IONIAN INSTARIBS & LEISURE I.K.E.
www.ionianinstaribs.gr
PRIVACY POLICY
Last updated: April 28, 2026 | Pursuant to Regulation (EU) 2016/679 (GDPR)
- Data Controller
The data controller for your personal data is IONIAN INSTARIBS & LEISURE I.K.E., registered under GEMI number 168505409000, VAT number 802030825 (hereinafter “the Company” or “we”).
For any matters relating to personal data, please contact us at: [email protected]
- What Data We Collect
2a. Data you provide directly
When you use the contact form on the website, we collect:
- Full name
- Email address
- Phone number (optional)
- Content of your message
2b. Data collected automatically
When you browse the website, the following data may be collected automatically:
- IP address
- Browser type and version
- Device operating system
- Pages visited and time spent
- Cookies and similar technologies (see Cookie Policy)
- Purposes and Legal Bases for Processing
We process your personal data for the following purposes:
- Responding to enquiries: Performance of contract / Legitimate interest (Article 6(1)(b)(f) GDPR)
- Managing bookings: Performance of contract (Article 6(1)(b) GDPR)
- Improving the website: Legitimate interest (Article 6(1)(f) GDPR)
- Compliance with legal obligations: Legal obligation (Article 6(1)(c) GDPR)
- Marketing / Newsletters (where consented): Consent (Article 6(1)(a) GDPR)
- Data Retention Periods
- Contact form data: up to 2 years from the last communication.
- Booking data: up to 5 years (accounting/tax obligation).
- Browsing data / cookies: as set out in the Cookie Policy.
- Marketing data: until withdrawal of consent.
- Sharing Data with Third Parties
We do not sell or rent your data. It may be shared exclusively with:
- Website hosting providers, bound by a Data Processing Agreement (DPA).
- Email marketing providers, where you have given consent.
- Law enforcement or tax authorities, where required by law.
Where data is transferred outside the EEA, appropriate safeguards are ensured (e.g. EU Standard Contractual Clauses).
- Your Rights under the GDPR
Pursuant to Articles 15-22 of Regulation (EU) 2016/679, you have the following rights:
- Right of access (Article 15): To receive a copy of your personal data.
- Right to rectification (Article 16): To request correction of inaccurate data.
- Right to erasure (‘right to be forgotten’) (Article 17): Subject to applicable conditions.
- Right to restriction of processing (Article 18): To request a temporary suspension of processing.
- Right to data portability (Article 20): To receive your data in a structured, machine-readable format.
- Right to object (Article 21): To object to processing for marketing purposes.
- Right to withdraw consent: At any time, without retroactive effect.
To exercise your rights, please send a request to [email protected]. We will respond within 30 calendar days (Article 12(3) GDPR).
- Right to Lodge a Complaint
You have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA):
- Website: www.dpa.gr
- Phone: +30 210 6475600
- Email: [email protected]
- Data Security
We implement appropriate technical and organisational measures to protect your data in accordance with Article 32 GDPR, including SSL/TLS encryption for the website.
- Contact
- Company: IONIAN INSTARIBS & LEISURE I.K.E.
- GEMI No.: 168505409000 | VAT No.: 802030825
- Email: [email protected]