Administrators of the personal data included in the website Istron Villas IKE, Crete 72100, Lassithi, P.C. 72100, P.BOX 98, Crete, Greece, entered to the registry of companies under the NIP number: EL800840090 (hereinafter: ADO).
In the interests of the security of the entrusted personal data, ADO operates based on internal procedures and recommendations, in accordance with the relevant legal acts on the protection of personal data, and in particular, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals concerning the processing of personal data and on the free movement of such data and repealing Directive 95/46 EC.
ADO shall take particular care to protect the interests of data subjects and, in particular, ensure that personal data are:
collected for legitimate purposes and not subjected to further processing incompatible with those purposes,
substantially correct and adequate to the purposes for which they are processed,
kept in a form that enables identifying the persons to whom they relate no longer than is necessary to achieve the purpose of processing.
ADO performs functions of obtaining information about users and their behavior by having them voluntarily enter information in forms, to:
respond to user requests made via the contact form based on art. 6 paragraph. 1 point. f GDPR,
accept reservations using an online booking system based on Art. 6 paragraph. 1 point. b GDPR,
provide services offered by ADO based on Art. 6 paragraph. 1 point. b GDPR,
perform marketing activities, including sending sales offers to the email address if the Customer had provided consent to such activities by marking an appropriate field during the reservation process, based on art. 6 paragraph. 1 point. a GDPR. Consent to the processing of data for marketing purposes and the transmission of commercial information can be revoked by clicking the appropriate link in the received message or sending such a request to ADO's e-mail address,
pursuing the legitimate interest of ADO, in specific cases, based on Art. 6 paragraph. 1 point. f GDPR, e.g. debt collection, - by collecting cookies.
The cookie settings will be changed after the session is restarted or refreshed on the ADO website.
Installation of "cookies necessary for the basic functionality of the Website" is necessary for proper operation of j, in particular required for authorization.
Cookies necessary for the operation of the site can be changed by changing the browser settings, but it should be borne in mind that changing the settings may cause the website to malfunction
More information about cookies is available in the "Help" section in the user's browser menu.
Users who, after reading the information available on the Website, do not want cookies to remain stored in the browser of the device, should remove them from their browser after the end of their visit to the Website. The Service uses the following types of cookies:
session type - remain in the browser until it is disabled, or until the user logs out of the Service,
permanent type - remain in the web browser of the device until they are removed by the user, or until the predetermined time specified in the parameters of the cookie file elapses.
In terms of functionality of each cookie file, they can be divided into:
analysis files that help improve the experience of using the website by understanding how users use and convert on it,
marketing files used to personalize advertising content, proper targeting and analyzing the performance of marketing channels and sales channels,
files necessary, that is, fundamental to the basic functionality of the Service.
The cookies we use allow us to develop our website.
Some cookie files may be placed by the provider of the Online Reservation System only for:
improving and supporting the booking process,
analyzing and collecting statistical data concerning the use of the website and the Online Reservation System, to improve them,
the provider of the Online Reservation System shall inform about the installed cookies in the user interface of this system.
ADO may use automated decision-making, including profiling, for marketing purposes (including automated matching of ads to your interests and measuring their effectiveness), and tailoring offers based on art. 6 paragraph. 1 point. a GDPR.
Recipients of personal data may be bodies, institutions, and entities authorized under the law, as well as entities providing services to ADO (e.g. legal, IT, marketing, accounting and other entities involved in the execution of the ordered service.
We use the following analytical tools:
We use the following marketing tools:
Data processed by ADO can be accessed by the User of the Service, who provided it. The User also retains the right to modify this data, demand its deletion and limit or stop processing their personal data at any time. At any time, the user may also request the removal of his personal data from the site. The right to data transfer does not apply because the standard for the exchange of such data between hotel facilities has not been established.
In order to exercise their rights indicated above, the Website user should contact ADO using the same e-mail address or phone number provided on the Website by sending an email to the address: firstname.lastname@example.org
The User of the Website has the right to withdraw consent at any time without affecting the lawfulness of the processing, which was made based on consent before its withdrawal, by direct contact with ADO or, in the case of technology, by changing the cookie settings.
Any user of the Service may lodge a complaint with the Office for Personal Data Protection.
The Website may contain links to other websites that operate independently of the Website and are not supervised by the Website in any way. These websites may have their privacy policies and regulations, which we recommend that you read carefully.