Last update: 14/03/2023
Privacy Policy of Dreamy Villas
The enterprise Dreamy Villas acknowledges and respects the rules on the protection of natural persons with regard to the processing of their personal data, and therefore drafted and communicated this personal data protection policy, in accordance with the provisions of the national, European and international law with regard to the processing of personal data.
By means of this policy, Dreamy Villas, lays down and discloses the conditions under which, in its function as ‘Controller’, as defined by law, processes your personal data, which it collects, when you enter into transactions at its venues, as well as when you visit its website or mobile applications.
This personal data protection policy is compliant with the provisions resulting from the European Regulation (EU) 2016/679 and all other relevant applicable legislation. This personal data protection policy shall apply for the transactions of any natural person with Dreamy Villas as well as for the information provided through the enterprise and its website.
The website https://www.dreamyvillas.gr/ is the website of the enterprise, through which the clients are informed on the services provided. This personal data protection policy shall not apply for information which is collected through any other website.
Generally, our goal is to gather only personal data acquired voluntarily from the website visitors in order to be able to provide them with information and/or improve their interaction with the enterprise as well as our services by customizing them accordingly through the data gathered.
Our enterprise is dedicated to the protection of the confidentiality of information we receive and is operating according to the current General Data Protection Regulation (GDPR). You are kindly requested to study this privacy statement in order to learn more about the type of information we are gathering on your behalf through the current website and the way in which we are using it.
By accessing the platform or providing information, you agree to our privacy practices as set out in this privacy statement. We may change this notice from time to time. You should check this notice frequently to ensure you are aware of the most recent version.
What does personal data mean?
‘Personal data’ means information which may be used to identify a natural person (e.g. name and surname, telephone number, VAT number etc.).
We ask that you not send us, and you not disclose, on or through the Services or otherwise to us, any Sensitive Personal Data (e.g., social security numbers, national identification number, data related to racial or ethnic origin, political opinions, religion, ideological or other beliefs, health, biometrics or genetic characteristics, etc.).
What does processing personal data mean?
‘Processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Is provision of personal data mandatory?
We make sure to collect only your personal data which are absolutely necessary for the purpose intended, and particularly:
- Name and surname, citizenship, address, VAT number, date of arrival and departure. These data are collected to comply with our legal obligations and for the execution of the service contract.
- The telephone number and the e-mail address are collected and serve the execution of the service contract. These data are collected and may be used for sending you offers or updates, only with your consent.
- Debit/Credit card details are subject to processing for the performance of the service contract, namely to ensure the booking of a villa and the fulfillment of the customer's obligation to pay the fee for the services received.
You can pay your reservation in our website by debit/credit card (VISA, MASTERCARD, MAESTRO, AMERICAN EXPRESS, DINERS CLUB ). We have taken all necessary measures for the security of your transactions through your debit/credit card. Our website does not collect or store in any way the data of your debit/credit card and for this reason you have to register this data from the start, each time you use your card for transactions in our website.
- Special preferences are collected, with your consent, for the purpose of providing better services and a pleasant staying for the customer, during the execution of the service contract.
- Complaints are collected for the evaluation of our services, as well as to detect and correct errors and to improve the quality of services provided.
- Data on the number of visits of our website.
- Your username on social media, if you interact with us via those media, to help as answer your comments or questions.
How are your data used?
Dreamy Villas processes your personal data to fulfil the contractual obligation, in order to perform the sale of services, to satisfy its legitimate interests and to ensure its smooth functioning, to comply with its legal obligations and to be able to carry out or to contest legal obligations.
Reservations
We may use your data to perform a reservation in relation to one of our services.
Payments
In order to perform a reservation or any other sort of purchase, your payment details are required.
Services
To be able to provide and subsequently charge for any villa related services and to facilitate any special requests or assistance that you have requested.
Marketing
We may use your personal data to share an idea of what products or services we think you may want or need, or what may be of interest to you.
You may receive marketing communication from us if you have requested information from us or reserved a villa with us, and, in each case, you have not opted out of receiving marketing material.
To comply with legal obligation
Your data might be used to comply with the requirements imposed by our auditors, financial reporting requirements, government authorities and to cooperate with law enforcement agencies, government authorities, regulators and/or the court.
Service Personalisation
We may use your data to personalise our services to match your personal needs.
What is the legal ground for the processing of your personal data?
The data protection regulation defines the reasons why Dreamy Villas may collect and process your personal data. These reasons are the following:
- The performance of the contract to which you are a contracting party or because we have asked you to take specific steps before entering into a contract.
- To manage the bookings made, including payment management (where applicable) and the management of the user’s requests and preferences.
- To manage the provision of the contracted accommodation service, as well as additional services
- Meeting the legitimate interests of Dreamy Villas
- Complying with the legal obligations of Dreamy Villas
We will use and disclose Personal Data as we believe to be necessary or appropriate:
- to comply with applicable law, including laws outside your country of residence;
- to comply with legal process;
- to respond to requests from public and government authorities, including authorities outside your country of residence and to meet national security or law enforcement requirements;
- to enforce our terms and conditions;
- to protect our operations;
- to protect the rights, privacy, safety or property of our own, you or others;
- to allow us to pursue available remedies or limit the damages that we may sustain.
Who receives your data?
Access to your data shall be provided to competent supervisory authorities, to the members of the enterprise for which it is strictly necessary, which is bound to respect confidentiality, and to businesses collaborating with us, or to third service providers, who process your data as carrying out the processing on our behalf and following our orders and under the condition of always respecting confidentiality and particularly to:
- Providers of IT services and providers of accounting services
- Credit and financial institutions in the European Union, which are licensed and operate legally.
The above mentioned providers take measures to protect personal data, as well, and process your data following strictly our express written order.
How do we ensure that the Processors respect your data?
The processors are bound by a contract with the company:
- To respect confidentiality
- Not to send data to third parties without approval
- To take appropriate security measures
- To comply with the legal framework with regard to the processing of their personal data, and in particular the Regulation (ΕU) 2016/679.
How long do we keep your data?
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, primarily for the purposes of satisfying any legal, accounting, or reporting requirements. After the expiration of this period, we will delete/ destroy in a way that such data cannot be retrieved.
We keep the above data, for as long as required by the national and European law, until the completion of the sales and purchase agreement or provision of services, in paper or in electronic form and moreover, for as long as required after it expires, namely until the completion of the limitation period of the right of the Greek State to carry out regular inspections and to impose fines for related violations. In case of any legal action of any kind involving the undersigned directly or indirectly, the abovementioned time limit shall be suspended throughout the proceedings and until an irrevocable court decision has been taken.
Are your data safe?
To ensure the security of your personal data, Dreamy Villas takes all technical and organizational measures to protect its paper and electronic files, from accidental or unlawful destruction, accidental loss, alteration, prohibited dissemination or access and any other form of unlawful processing.
In all cases, you have complete control of your personal data, which are provided and received for the abovementioned purposes.
Dreamy Villas will not offer for sale, will not transfer in any way and will not disclose personal data of its clients to anyone, without their consent, except for the competent authorities, if it is required by the law.
What are your rights to the access and management of your personal data and your options?
According to the provisions of the national, European and international law, you have the right to ask:
- For a copy of personal data, which are or were subject to processing (right of access)
- To raise any objections at any time and to oppose the processing of data related to them (right of objection)
- To request correction (right of correction) or deletion of your data (right of deletion), provided that it is not contrary to legal provisions
- To ask the enterprise for direct transmission of your data to another controller (right to data portability).
- To withdraw your consent to the processing of your personal data.
- To complain to the Data Protection Commissioner if you think that your personal data has not been processed in accordance with data protection legislation.
The abovementioned actions are carried out by us, after the submission and identification of your request, and within a reasonable time, which does not exceed 30 days.
Sending e-mails and newsletters
You may allow us or not to send you e-mails and newsletters for advertising purposes at any time. You may withdraw any consent you gave with regard to the processing of your personal data, under the condition that it is not contrary to the law or our legitimate interests. We will comply with your wish, within a reasonable time.
Marketing
We might use your information to tell you about products, services or other information that could interest you. If you wish to unsubscribe from emails sent by us, you may do so at any time. In such circumstances, we will continue to send you service related (non-marketing) communications where necessary.
We would like to keep you informed, from time to time about relevant products and services or updates to your active products and services. We may do this by mail, email, telephone or other electronic methods such as text message.
From time to time we may also run specific marketing campaigns through social media and digital advertising which are based on general demographics and interests. Individual personal information is not used for these campaigns. If you do not want to see any campaigns then you will need to adjust your preferences within social media settings and your cookie browser settings.
Third-party data (e.g. book for a friend)
In the event that the User provides third-party data, they declare that they have the third party’s consent and undertake to provide the interested party -the data holder- with the information contained in this Privacy Notice, duly exonerating us and our data processor from any liability in this regard. However, we may carry out the necessary verifications to verify this fact, adopting the corresponding due diligence measures, in accordance with the data protection regulation.
International transfers of personal data
We may transfer your personal information to our data processor(s) or/and sub-processor(s) based outside of the European Economic Area for the purposes described in this notice. If we do this, your personal information will continue to be subject to one or more appropriate safeguards set out in the law. These might be the use of model contracts in a form approved by regulators, or having our suppliers sign up to an independent privacy scheme approved by regulators (like the US ‘ Privacy Shield’ scheme).
Links to other websites
Our website may include links to other websites which are governed by Privacy Policies with different content to ours. The placement of these links only serves the purpose of facilitating our guests. Each link leads to a different website. You are kindly requested to study the Privacy Policy of every website you visit before submission of any personal information. Even though we try to provide links only to websites that share our high standards and specifications as well as respect to your privacy, we cannot be held responsible for the content, safety or privacy practices that other websites apply.
We are not responsible for the content and services of other websites to which our website refers via links, hyperlinks or banners (including, without limitation, social networking sites such as e.g. Facebook, Twitter, Instagram, YouTube, Pinterest, Google+). We do not guarantee nor can we control the availability, the content and the personal data management policy of the website which is listed with a link. Consequently, for any problem that may occur during your visit/use to such websites, you have to contact them directly as they are solely responsible for providing their services. Access using the links provided on the respective website takes place under his sole responsibility the user himself.
Social Login
In the event of registration and/or access through a third-party account, we may collect and access certain information of the User’s profile from the corresponding social network, solely for internal administrative purposes and/or for the purposes indicated above.
Social media widgets and applications
Our website might include functionality that allows you to share through social media applications i.e through the Like/Share option on Facebook and Twitter’s widget. These social media applications can gather and use information on your use of our website. Whichever personal information you provide through social media applications can be used by other members of the social media application. This type of data sharing is regulated by the Privacy Policy of the company that carries the application. We are not responsible and have no control on the use of information from these companies.
In addition, our website can host blogs, forums, crowd-sourcing and other applications or services. Social media services’ purpose is to facilitate the content and information exchange. All the data you provide to social media services of our enterprise can be shared with other users of the social media service (unless otherwise specified on the point of collection) on which we probably have limited or no control at all.
Service Providers
We may employ third party companies and individuals to facilitate our Service ("Service Providers"), to provide the Service on our behalf, to perform Service-related services or to assist us in analyzing how our Service is used.
These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
- Google Analytics
-
Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service.
You can opt-out of having made your activity on the Service available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sharing information with Google Analytics about visits activity.
For more information on the privacy practices of Google, please visit the Google Privacy Terms web page:
http://www.google.com/intl/en/policies/privacy/
- Google AdWords
-
You can opt-out of Google Analytics for Display Advertising and customize the Google Display Network ads by visiting the Google Ads Settings page: http://www.google.com/settings/ads
For more information on the privacy practices of Google, please visit the Google Privacy Terms web page: http://www.google.com/intl/en/policies/privacy/
- Facebook
-
Facebook remarketing service is provided by Facebook Inc.
You can learn more about interest-based advertising from Facebook by visiting this page: https://www.facebook.com/help/164968693837950
To opt-out from Facebook's interest-based ads follow these instructions from Facebook: https://www.facebook.com/help/568137493302217
For more information on the privacy practices of Facebook, please visit Facebook's Data Policy: https://www.facebook.com/privacy/explanation
Cookies
Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site. We use the information collected by cookies to compile reports, provide insurance quotations, enable payment services, and to help us improve the site. Cookies collect information in an anonymous form.
We use the following categories of cookies on our website:
-
Strictly necessary cookies: these cookies are essential in order to enable you to move around the website and use its features. Without these cookies, services you have asked for such as remembering your login details or shopping basket items cannot be provided. These cookies will also inform us about your behaviour on our website, if we can do business with you and protect Dreamy Villas and its customers from fraudulent activities.
-
Performance cookies: These cookies collect anonymous information on how you use our website (eg. we use Google Analytics cookies to help us understand how customers arrive at our site, browse or use our site) and highlight areas we can improve such as navigation, shopping experience and marketing campaigns. The data stored by these cookies does not show personal details from which your individual identity can be established. They are also used to help measure the effectiveness of an advertising campaign. You may opt-in to these cookies using your browser settings.
-
Functionality cookies: These cookies remember choices you make such as the country you visit our website from, language and search parameters such as size, colour or product line. These can then be used to provide you with an experience more appropriate to your selections and to make the visits more tailored and pleasant. The information these cookies collect may be anonymised and they cannot track your browsing activity on other websites. You may opt in to these cookies using your browser settings.
-
Targeting cookies or advertising cookies: These cookies collect information about your browsing habits and limited aggregated demographic information in order to make advertising more relevant to you and your interests. They are also used to limit the number of times you see an advert. The cookies are usually placed by third party advertising networks. They remember the websites you visit and that information is shared with other parties such as advertisers. For example, we use third party companies to provide you with more personalised adverts when visiting other websites. You may opt-in to these cookies using your browser settings.
You can withdraw your consent to these cookies at any time through the following options:
- Google Analytics cookies across all websites, please visit Google Analytics Opt-out Browser Add-on;
- Other third party cookies relating to behavioural advertising, please go to www.youronlinechoices.eu.
- Any other type of cookies, you can clean the cookies through your browser settings.
Please note that refusing cookies does not mean you will no longer receive online advertising. It does mean that the company or companies from which you opted out will no longer deliver adverts tailored to your web preferences and usage patterns, so you may see a greater number of adverts that are irrelevant to you and your preferences.
Legitimate interest for processing your data
The data processing required in fulfilment of the aforementioned purposes that require the User’s consent cannot be undertaken without said consent.
Likewise, in the event that the User withdraws their consent to any of the processing, this will not affect the legality of the processing carried out previously.
To revoke such consent, the User may contact us through the appropriate channels.
By the same token, in those cases in which it is necessary to process the User’s data for the fulfilment of a legal obligation or for the execution of the existing contractual relationship between us and the User, the processing would be legitimized as it is necessary for compliance with said purposes.
User's Responsibility
The User guarantees that he/she is of legal age or legally emancipated, where applicable, fully capable, and that the information furnished to us is true, accurate, complete and up-to-date. For these purposes, the User is responsible for the truthfulness of all the data communicated and will keep the information updated, so that said data reflects their actual situation.
Guarantees that he/she has informed third parties on whose behalf he/she has provided data, where applicable, of the aspects contained in this document. Also guarantees that he/she has obtained the third party’s authorisation to provide their data to us for the purposes indicated.
Will be responsible for false or inaccurate information provided through the Website and for damages, whether direct or indirect, that this may cause to us or third parties.
Complaints - Disputes - Conflict Resolution
If you are not satisfied with our response to a complaint, you may use the following dispute resolution services from registered authorities in Greece and the EU.
- Hellenic Financial Ombudsman - https://hobis.gr/en
- European Consumer Centre of Greece - https://www.eccgreece.gr/en/greek-european-consumer-centre
- Alternative Dispute Resolution Center of Greece - https://www.adrpoint.gr/en
- European Institute for Conflict Resolution - http://www.europeanresolution.com/en
- StartADR Alternative Dispute Resolution Center - https://startadr.org/en
- The European ODR platform - https://ec.europa.eu/consumers/odr
Contact Us
If you have any questions, concerns, or complaints about our Privacy Policy or practices of our services, you can contact us (Data Protection Officer) by email at info@dreamyvillas.gr
