Personal Data Protection Policy
This privacy notice contains information about collecting, processing, storing and using personal data. Our company, called “My Blue Cruises”, which is located in Athens (tel.no +306948500139, +306940988948, e-mail: info@mybluecruises.gr ) and operates in Santorini, acting as data controller, collects, stores, uses and processes your personal data.
What is personal data?
The term personal data refers to a particular person’s information such as full name, address, e-mail, telephone number etc, which define and can lead to the identification of your identity.
What is personal data processing?
Each action or a series of actions that are performed with or without the use of automated means on personal data or on data collection of private nature, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of personal data.
Which data do we collect?
We collect data that are absolutely necessary for the cause which they were submitted and are used solely for the purposes that have been collected. We collect personal data (name, surname, address, telephone number, e-mail and bank account number) when the user makes a cruise reservation through our website either by e-mail or some other method, and only after the user has concurred to it (by filling out the required form when asked to).Personal data are only the data that you have provided us for the sole purpose of booking a cruise and only after you have agreed to it. However the data collected by cookies, are exempted.
How we use your personal data?
The processing of your personal data is performed either by the authorized personnel of our company or by the electronic devices of our company .Please note that the processing is exceptionally performed by third parties (who have been committed to a confidentiality agreement by a contract) for the protection of your personal data that are processed solely for the purpose which they have been given. In general, personal data are being processed so as the following services are provided:
Booking a cruise: We process your personal data so as the cruise that you have chosen is successfully booked
Communication: We use your personal data in order to reply to inquiries that have been submitted to us either through our webpage or through our e-mail.
Why we process your personal data?
We collect your personal data in order to:
- Book a cruise that you have chosen or seek out information in order to book a cruise.
- Reply to inquiries that have been submitted to us, concerning a cruise that you have booked or wish to book
Who receives your personal data?
The company “My Blue Cruises” vouches that the personal data will not be shared or conceded to any third party (except the ones that have already been mentioned) for any cause or use. However if the sharing of personal data is deemed necessary by the law (judge/public authorities) then the company will comply with the law. Your personal data are only accessible by our authorized personnel that has pledged to a confidentiality agreement and the company that works for us, which processes your personal data according to our commands. Your personal data will not be used for any other purpose without your consent and briefing.
How do we make sure that your personal data is protected?
Our data processing personnel has complied and pledged, by a contract, to our company for the following:
- Take the appropriate security measures
- Ensure Confidentiality
- To comply to the law concerning personal data protection and especially E.U ‘s law 679/2016
Data transfer outside the EU?
The company “My Blue Cruises” does not send your personal data outside the E.U. Your personal data will not be used for any other cause, unless you have concurred to it.
When do we delete your data?
We keep your personal data for the time period required to complete a cruise reservation. When the tourist season is over, during the winter’s hiatus, we erase all personal data that were used in order to book a cruise during the previous season. The policy we follow for personal data collected by Cookies is described in the Cookies Policy section.
Personal data safety
The company “My Blue Cruises” pledges to protect your personal data. Our company fully understands the importance of personal data and therefore has taken up all security measures in order to ensure the safety and protection of personal data from any malicious threat.
Know your rights
You have every right to your personal data. You have the right to be notified by us if we process your personal data. If we process your personal data you may ask to be informed about the purpose of our actions, what kind of personal data do we hold, if we disclose them, how long do we store them and the rest of your rights such as rectification, erasure, restriction of processing and filling a report at the Hellenic Data Protection Authority.
If you have found your personal data inaccurate or false you may file an application form in order to rectify them. You also have the right to demand from the company the erasure of your personal data- If personal data are no longer essential for booking a cruise, or wish to revoke your consent – without undue delay. You have the right to obtain, and receive in a readable format, the personal data that you have provided or forward them to a third party. If you have objections against the processing of personal data then you have the right to obtain form the company restriction of processing for the time pending for the request to be fulfilled. You, also, have the right to obtain from the company restriction of processing and we will halt the processing unless crucial or legal reason prevail your rights. If you have concurred to the collection, processing and use of personal data you can revoke your consent at any given time.
How can you exercise your rights?
In order to exercise your rights you may file a petition by sending us an e-mail at Info@mybluecruises.gr and we will review and get back to you as soon as possible. Please do not forget to add the term “Personal Data” as an email subject.
When do we respond to your petition?
We respond to your petitions and inquiries without delay and without a cost. In any case, we respond to every e-mail within 30 days. For more information about your petition or inquiries please call us at +306948500739 or +306940988948 or e-mail us at Info@mybluecruises.gr
Legal grounds for lawful processing of personal data by our company
The applicable law is the Greek law which has complied with the regulation on the protection of personal rights (2016/679/EU) and as a whole the current national and European law concerning the protection of personal data. For any disputes, the court of Athens is the competent court.
In case of an infringement can you lodge a complaint?
You have every right to file a complaint at the Hellenic Data Protection Agency (Kifisias 1-3, Athens 11523 ,tel.no +302106475600, e-mail contact@dpa.gr ) should you feel the processing of personal data infringes the national and regulating law that protects personal data.
How will you be notified for possible changes in our policy?
We update the current policy whenever deemed necessary. If major changes, in our policy or in the way we process your personal data, occur we will publish them on our webpage. We encourage the constant visit to our webpage so as you stay updated with our policy.
Last Update on the Personal Data Protection Policy: March 2019
