Privacy protection

Data Controller

Our Companies, under the trade names “KYNISKA S.A.”, “KOSMOSEL S.A.”, “MAZARAKIS S.A.” and “PANAMOS S.A.”, (www.kyniskahotels.gr ), hereinafter referred to as “Company”, “we”, or “us”, situated in 18 Larnakos Street, Alimos, Attica and specializing, in the provision of hotel accommodation and hospitality services, in compliance with the EU General Data Protection Regulation 679/2016, are joint controllers and are represented by the company “PANAMOS S.A.” According to Chapter III, Article 13 of the regulation, we wishes to inform you of the nature and use of the personal data we collect from you during your visit on our premises or in our website.

Principles relating to processing of personal data

Personal data shall be:

a) Processed lawfully, fairly and in a transparent manner in relation to the data subject (‘lawfulness, fairness and transparency’),
b) Collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes (‘purpose limitation’),
c) Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (data minimization’),
d) accurate and, where necessary, kept up to date (‘accuracy’),
e) Kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which personal data are processed; personal data may be stored for longer periods subject to implementation of the appropriate technical and organizational measures required by this Regulation in order to safeguard the rights and freedoms of the data subject (‘storage limitation’),
f) Processed in a manner that ensures appropriate security of the personal data (integrity and confidentiality’).

Personal data processed

The term “Personal data” refers to all information pertaining to any individual directly or indirectly identifiable.
Such information includes:
• Identity data: first name, surname, VAT number, Personal ID or Passport number, date of birth etc.
• Contact details: residential address, email address, home phone number.
• Payment data: credit card details, bank accounts for payments.
• Data of booking: duration of stay, accommodation preferences (i.e. children's menu, special diet menu, etc.), use of special facilities of the resort (gym, SPA treatments) and any other information necessary to your personal needs
• Event data: event date, names of organizers.
• Sensitive data: health data (pathological conditions, special physical needs, any allergies, etc.).
• Recruitment data: full name, personal email, telephone number, education and work history details featured in the curriculum vitae.


Personal data collection

In addition to personal contact with our customers during their check-in at our hotels and rental apartments, we collect personal data through the completion of the Customer Form, via our website through the Contact Form where you enter your name, email and your message, through email correspondence, through phone reservations, through the travel agencies we collaborate with, through third-party websites (booking.com, etc.), through virtual assistance and through social media.

The personal data that you provide us when filling in contact forms, by phone, email or social media, are used exclusively for processing your request; You are interested in our products/services. Such reasons may be:

• Availability and booking for overnight stays at our tourist accommodations
• You have requested information (e.g. room prices, amenities, extra services, etc.).
• You have expressed interest in attending one of our events.
• For your participation in contests through social media.
• You have expressed your interest in working with us.
• You are acting as a representative of your organization.
• Your presence is recorded by the CCTV system upon entry to our facilities.

Also, by accepting “cookies”, data such as the browser version, computer model, operating system, internet service provider and other such technical information may be automatically collected. Furthermore, we may store various anonymous details, such as your browsing preferences, whether you have visited our website before, your country, city, time zone and language. The visitor/user of the Website can configure their web browser to either warn them about the use of cookies for specific services or to block the acceptance of cookies.

If you choose to apply for a job position through our website or via email, your personal information will be kept in our database for one year following the submission of your resume.

Furthermore, our facilities are equipped with cameras, without sound, located at the entrances of our hotel premises and in parking areas, with the purpose of protecting our employees, visitors and property from intruders. The cameras cover only our external areas. Notification signs regarding their presence are displayed at the entrances of our buildings. The recording system stores footage for up to 15 days and then the records are deleted unless material is requested by the Authorities or following our own request to state security authorities to detect illegal or malicious actions in our facilities.


What is the purpose of processing your personal data?

The Company and/or third parties acting on our behalf solely for the purpose of providing and personalizing accommodation, dining and hospitality services at our facilities, in accordance with your booking details, to offer you an unforgettable experience in the Laconia region.

We may use your personal information to present you with carefully tailored special offers, promote our upcoming events, and carry out various other promotional activities that may be of interest to you—always with your explicit consent.

The Company guarantees that your personal data shall not be used for any purposes other than the ones outlined in this Policy without your prior notice or approval.

The personal data you enter in our contact form facilitate our communication and our response to your message.

Legal grounds for data processing:

For processing your data as described above, we rely on the following legal bases:
• Contractual: your personal data are processed per your request within the scope of our contract.
• Consensual: processing of your personal data requires your free, explicit and written or telephone consent and only to the extent necessary in the context and the timeframe of the occasion.
• Legal obligations: when required to comply with our legal obligations (e.g. labour or tax legislation)
• Legitimate interests: the processing is necessary for the purposes of our legitimate interests or those of third parties, unless such interests are overridden by your interests or fundamental rights and freedoms that impose the protection of your personal data.

Personal data recipients:

The Company ensures lawful and appropriate use of personal data and prevents any unauthorized access. In the course of providing the requested service and always within the limits set forth by law, we share your personal data with:

a) Our personnel, who are bound by strict confidentiality agreements.

b) External partners - service providers to whom the tasks of management, maintenance and/or upgrading of the computer software, video surveillance systems and other electronic systems of the Company have been entrusted for the safer and more efficient provision of services, who are bound to comply with data security and confidentiality by relevant written contracts.

c) Public authorities in situations prescribed by law, court rulings, and dictates for compliance.

d) Financial institutions or other payment facilitators, in cases you are using them to make payments to us. We may also exchange information with financial intermediaries in case we deem it necessary to prevent fraud.e)

e) External partners who may provide you with hotel services on our behalf and who are contractually bound to ensure the security and confidentiality of your data through relevant written agreements.

f) Travel agencies, in cases where they have been authorized by you to handle the booking, mediation, or supervision of the provision of our services to you.


Your legal rights

If not prevented by preceding legal or regulatory mandates or issued court rulings, we are obligated to submit to you, and you are entitled to:
• Acquire a copy of your data which we have collected and processed.
• Demand the amendment of any incorrect data.
• Deny the processing of your data or restrict their use.
• Demand deletion of the data.
• Rescind your consent for processing.
• Require that we transfer or transmit the data to a third party of your choice.

What is the retention period for your personal data

Your personal data are physically stored in a secure place with controlled access for as long as it is necessary in order to serve the purposes for which we collect them and for the duration of our cooperation, unless legal issues demand that we maintain the data for a specific period before destroying them or if the Company retains the data for its own rights of advocacy in judicial or regulatory matters.
You may request the deletion of your personal data at any time through the option to delete your data on our website  (https://www.kyniskahotels.gr/el/deletem ), unless otherwise required by tax authorities, our contractual obligations, or any legal claims.

Transfer to third countries

In the event of your personal data transference to a third country, the Company has taken all appropriate measures of protection and has ensured that your data is being transferred to countries that offer adequate protection by EU standards.

Ownership - Intellectual and Industrial Property Rights

Our website’s contents, featuring trademarks, pictures, graphics, photographs, text, etc., constitute property on which we have full and exclusive ownership, except for those that belong to third parties, and are protected by national, European, and international laws. Their appearance on our web page does not constitute allowance to use and does not relinquish our rights in any way. The publication, reproduction, transfer, transmittance, distribution, presentation, and any other misappropriation of the contents of this site as well as the use of any service or part of our services anywhere and anyway for commercial exploitation or other purposes without our expressed consent is strictly forbidden.


Disclaimer of liability for the use of links to third-party websites

Our web pages allow you to access other websites via electronic links. These links have been properly placed for the sole purpose of facilitating ease of use. The pages you are redirected to may be subject to different terms of use. We deny all responsibility for their truth of content and protection of privacy. The user entering these sites assumes full responsibility.


Social Media Contest Terms and Conditions

Each contestant is entitled to only one entry. Valid entries are submitted within the official duration of the contest. The prizes are personal and cannot be exchanged for cash or other products. Winners of contests conducted through social media will be notified via their username.

Winners provide their explicit consent for their full name, landline or mobile phone number, email address, and mailing address to be used by us for the purpose of offering free accommodation at KYNISKA hotels. Eligibility to participate in the contests is granted to:
a) adults over 18 years of age who reside permanently in Greece, and b) individuals who have explicitly consented to the contest terms. The following are excluded from participation:
a) employees and external partners of the Company, b) first- and second-degree relatives and their spouses, c) affiliated companies, d) individuals who have not consented to the contest terms, and e) individuals who post inappropriate comments or offend the dignity of others.
The Company reserves the right to extend the duration of the contest or cancel it, with proper notification to participants via an announcement on its Facebook page(https://www.facebook.com/kyniskapalacehotel) and its Instagram account (https://www.instagram.com/kyniskapalace).

Amending our Privacy Protection Policy

If we must alter or augment our privacy protection policy, we shall do so each time in accordance with all applicable laws.

Hellenic Data Protection Authority

If you realize or suspect that your personal data protection is compromised in any way, you must contact the Hellenic Data Protection Authority at:

1-3 Kifissias Street, PC 11523, Athens, Greece
Tel: +30 (210) 6475600
E-mail: contact@dpa.gr

Personal Data Controller

To exercise your individual rights and to request information relevant to personal data protection, you may contact us at:

PANAMOS S.A.
18 Larnakos Street,
17455 Alimos, Attica, Greece
T: +30 210 9842155
E: dpo@kyniskahotels.com

Use of Cookies

Cookies are small archives stored in the PC, tablet, mobile phone, and any electronic device you use to surf the internet. Each one contains information such as the mother-website’s name, life span, and an alphanumeric code. Cookies allow us to store various information such as personal preferences or previous visits to the site.
In addition to our own page, we receive 3rd Party Services like Google Analytics, Google Maps, Google Tag Manager, Google Ads, Facebook Pixel, Facebook Conversion Tracking etc.

- Google Analytics Cookies: facilitate the collection and screening of statistical data received by Google, such as the browser used, visiting frequency, and origination page (location of the link to our site). For more information as to how Google uses your personal data, visit https://policies.google.com/privacy?hl=el#infocollect.

- Google ads: is a service to offer targeted online advertising based on your previous visits.

- Facebook Meta Pixel: is a snippet of JavaScript code that allows us to track visitor activity on our website. It works by loading a small library of functions which we can use whenever a site visitor takes an action (called an event) that we want to track (called a conversion). Tracked conversions appear in the Ads Manager where they can be used to measure the effectiveness of our ads, to define custom audiences for ad targeting, for Advantage+ catalog ads campaigns, and to analyze that effectiveness of our website's conversion funnels.

You can save, reject, or update each time a browser wants to store a file cookie on your computer. For more information, visit http://www.aboutcookies.orgas