Confidential data is the personal data of the registered User.
Any data stored in areas accessible to the general public is not considered to be confidential.
CityBook Pylos undertakes to keep confidential data secret and not to divulge such data to third parties, without prior written consent, with the exception of the following. The provision of data is obligatory where required by legal or contractual obligations and in order to register on the portal. Therefore, the Society is within its rights to deny access to the portal where a User refuses to provide such data or refuses to consent to its processing, and also in the case of any subsequent request to delete this data.
In this respect, in line with EU Regulation n. 679/16 (GDPR), the data processor is CityBook Pylos, registered office at Kalamatas 33, Pylos, tel +306944268974, pec (registered electronic post) firstname.lastname@example.org .
The data protection officer is Pete Chronopoulos, address Kalamatas 33, Pylos, tel +306944268974, email email@example.com
Data and content from magnetic media will be processed in written form and/or on magnetic, electronic or telecommunications devices. The servers used to store data are located within the European Union, in compliance with applicable laws. These provisions may be subject to change or variation in line with modifications to Hellenic or EU regulation. Data may be collected in two ways:
Personal Data provided by you
We receive and store any data that you insert on our website or that you provide in any other way. Normally, CityBook Pylos collects personal data such as: name, surname, email address, date and place of birth, city and country of residence, geolocation, and chosen language. It will be possible to upload personal photographs to your profile, which will be visible when the User leaves comments or reviews on the site during their activity within the portal. You always have the right to request the updating, rectification, integration or cancellation of the data you provided, as well as to limit their use or oppose processing of them, articles 13 and ss. EU Regulation n. 679/16. We also recognise all your rights under articles 15 (Right to access of data subject), 16 (Right to rectify), 17 (Right to deletion), 18 (Right to limit processing), 20 (Right to data portability) and 21 (Right to oppose) of EU Regulation n. 679/16, in addition to all rights connected to the foregoing and present in the aforementioned regulation. In your capacity as a data subject, according to art. 15 of the GDPR, you also have the following rights:
1) To request access to, or rectification or cancellation of, your personal data from the data processor, as well as to limit data processing which regards you and to oppose processing, in addition to the right to data portability;
2) To obtain, without hindrance, a copy of your personal data from the data processor, in a format suitable for common use and able to be read by a computer, in order to transfer your data to another processor;
3) To withdraw your consent to processing, without prejudice to the legality of any processing carried out before consent was withdrawn;
4) To report concerns to the Guaranteeing Authority for the Protection of personal data.
Personal Data collected automatically
Purpose and method of processing
Data will be processed without the express consent of the User, in line with art.6 of the GDPR, in order to carry out a contract to which the User is party, or for pre-contractual measures taken at the data subject’s request (lett.b), to uphold obligations required by applicable laws, regulations, community rules or by order of any regulating authority (lett c). Data will be processed with the express consent of the User, in line with art. 7 of the GDPR, for marketing purposes (sending marketing material or publicity about products and services offered by the data processor, or marketing and promotional material on behalf of third parties). Personal data will be stored throughout the duration of the contractual relationship and for the duration of the existence of your account, with annual checks to determine the presence or otherwise of the user within the database. If the data should become no longer necessary, the User will be given a deadline within which to request the backup of their data, which will then be deleted. Any third parties receiving data will do so only to offer marketing promotions. Only that data which is appropriate, pertinent and strictly necessary for the purposes for which it is processed will be collected.
To exercise your rights, you should contact the data processor by the recommended means or by email at firstname.lastname@example.org.
By registering, you give your consent to the processing of your personal data based on this Privacy Notice, within the limits and conditions of Art. of EU Regulation n. 679/16.