PERSONAL DATA PROTECTION AND PRIVACY POLICY
1. NOTIFICATION
The société anonyme named “YPANEMA TOURISM ENTERPRISES SA” with registered office in Heraion Lagoon, Municipality of Loutraki – Perachora – Agioi Theodoroi, Greece, TIN: 999405833 – Tax Office of Korinthos (hereinafter referred to as “YPANEMA SA”) is the Controller of the personal data we collect from you in order to provide you with our services, as well as from those who apply for a job in our Group “YPANEMA SA” and “SPORTCAMP SMSA”.
Personal data is any information that identifies you as a natural person or may identify you directly or indirectly. In addition, the Website “www.ypanema.gr”, hereinafter referred to as the “Webpage”, may automatically collect personal data at the time of your visit thereto and it is managed by the “YPANEMA SA”.
Hereby, we would like to inform you that “YPANEMA SA” takes very seriously the private life of its customers and personnel, and it shall process their personal data in full respect and pursuant to the applicable legislation of data protection, the General Data Protection Regulation (EU) No 2016/679 (hereinafter referred to as “GDPR”), as well as other European and National Legislation.
We kindly request that you carefully read this Personal Data Protection and Privacy Policy in order for you to be informed of the data we collect about you, the manner we collect and process data, the purpose for which we process and use them, as well as to inform you about your rights.
This Policy serves as your awareness according to articles 13-14 of GDPR. If you wish any further clarifications about our processing of your personal data, please address your queries to the following address: dpo@ypanema.gr
You may also contact with our Data Protection Officer of our enterprise (hereinafter referred to as “DPO”) at the following address: dpo@ypanema.gr
This Personal Data Protection and Privacy Policy forms an integral part of the Terms of Use of our Webpage to which you may have access by clicking here http://www.ypanema.gr
2. THE PERSONAL DATA WE COLLECT
a. For our costumers
Personal data is any information related to you and allows us to identify you. We collect these data from you in person,
We process your personal data, such as surname, name, gender, home / contact address, contact phone, email, tax information (TIN), ID card or passport number, as well as data of any other contact person, etc.
In particular:
– We process your data, indicatively the name, surname, gender, home or communication address, contact telephone, email, occupation, tax information (TIN- Tax office), number of identity card or passport, as well as information of any other contact person etc.
– We process your personal data also when you register yourself in our various events, pursuant to the respective terms of participation notified through our Social Media or/and our Website/s, https://www.ypanema.gr/ and our company’s social media:
https://www.facebook.com/Ypanema
https://www.instagram.com/ypanemaloutraki/
https://www.linkedin.com/company/18560946/admin/
– We take photos/videos of our activities and sports/cultural events that take place inside our facilities or outside, whether they are organized exclusively by us, or co-organised with other bodies.
– Photos and videos may be posted on social media and on our Web sites, for reasons of advertising our business and activities. For the purpose of receiving and processing them for the above purposes, we obtain your express and free consent.
– We process your information (surname, name, phone, email), if you register for your update or voluntarily fill in the booking form online on our website and on social media, in order to register your registration or your request, but also to inform you about our various activities, events, services, discount policy, sports and cultural events, offers and, if you wish, about the actions of all the companies of our Group (Sportcamp / Ypanema).
b. For those who apply for a job position in our company, we shall collect and process your personal data listed in detail in our printed documents:
– Application for a job in our Group’s companies “SPORTCAMP SMSA” and “YPANEMA” (click here) which you voluntarily sign and provide us. Indicatively, we shall process your surname, name, father’s surname, mother’s name, birth date, citizenship, marital status, number of children, contact telephone numbers, communication address, education/training elements, languages you speak, any experience whatsoever, and any other information provided in the curriculum vitae by you yourselves, as well as the selection of the job position in any of the two above-mentioned companies of our Group.
By submitting the application and the curriculum vitae voluntarily, you give your consent to the Group’s companies “SPORTCAMP SMSA” and “YPANEMA SA” as Controllers, to process your data listed on these documents with the purpose of your potential recruitment either in the company “SPORTCAMP SA” or “YPANEMA SA” depending on your wish. Your consent may be freely withdrawn at any time. The above-mentioned companies, in case no recruitment shall be made, will keep your personal data (curriculum vitae) for two (2) years by fully respecting your privacy. After the expiry of the retention period, the curriculum vitae shall be destroyed in a secure manner. Your data shall not be shared to third parties nor shall be transferred outside EU. We may transfer your data to an external partner during the evaluation of your application, who shall be committed for respecting the privacy and protection of your data by a written agreement made by and between us pursuant to the provisions of GDPR.
c. For our staff, we shall process, inter alia, name, surname, tax identification number, social security number, photographs, curriculum vitae, etc. according to the procedure legally disclosed to our employees, either at the time of their recruitment or at the time of their employment in our company, following the current labour, social security and tax legislation, the internal policy of our company and the employment agreement made by and between us.
d. In addition to above points 2a, b, c, we shall process the mails you exchange with us, or you address to us through letters, emails and social networks.
– We also process the location, including the geographical location of your PC or device in real time via GPS, Bluetooth, and user-generated IP address, in case you use location-based features and enable location services settings on your device and your computer.
3. PURPOSES / LEGAL BASES FOR PROCESSING DATA
We process the following data in a physical and / or digital file:
A. For our customers:
a. The above-mentioned data under the applicable legislation for the operation of businesses, taxation/issuance of invoices, etc.
b. We collect the above mandatory data of our customers in the context of the execution of the cooperation / concluded contract between us and our communication for the correct execution of what has been agreed between us, as well as a proof of our agreement.
f. Any debit/credit card information in the context of a financial transaction are automatically transferred to a secure banking environment and protected by the respective bank.
g. Your email, in order to inform you about our various activities, events, services, discount policy, sports and cultural events, offers and, if you wish, about the activities of all the companies of our Group (Sportcamp/Ypanema) based on your explicit consent.
h. Photographs and videos with the possibility of posting them on the Social Media and webpages of the Company or/and the Group for the purpose of advertising both our enterprise and our actions based on your explicit consent.
B. For those who apply for a job position in the companies of our Group:
All the above data upon your request and explicit consent in the context of evaluating your qualifications for the possible conclusion of an employment agreement made by and between us.
C. For the employees in our Company:
All data required under the relevant labour, social security and tax law, but also based on the employment agreement made by and between us.
4. BROWSING THE WEBPAGE
a. Our Website informs you about our services related the facilities of “Ypanema Seaside Food & Drink”, the programs and events that we organise, as well as the recruitment process, etc. Each visitor may browse our Webpage without giving any personal information. However, only by visiting and browsing the Website some information may be automatically collected which can identify you either directly or indirectly, such as:
-Internet Protocol (IP) of your PC;
-the browser and operating system type;
-the sites you visited immediately before and after your visit to the page;
-the speed of the connection and information on computer software installed in the PC;
-basic information on the connection to the server; and
-information collected via HTML cookies, Flash cookies, web beacons and other similar technologies (see below in the Cookies section).
b. In case the visitor of the Website https://www.ypanema.gr/ wishes to express his/her interest for our services and activities or to subscribe to the list of recipients of emails via this website, he/she is invited to fill in and submit the respective contact form during the submission of which the Website collects and processes, upon your consent, the following personal data:
-Name
-Email
-Telephone Number
c. In addition to the Website, we may collect personal information via:
– telephone calls,
– social media and brand channels (e.g., Facebook, Twitter, Instagram).
d. For statistical analysis purposes:
To learn more about how our Website is used by its visitors, we keep a summary of the data we collect and we analyze them. We may use this information, for example, to monitor and analyze the use of the Website, to improve its functionality and to better tailor its content and design according to the needs of our visitors.
e. In any case whatsoever, the user/visitor of our Website, after communicating with the relevant department and ascertaining the existence of their personal file, may request its erasure, rectification or modification
5. MINORS
When collecting information directly from you, we take due care in order to determine which of the personal information collected relates to minors. In any case, if we find that we have collected any personal information from a minor under 15 years old without a verifiable parental consent, as provided for in Article 21 of Law 4624/2019, we will delete the information from our database as soon as possible, by sending a relevant notification to the parent or guardian of the minor. If you believe that we may have collected information from a minor under the age of 15, please contact us at the address dpo@ypanema.gr
6. INTERCONNECTION WITH THIRD-PARTY WEBPAGES
Through our website or before you visit our website, you may access to third-party social networks. When you are registered with your social media account, we will receive the personal data you have selected to share with us through these social media according to their privacy settings in order to improve and customise the use of our website. We may use social media links on our website, like Facebook or Instagram.
As a result, these personal data shall be disclosed to your social media provider and may be presented in the profile you keep in social media and may be accessible to other users in your network. For more information about these practices, consult the privacy statement of such third-party social media providers.
7. COOKIES
The Webpage may use cookies in order to enhance user experience when browsing, but also to improve the overall quality of its services.
a. What are cookies and why we use them?
They are small pieces of information data stored on computers to identify the web browser used while browsing websites. Device IDs shall be collected from the available system components including IP addresses, user agent information (browser version, operating system type and version) or device-generated IDs, such as Apple Identifiers for advertisers, Apple Identifiers for vendors, Google Android Identifiers or Google Play Store Advertising Identifiers. Cookies and similar technologies may be used to remember information, such as Identifiers and user preferences.
The use of cookies makes it easy for our Website to remember information about your visit, by collecting useful information about your search preferences. Thus, the next time you visit us, your search experience will be improved. In order to provide you with our various services, our company and service providers collect traffic data, your IP address, your device software, the type of server you use while browsing, as well as information about how you use the website (such as the day and time of logging in and logging out) which is generated when you use the website.
Moreover, cookies help us to see the performance and traffic of our Website, improving its presentation and content, according to the preferences of our visitors.
b. Which cookies do we use?
Some or all of the cookies described below may be stored in the browser. You can view and manage cookies in your browser (however, mobile browsers may not offer this visibility). Our Website may use the following cookies:
b.1 Strictly necessary and functionality Cookies:
Technically necessary cookies are essential for the proper functioning of our Website, they allow you to browse and use its functions. These cookies do not recognize your personal identity.
Without these cookies, we cannot ensure that our Website will run efficiently.
In addition, these cookies allow our Website to remember your options, such as font size, selection of language, etc. to provide improved and personalised features.
b.2 Performance cookies
Google Analytics:
These cookies shall collect information about how you use our Website, for example, which pages you visit most often. These cookies shall collect aggregated, anonymous information which does not identify any visitor. They shall be used exclusively to improve the performance of a website.
Search Console
These cookies shall collect aggregated anonymous information about the proper functioning and any errors found on our Website, such as if a user is looking for an older version of the site or if some files have been compromised.
b.3 Personalized content and ad cookies
These cookies are used to display ads that may be of interest to you based on your Internet browsing habits.
These cookies, provided by content and / or advertising providers, may combine information collected by our website with other information independently collected by other networks or websites about your activities in your browser.
If you choose to remove or disable these cookies, you will continue to see ads, but these may no longer be relevant to your interests.
c. What if you do not wish to use cookies
You may configure the browsing software in order to block all cookies or to indicate when a cookie shall be sent, however, some features or services of the site may not work properly without cookies.
More information about cookies is available on the website: http://www.allaboutcookies.org. If you wish to know how you can monitor or remove cookies, you may visit the website www.AboutCookies.org. Relevant information is also provided on our website.
8. PERSONAL DATA RETENTION
We retain data for the time period required by the relevant legislation (tax/social security/labour law and legislation regarding heath regulated establisments etc.) and for the purpose for which they are processed. In order to determine the appropriate time period of such retention, we shall take into account the amount, the nature and sensitivity of personal data, the purposes for which we process them, as well as the ability to achieve these purposes by other means. Furthermore, we take into consideration the time period for which we may need to retain personal data in order to fulfill our legal obligations or to respond to complaints/control and to protect our legitimate rights in case of raising a claim. If there is none of the above reasons for keeping a file for a longer period, the data will be deleted from our files or will be safely destroyed after six (6) years from their collection or from the end/termination of the contractual relationship made by and between us.
In particular for the curriculum vitae of job applicants and in case the recruitment does not take place after all, the retention of such personal data shall be provided for the period of two (2) years after the submission of candidate’s application. After the expiry of the retention period, the curriculum vitae shall be destroyed in a secure manner.
Where processing is carried out to serve any request of yours, we will process your data for as long as it is required to satisfy your request. Where processing is carried out as part of promotional activities and marketing, we will process your data until you withdraw your consent and request to no longer receive any advertising messages.
9. PERSONAL DATA SAFETY
YPANEMA SA shall implement all technical and organisational means for the protection of your data. We shall follow stringent safety procedures when processing your personal data, and for their protection from accidental loss, destruction or damage, such as storage in restricted areas.
We may disclose your data to reliable third parties for the purposes set out in this Privacy Policy. We require all third parties to have suitable measures of technical and operational safety for the protection of your personal data pursuant to the Greek and EU legislation on data protection.
10. TRANSFER OF PERSONAL DATA
The above-mentioned data shall remain confidential, be processed by our employees and partners authorised to that effect, and shall not be disclosed to third parties other than the competent Public/Regulatory/Supervisory Authorities, mandatory intermediaries for our company’s participation in subsidised programmes (e.g. ESPA), Social Security Institutions, OAED and our associates (such as: accountant office, IT, doctor, lawyer, if needed, management service provider of our webpage) or/and Bodies and Organisations with which we co-organise various events/activities. An external partner may process your communication data in order to facilitate our communication with you (sending sms/emails). Our partners shall ensure data privacy and provide us with the necessary guarantees for their protection and safety. Your data shall not be transferred to third Countries.
11. YOUR RIGHTS
As a personal data subject, you may exercise your rights granted by GDPR, in articles 12 to 22. In particular, you shall be entitled:
– to be informed of whether we process your personal data and for what purpose,
– to have access to your personal data and to receive a copy of them,
– to request the rectification of your personal data in order to rectify any incomplete or inaccurate personal data,
– to request the erasure of your personal data (in that case, we will erase them only if we are not obliged to retain them based on the relevant legislation or if we retain them based on your consent),
– to request the restriction of your data processing,
– to request the transfer of your personal data to you or other party (known as “data portability”),
– to object to the processing of your personal data and to request your exemption from any automated individual decision-making. Our company shall not draw up a profile based on the personal data you provide to us through this Website.
In cases where you might have given your consent to the collection, processing and transfer of your personal data for a specific purpose, you are entitled to withdraw at any time your consent to this processing. After becoming aware of the withdrawal of your consent, we will cease to process your information for the purpose or purposes for which you had initially agreed, unless we have other legal basis to do so lawfully.
If you wish to exercise any of these rights, you may send your request either via email: dpo@ypanema.gr or by post to the above-mentioned address, or you may submit your request in person at the store during its opening hours. In order to render the exercise of your rights a simple and effective procedure, you may use the printed GDPR RIGHTS REQUEST (click here).
You may withdraw your consent to the use of your personal data for safety reasons about our actions/services/offers etc. by unsubscribing from the Newsletter service of our webpage.
You are also entitled to lodge a complaint with the Personal Data Protection Authority, www.dpa.gr.
In any case, you may contact the Controller and the Data Protection Officer at the above-mentioned email addresses in order to submit any request whatsoever and to exercise any of your lawful rights in relation to the processing of your personal data.
12. MODIFICATIONS TO THIS POLICY
YPANEMA SA shall reserve the right to modify at any time the Personal Data Protection and Privacy Policy. Such modifications, additions or erasures will enter into force immediately, by posting them on the Webpage. Our Webpage visitors must regularly read this Personal Data Protection and Privacy Policy in order to get informed about any modification made. Any use of the Webpage, after such change, shall constitute acceptance of the changes, modifications, additions or erasures made on behalf of the visitor.
Last revision date: