Privacy Policy

Privacy Policy of HOTEL WELLNESS Website from 03/07/2019)

We pay special attention and invest in the protection of personal data that we process. For this reason, we have fully complied with the applicable legislation regarding the General Data Protection Regulation (GDPR) and we follow recorded policies and procedures that ensure the maximum possible security.

We invite you to carefully read the privacy policy of this site to learn about the type of data we collect and how we process it.

General Information and Responsible Data Processor

HOTEL WELLNESS” Company, is based in Heraklion of Crete, at Stadiou Street 48, PC 71601, with contact phone +30 2810 335334, is responsible for the collection, storage, and general processing of personal data of users of this website, as they are collected and stored through it as well as the social media pages linked to the website. The above company will henceforth be called the “Company”.

1. What personal data do we collect and how?

We collect and process your personal data as follows:


In case you wish to contact us, you will be asked for the following information: name, surname, email address and your message. We will use this information only to answer your question / comment. We will record your requests, your questions / comments and our matching answers, and any other actions to manage your request / communication. All information retained for 6 months after your question / request has been processed.

Information when you wish to receive our newsletter

If you wish to receive our newsletter you will be asked for your email address. We will use this information only to communicate with you via newsletter and whenever you wish you can unsubscribe by clicking the corresponding Link at the bottom of the newsletter (unsubscribe).

Curriculum Vitae (CV) Submission

Through our website we collect information that you give us, meaning your name, email address, telephone number, your city, and your CV, in order to apply for a job in our company. We retain and process personal data in accordance with the relevant purposes for which they have been given (job application). This data is kept in the files of our company for a period of two (2) years so that we can contact you in case a job is presented that fits your profile.

Information about your visit and use of the website

We collect certain information when you visit our website, such as your IP address, which websites you visit, device category, browser, clicks and views. The information about your use of the isotope and services enables us to make categorizations, meaning to form groups of website visitors or clients with certain common characteristics, such as age group, gender, or region. It is possible to add you to one of our categories. We use the categories to personalize the website and, for example, to change the order of the search results or the point of view of certain offers, so that you are more likely to see them. We may also use the categories to display online advertisements that we deem relevant to you and to send you commercial messages.  We use this personal data as part of our legitimate interests, to be able to do our services to customers and friends of our website, to be able to attract more, to improve the sale of our services. We retain personal data for a maximum period of 14 months.


In some cases, we combine information about your online searches (clicks and views), your settings on our website, your reasons for your customers and your historical communications. This information can be used by different channels to manage the relationships and marketing of our services to you via email, advertising mail, social media, or online advertising, which may include personalizing the content and offers of the isotope. to suit your preferences. You may opt out of receiving newsletters, promotional emails, or social media, and you may object to our use of your personal information for direct marketing purposes (for more information on this process, read the following paragraphs hereof policy).

We use this personal data, as required, in the context of our legitimate interests, to be able to promote our services to our customers and visitors to our website, to be able to attract new customers and improve the sale of services us. We retain personal data as determined by the relevant purposes for which the personal data is collected (eg when you contact us, when you visit our website). Personal data is usually deleted or made anonymous within a maximum of 14 months.

Maintenance and optimization of our website

Your personal data is also used to maintain and analyze our site to resolve performance issues, improve availability and user experience. We record every use of our website. The use by us of your personal data for these purposes is necessary in the context of our legal interests and the information is kept for a maximum period of 14 months. The log files of the use of our website will be deleted within 14 months from their creation.

2. Purposes of Processing

a. Information systems support / service improvement: We use your personal data to detect problems on the server and to ensure the proper operation of our website. The Company uses the personal data of the users, which it collects through the website, to offer new services through the website or to improve the already provided services.

Legal basis of the processing: the legal interest of the Company to ensure the smooth operation of its website and to improve the services provided by it.

b. Compliance with our legal obligations: When we receive relevant warrants from the courts or public authorities, we process your personal data to respond to these requests.

Legal basis of the processing: Compliance with our legal obligations.

c. Promotion of the Company’s services: Information about the use of our website and services allows us to create sections, which group the cities of our website and describe common features of age, gender, and region. The sections below to customize our website and change e.g. the order of your search results or make you an ad that you think is of your interest.

We also have the ability to process your data that you have published on social rights (eg if you participate in a corporate competition through social networks), if you have permission to share with us.

Finally, we process your data to send you our informative e-mails / newsletter, once you have given the relevant consent.

Legal basis of the processing: legal interests of the company / your consent in case of your registration for receiving informative e-mails / newsletter.

d. Legal protection of the company: Ensuring the implementation of the terms of use of our website and protection of our legal rights.

Legal basis of the processing: the legal interests of the Company.

3. Cookies

Part of the information contained in this Privacy Policy is collected with the use of cookies and similar techniques. Cookies are small text files that contain small amounts of information, which are downloadable and can be stored on your user device, e.g. your computer, smartphone or tablet. You can modify your browser settings to reject some of the cookies. However, you should be aware that certain features or services of the Website may not function properly without the acceptance of the use of cookies.

In short, the cookies that we use on the website are divided into the following categories:

ABSOLUTELY NECESSARY: They help the website to function primarily, to be easy to use by enabling the use of basic functions, such as browsing our page, and access to secure locations of our website. The website cannot function without their use. Their use is acceptable by law even without your consent.

STATISTICS / PERFORMANCE: These cookies collect information about how visitors use the website, for example, which pages they visit most often and if they receive error messages from web pages. These cookies collect aggregate, anonymous information that does not identify a visitor. They are used exclusively to improve the performance of a website.

4. Preservation of personal data

Your personal data is kept exclusively for the period required for the fulfillment of the respective purpose for which they were collected, in full compliance with the applicable legislation. When the purpose of processing your personal data is completed, then they are deleted. The specific retention periods for each of the relevant processing purposes are listed in detail above.

5. How and with whom we share your personal data (recipients of personal data)

We may share your personal data with third parties to help us provide services and products and to manage our website. These third parties are service providers and webmasters, advertising companies, mass mail companies or affiliates of similar interests, etc. We urge service providers to take appropriate measures to protect the confidentiality and security of personal data. We may also not provide personal data to law enforcement to comply with a legal obligation or court order.

Finally, your data can be disclosed to potential buyers and associates, in case of sale, merger, restructuring, liquidation or acquisition of our company. In this case the recipient will comply with this privacy policy.

6. Data security

Our Company assures users that it takes all appropriate technical and organizational measures for the security of their personal data, to ensure the confidentiality of their processing and protection against accidental or unlawful destruction / loss / alteration, prohibited dissemination or access and any other form of unfair treatment.

Although every effort is made to protect personal data, our Company cannot guarantee the security of the data transmitted on the website of the site, as the transmission of information via the Internet can never be completely secure.

Our website may contain links to other websites. We are not responsible for the privacy practices, content and security of other websites that are not governed by this privacy policy and for this reason we advise you to always review your privacy policies carefully on these websites.

Lastly, if you need to share information from our website through social media, we advise you to carefully read your social media privacy policies.

7. Rights to access, correct, delete, restrict data processing and portability

You have the right to request an overview of your personal data processed by us or on our behalf. You have the right to correct, delete or restrict the processing (as appropriate) of your personal data. You can exercise this right by contacting us at the email and submitting a relevant request.

Please note that requests that do not meet the requirements set out in applicable law or the Company guidelines may be re-drafted or rejected, and that some personal data may be excluded from such access, correction requests. and deletion, in accordance with applicable data protection laws and other laws and regulations.

You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, and in some cases, we will transfer your data to another controller upon request, if this is technically possible.

8. Right to object

You also have the right, in some cases, to demand us to stop processing your personal data. However, if there are compelling legal reasons, we will continue to process your personal data and you will receive an update. In any case, you have the right to object to our use of your personal data for direct marketing purposes, including profile training, and if you do, we will comply with your request.

If you consent to our use of your personal data, you have the right to revoke your consent without prejudice to the lawfulness of our processing of personal data prior to the withdrawal of your consent.

9. Point of contact and exercise of rights / complaint at DPA

Requests for the exercise of the above rights of users can be sent to the e-mail address

Users can also submit complaints to the Personal Data Protection Authority regarding the exercise of their rights ( According to the Authority, complainants must first lodge a complaint with the controller.

10. Applicable Law

For any dispute arising from the use of this website, Greek law is applicable and the courts of the city of Heraklion will have exclusive jurisdiction.

11. Modifications

This Privacy Policy has been drafted in accordance with the provisions of the General Regulation for the protection of Personal Data No. 2016/679 / EU. The most up-to-date copy of the policy is posted on the Company’s official website.