include our interest in using customer and Website user personal data to conduct and develop Vouryia’s business activities (including by carrying out standard marketing activities), with current and potential customers and Website users; and in establishing, exercising, or defending legal claims,
Processing is based on your prior explicit consent, such as segmented and customized marketing activities. This consent can be expressed by clicking the check box with the consent clause.
Vouryia only collects Health Data with your explicit consent, when it is reasonably necessary, and in connection with facilitating your request. Information related to your dietary preferences is then transferred to our guides to ensure that your requirements can be met.
By sharing Health Data with Vouryia, you explicitly agree that Vouryia is allowed to collect and use this data in accordance with this Privacy Policy for the provision of services. If you do not allow Vouryia to process Health Data, Vouryia may be unable to provide said services, or only partially, as a consequence. In such circumstances, you are not entitled to reclaim any payment you or anyone reserving said services on your behalf may have made.
(D). Who are the recipients of your personal data?
Vouryia’s employees who are responsible for handling any requests you have submitted to Vouryia, as well as for the management and operation of your contract(s) with Vouryia in order to fulfill the obligations arising therefrom and the relevant obligations imposed by law.
Vouryia does not share or transmit personal data to third parties, unless this is required for legitimate professional purposes and business needs, in order to meet your requests or / and if this is required or permitted by law. In any case, the access to your personal data is allowed only to authorized persons that are required to have access in order to be able to complete the purposes of the collection, the use and the processing of them, as this disclosed in this Statement.
Vouryia may disclose your personal data to our service providers who assist us in providing the services we offer, processing transactions, fulfilling requests for information, receiving and sending communications, updating marketing lists, analyzing data, providing support services or in performing other tasks, as appropriate. Furthermore, your personal data may be disclosed to an insurance company affiliated with us to guarantee the safety of our customers during the tours and to the tour guide. In case of wine and gastronomy tours certain categories of your personal data, such as your name and your allergies may be disclosed to the restaurants.
Your personal data will be accessible by authorized personnel of Vouryia, and service providers acting on our behalf on a need-to-know basis.
Vouryia may also share your personal data with third parties in connection with potential or actual sale of our company or any of our assets, or those of any associated company, in which case personal data held by us about our users may be one of the transferred assets.
(E). Can Vouryia transfer your personal data to third countries outside the EU?
Vouryia does not transfer your personal data to third countries outside the EU.
(F). What is the retention period of your data kept by Vouryia?
Vouryia retains your information as long as it is necessary and relevant for its operations. In addition, Vouryia may retain information from closed accounts to comply with the law, prevent fraud, collect any fees owed, resolve disputes and take other action permitted by law.
(G). What rights do you have for the protection of your data?
You have the following rights:
To know which personal data that concerns you is being processed and retained by the Bank, as well as its source (right of access).
To request the rectification and/or supplementation of your personal data, so that it is complete and accurate by presenting any necessary documents which prove the need for such rectification or supplementation (right to rectification).
To request the restriction of the processing of your personal data (right to restriction).
To refuse and/or object to any additional processing of your personal data kept by the Bank (right to object).
To request the erasure of your personal data, from the Bank’s records (right to erasure).
To request from the Bank to transmit the data you have submitted thereto to any other data controller (right to data portability).
It is noted that the fulfillment of your requests under 3, 4 and 5 insofar as they are necessary for the execution or the continuation of the operation of the contract, regardless of whether they were provided by you or collected from any public source, entails the automatic termination from your part of the respective contract/contracts, pursuant to the terms thereof and your request will not be reviewed.
Vouryia reserves the right in any case to refuse to fulfill your right to restriction of processing or erasure of your personal data, if the processing or retention of your personal data is necessary for the establishment or exercise or support of its legitimate interests, lawful rights or its compliance with legal obligations, as referenced in chapter (C).
The exercise of your right to data portability 6 does not entail the erasure of your personal data from the Vouryia’s records, which is subject to the preceding paragraph.
The exercise or the above-mentioned rights acts for the future and does not concern the processing of personal data which has already been carried out.
You have the right to file a complaint with the Hellenic Data Protection Authority (HDPA www.dpa.gr), which is the competent supervisory authority for the protection of the fundamental rights and freedoms of natural persons, for processing which concerns you, if you believe that your rights are being infringed in any way.
(Η). How can you exercise your rights?
For the exercise of your rights referenced under (G) you may contact Vouryia and file your relevant application.
Vouryia shall make its best efforts to respond to your request within thirty (30) days from its submission. This deadline may be extended by sixty (60) further days, provided that it is necessary at the Vouryia’s sole discretion, taking into account the complexity of the request and the number of requests. Vouryia shall inform you in any case of the extension of the deadline within thirty (30) days.
The above service is provided by Vouryia free of charge. However, if your requests are manifestly unfounded, excessive or repetitive, Vouryia may either charge a reasonable fee, informing you thereof or refuse to respond to your request/s.
(I). How are your rights protected?
Vouryia implements all appropriate technical and organizational measures for the safeguarding of your privacy, the security of the processing of your personal data and its protection from accidental or illegitimate destruction, leak, alteration, prohibited dissemination or unauthorized access, as well as any other illegitimate form of processing.
Vouryia uses safe protocols for communication and transferring data (such as HTTPS), as well as anonymizing and pseudonymous where suitable.
Vouryia monitors its systems for possible vulnerabilities and attacks.
Vouryia promises to notify suitable authorities of data breaches.
Vouryia will also notify you if there is a threat to your rights or interests.
Vouryia will do everything within its capacity to prevent security breaches and to assist authorities should any breaches occur.
The present notice is made for the implementation of the provisions of Greek law and Regulation (EU) 2016/679. Vouryia may update, supplement and/or amend the present notice, pursuant to the existing regulatory and legal framework. In this case, the updated version will be posted on Vouryia’s website www.vouryia.com.
(J). Things to remember.
Protection of minors
Children and adolescents with limited legal capacity are, as a matter of principle, not allowed to transfer any personal data to the Website without prior consent of their parents or legal guardian. Vouryia will in no way knowingly collect personal data from children or adolescents with limited legal capacity, use these data in any form, or divulge these data to third parties without authorization. If you are under 18, please do not give us any Personally Identifiable Data. Vouryia encourages parents and legal guardians to monitor their children’s Internet usage and to help enforce our Privacy Policy by instructing their children to never provide Personally Identifiable Data on the Website without their permission. If you have reason to believe that a minor has provided Personally Identifiable Data to Vouryia through the Website, please contact Vouryia and all relevant information will be deleted from Vouryia’s databases.
Links to third party websites
The Website may provide links to other third-party websites (“Third Party Websites”). This Privacy Policy applies only to the Website and not to any Third-Party Websites. We suggest that you contact those sites directly for information on their privacy, security, data collection and distribution policies.
Newsletter & emails
If you have purchased on the Website, there is a good chance you will receive emails from Vouryia. Vouryia will only send you emails which you have signed up to receive, or which pertain to the services we provided to you. To send you emails, Vouryia uses the name and email address you provide. The Website also logs the IP address you used when you signed up for the service to prevent abuse of the system. No identifiable information is otherwise tracked outside this Website except for the email address.
Terms of Service
Please also visit Vouryia’s Terms & Conditions section establishing the use, disclaimers, and limitations of liability governing the use of the Website, a link to which can be found at the bottom of this page.
CONTACT DETAILS
DATA CONTROLLER:
VOURYIA HANDCRAFTED TRAVEL EXPERIENCES
ADDRESS:
30 Athanassiou Diakou Str.
14671 Nea Erythraia
Athens
CONTACT NUMBER:
+306948949477
REGISTRY OF TOURIST ENTERPRISES NUMBER:
0259E6000838001
DATA PROTECTION OFFICER:
30 Athanassiou Diakou Str.
14671 Nea Erythraia
Athens, GREECE
info@vouryia.com