Privacy Policy

Contact details of the data controller: ΚΑΡΑΒΑΣΙΛΗΣ ΣΩΚΡΑΤΗΣ ΚΑΙ ΣΙΑ Ε.Ε, ΑΓΙΟΥ ΕΥΤΡΑΤΙΟΥ 15, 811 32 ΜΥΤΙΛΗΝΗ, (hereinafter “ISSA LESVOS”), Tax Registration Number: 801375946, Tax Office: ΜΥΤΙΛΗΝΗΣ, Tel.: +30 22510 44278

Α. Objects and purpose of this policy

Our Group, ISSA LESVOS respects your privacy and protects your personal data. Each of the above companies is commercially independent. For any issue that may be addressed herein, you may contact the data protection officer listed below. With this policy we aim to keep you informed of the personal data we collect and process during our operation. Your personal data is collected and maintained for the necessary time, for the specified, explicit and legitimate purposes described below, processed in a lawful, fair and transparent manner, always in accordance with the applicable legal framework and in a manner that guarantees completeness and confidentiality. This data shall be suitable, relevant, appropriate, and not exceed the data required in the light of the foregoing purposes and shall be accurate and, if necessary, updated.

Β. Concepts and Definitions

“Personal data”: any information relating to an identified or identifiable natural person (“data subject”). Identifiable is the natural person whose identity can be directly or indirectly identified, in particular by reference to an identifier such as name, identification number, location data, an online identifier or one of several special characteristics, which expresses the physical, physiological, genetic, mental, commercial, cultural or social identity of this natural person.

“Processing of Personal Data”: any act or series of acts performed with or without the use of automated means on personal data or on personal data sets, such as the collection, registration, organization, structure, storage, adjustment or alteration, retrieval, search for information, use, disclosure by transmission, dissemination or any other form of distribution, link or combination, restriction, deletion or destruction.

“Data Controller” is the natural or legal person, public authority, agency or other body that, alone or in along with others, determines the purposes and manner of processing personal data.

“Performer of the processing” means the natural or legal person, public authority, service or other entity that processes personal data on behalf of the data controller.

“Consent” of the data subject: any indication of a free, specific, explicit and fully aware will, with which the data subject indicates that he or she agrees, with a statement or a clear affirmative action, to the processing of personal data relating to him / her

“Personal data breach“: the breach of security that results in accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access to personal data transmitted, stored or otherwise processed

“Health Data”: personal data related to the physical or mental health of a natural person, including the provision of health care services, and which discloses information about his or her state of health.

“Special categories of personal data/Sensitive personal data” personal data revealing racial or ethnic origin, political beliefs, religious or philosophical beliefs or participation in trade unions, as well as the processing of genetic data, biometric data for the unambiguous identification of face, health data or data concerning the sexual life of a natural person or the sexual orientation.

1. General Principles for the Processing of Personal Data

The ISSA LESVOS ensures that the personal data it processes are

• Subject to processing that is lawful and legitimate with respect to the data subject
• Collected for specified express and legal purposes
• Appropriate, relevant and limited to those necessary for the purposes for which they are processed
• Accurate and updated
• Processed in such a way as to guarantee the appropriate security of personal data, including their protection against unauthorized or unlawful processing and accidental loss, destruction or damage, by means of appropriate technical or organizational measures.
• Retained only for the time required for the processing of personal data. In some cases they may be retained for a longer period, especially if the processing of such data is deemed necessary for:

the compliance with a legal obligation imposed by a provision of another law.

the compliance of the ISSA LESVOS with the duty to fulfill a public interest objective.

archiving for purposes of public interest, scientific or historical research

for purposes relating to the protection of public health 

for statistical purposes

for the foundation, opposition, exercise or support of legal claims.

• Legal Framework for the Protection of Personal Data In addition to the Regulation (EU) 2016/679 of the European Parliament and of the Council (2016/679) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, any national law with respect to the processing and protection of personal data, as well as the Directives issued by the Data Protection Authority, shall apply.

Indicatively, the following laws are mentioned:

• Law 4624/2019 (Measures for the Implementation of the European Parliament’s General Data Protection Regulation [2016/679])
• Law 2472/1997 on the protection of individuals from the processing of personal data.
• Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data.
• Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector.
• Directive 1/2011 of the Data Protection Authority on the Use of Video Surveillance Systems for the Protection of Persons and Goods.
• Directive 115/2001 of the Data Protection Authority on the Protection of Personal Data in the Field of Labor Relations.
• Law 3471/2006 on the protection of personal data and privacy in the field of electronic communications
• Regulations of the relevant administrative bodies.
• Health Protocols, Acts of Legislative Content, Joint Ministerial Decisions. 

Ε. Purposes of Processing

In accordance with the above legal framework, personal data collected by the ISSA LESVOS are used for the following processing purposes:

1. a) To manage the booking of rooms as well as any other hosting service
2. b) To manage the relationship with you before, during and after your stay at the hotel
3. c) For the Company’s compliance with Greek and European Law
4. d) For marketing purposes

• Law 4624/2019 (Measures for the Implementation of the European Parliament’s General Data Protection Regulation [2016/679])
• Law 2472/1997 on the protection of individuals from the processing of personal data.
• Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data.
• Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector.
• Directive 1/2011 of the Data Protection Authority on the Use of Video Surveillance Systems for the Protection of Persons and Goods.
• Directive 115/2001 of the Data Protection Authority on the Protection of Personal Data in the Field of Labor Relations.
• Law 3471/2006 on the protection of personal data and privacy in the field of electronic communications
• Regulations of the relevant administrative bodies.
• Health Protocols, Acts of Legislative Content, Joint Ministerial Decisions. 

Ε. Purposes of Processing

In accordance with the above legal framework, personal data collected by the ISSA LESVOS are used for the following processing purposes:

1. a) To manage the booking of rooms as well as any other hosting service
2. b) To manage the relationship with you before, during and after your stay at the hotel
3. c) For the Company’s compliance with Greek and European Law
4. d) For marketing purposes
5. d) the need to process your data in the context of safeguarding our legitimate interests
6. e) the need to process data to protect the vital interests of you or the person you accompany
7. f) the need to export statistics
8. g) the need for processing to fulfil a duty in the public interest, in particular in the field of public health.
9. Data that the ISSA LESVOS processes

For the above purposes, the ISSA LESVOS collects and processes personal data, including indicatively the following:

G.1 Employees / External Partners: full name, father’s name, mother’s name, year of birth, place of birth, gender, nationality, address, email address, contact phone numbers, identification card number (ID), tax registration number (VAT), AMKA, bank account number (IBAN), marital status, education and training status of the employee/ partner, work experience, curriculum vitae, salary, working hours, medical record / health certificate

Purposes / Legal basis for data processing:

–Managing the working relationship between the ISSA LESVOS and the employee/external partner. The processing of this data is considered necessary for the performance of the employment contract.

– Fulfilling the employer’s obligations of the ISSA LESVOS. The processing of data is necessary for the compliance of the ISSA LESVOS with its legal obligations.

G.2. Prospective Employees: name, surname, contact information, education, work experience, email, nationality, marital status

The ISSA LESVOS collects and processes candidates’ personal data for vacancies. This data is collected by the candidate upon submission of the relevant application. In case of non-recruitment, the CV of the candidate is retained for 2 years to cover any future job opportunities.

Purposes / Legal basis for processing

-Assessment of the candidate’s suitability for a particular job vacancy. The legal basis for processing is the legal interest of the ISSA LESVOS and the consent of the prospective employee.

G.3. Participants, speakers and invited to scientific conferences, actions and events

1. a) Full name, postal address, status, profession, email.
2. b) Image data (photo / video recording). As part of the implementation of the actions of the ISSA LESVOS, it is possible to take pictures and / or videotape the various events, conferences or workshops organized by the ISSA LESVOS. This data may be posted on the site or social media managed by the ISSA LESVOS.

Purposes / Legal basis for data processing:

– The purpose is the successful organization. The processing of personal data is considered essential for the successful management and organization of their actions and purposes.

G.4. Hotel Residents / Visitors: full name, passport number, date of birth, credit card number, length of stay, price, email, address, telephone, pricing information

Purposes / Legal basis for data processing:

– Performance of a contract to which the subject is a party

– Consent of the subject

– Compliance with the legal obligation of the ISSA LESVOS.

G.5. Suppliers: Full Name, VAT, IBAN, Telephone, Address, Email

Purposes / Legal basis for data processing:

–          Performance of a contract to which the subject is a contractual party

G.6. Special categories of personal data

G.6.1 Employees: The ISSA LESVOSmay collect and process data belonging to specific categories of personal data (“sensitive data”), such as data relating to the health of its employees, in order to meet its insurance obligations. ISSA LESVOS may also process health data in the context of the obligation to comply with the National Legislation and the application of the Health Protocols, as they apply each time. Similarly, in exceptional cases, when required by applicable law, the ISSA LESVOS may collect and process data relating to criminal convictions or offenses, such as copies of criminal records, always respecting the principle of proportionality.

Residents / Visitors / Conference Participants: The ISSA LESVOS may process data belonging to specific categories of personal data (“sensitive data”), such as data on eating habits, allergies, religious beliefs, illnesses etc.. ISSA LESVOS may also process health data in the context of the obligation to comply with the National Legislation and the application of the Health Protocols, as they apply each time.

Purposes / Legal basis for data processing in the above cases under Ε.6:

– Fulfillment of the obligations and exercise of specific rights of the ISSA LESVOS or the data subject in the field of labor law and social security and social protection law.

– Protecting the data subject’s vital interests

– The fulfilment of a duty in the public interest, in the field of public health.

G.6.2 Communication Data

Persons who have expressed their wish through valid consent to receive news and updates from the ISSA LESVOS.

Purposes / Legal basis for data processing:

Consent of persons wishing to receive updates and offers from the ISSA LESVOS

Η. Transmission of Data

The entire workforce of the ISSA LESVOS that processes your personal data is contractually bound by the terms of confidentiality and privacy of your data. At ISSA LESVOS, it is part of our philosophy and our basic principle that we shall not disclose your information to third parties for their own independent business or marketing purposes without your consent.

However, we may share your information with the following:

• Affiliate companies. Your information may be shared with affiliates companies of the ISSA LESVOS.
• Business partners. We may also share your information with trusted business partners. These partners may use your information to provide the services you requested and to provide you with promotional material, advertisements, and other material, in the event you have given your consent.
• Service providers and / or any third party who may undertake the processing on our behalf. We may also disclose your information to companies that provide services on our behalf, such as IT subcontractors, companies that send bulk emails on our behalf, banks, credit card issuers, law firms, mail service companies, print service companies, etc.
• Credit Approval: When you apply for a credit, your personal information is used and disclosed to appropriate third parties in accordance with the applicable law, in order to decide on granting and maintaining a credit limit for you.
• Other third parties with your consent or by your order. In addition to the disclosures described in this Privacy Policy, we may share information about you with third parties if you give your consent or request it.
• Public Bodies (e.g., National Public Health Organization), where expressly provided for by national legislation.  

Exceptionally, the following are allowed to have access to your personal data:

1. a) the judicial and prosecutorial authorities in the exercise of their functions of their own motion or at the request of a third party claiming a legitimate interest and in accordance with lawful procedures;
2. b) other bodies of the Greek State, which by virtue of their statutes have such a right and competence.
3. Data Retention Time

We take reasonable steps to ensure that your personal information is retained only for as long as it is necessary and for the purpose for which it was collected or for as long as it is required under contract or applicable law.

The CVs collected by the relevant HR department are kept for two years and then destroyed.

Tax information is maintained in accordance with tax law.

Ι. Rights of the Subjects of Personal Data

The ISSA LESVOS ensures that data subjects are able at any time to exercise their rights under the law regarding the collection and processing of personal data. These rights are as follows:

• The right to accessthe data.
• The right to correctthe data.
• The right to deletedata (“right to forget”).
• The right to limit the processingof data.
• The right to data portability.
• The right to objectto the processing of data.

Any request by the individual/ subject is submitted to the ISSA LESVOS at issahostel@gmail.com

The ISSA LESVOS will respond to your request free of charge, without delay and in any event within one month upon receipt of the request, except in exceptional cases, so that the above deadline may be extended by a further two months if necessary, taking into account the complexity of the request and/or the number of requests. The ISSA LESVOSwill inform you of any extension within one month upon receipt of the request, as well as of the reasons for the delay.

In the event that the satisfaction of your request is impossible, the ISSA LESVOS will inform you within one month upon receipt of the request, of the relevant reasons and of the possibility to file a complaint with the Data Protection Authority, as well as about your right to appeal to the competent judicial authorities.

If your claim is deemed by the ISSA LESVOS to be manifestly unfounded or excessive, it may give rise to the charge of a reasonable and proportionate fee, taking into account administrative costs to satisfy it or refusing to process your claim.

ΙΑ. DPO information

For any request regarding the processing of your personal data, please refer to the Data Protection Officer (DPO) of the ISSA LESVOS:

Full name: ΚΑΡΑΒΑΣΙΛΗΣ ΣΩΚΡΑΤΗΣ

Τelephone: +30 22510 44278

E-mail: issahostel@gmail.com

Website: https://www.issalesvos.gr

ΙΒ. Right to report to the Competent Authority.

In case you feel that your privacy is in any way affected, you may contact the Hellenic Data Protection Authority (www.dpa.gr, 1-3 Kifissias Avenue, 115 23, Athens, +30 210 6475600, +30 210 6475628, contact@dpa.gr).

ΙC. Changes to this Policy

The ISSA LESVOS may unilaterally revise this Policy at any time for reasons of compliance with regulatory changes or for operational purposes.

We encourage you to review this Policy regularly to find out how the ISSA LESVOS manages and processes your personal data.

This Policy was posted on 29.05.2024

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Terms of Use

Welcome to  ISSA LESVOS

These are the Terms and Conditions of the ΚΑΡΑΒΑΣΙΛΗΣ ΣΩΚΡΑΤΗΣ ΚΑΙ ΣΙΑ Ε.Ε, ΑΓΙΟΥ ΕΥΤΡΑΤΙΟΥ 15, 811 32 ΜΥΤΙΛΗΝΗ, (hereinafter “ISSA LESVOS”), and are applicable to all services of ISSA LESVOS and relate to any use of the website www.issalesvos.gr, any other website located within it and/or the available mobile application [hereinafter “the website”].

By using the website, you agree to be bound by these Terms and Conditions. ISSA LESVOS has the right at any time to change the Terms and Conditions under which the content of the website is offered. We may renew these Terms of Use at any time by modifying this page. You should check this page regularly to see any changes that may have been made, as long as they are binding on you. If you do not agree to any of these Terms and Conditions, please do not use this website.

 Legal Capability

Τhis Site is not intended for use by individuals and entities that can not form legally binding contracts under applicable law. Τhe Site and the services offered by the Site are not available to minors. In this case you may not use the Site. You warrant that you have the legal age to surf, use or reserve a room on this Site. If you are under the legal age (under 18 years old according to the greek law), you may contact the hotel directly for assistance.

You also warrant that you are legally authorized to make the travel reservations and/or purchases for either yourself or for another person for whom you are authorized to act. You may only use this Site to make legitimate reservations or purchases and shall not use this Site for any other purposes (including, without limitation, to make any speculative, false or fraudulent reservations etc.).

 Site Content

The Site and all content contained thereon including, images, photographs, logos and other materials, and the copyrights, trademarks, trade dress and other intellectual property rights in such materials are owned by ISSA LESVOS. The Site or any portion of this Site may not be reproduced, duplicated, copied, sold, resold, or otherwise exploited for any commercial purpose that is not expressly permitted by ISSA LESVOS.

Links

The Site may contain links to other websites. ISSA LESVOS provide such links for your convenience only and is not responsible or liable for the actions of such independent websites. The inclusion of these links in no way indicates ISSA LESVOS’ endorsement, support or approval of the content, advertising, products, services, policies or other materials on or available from such websites.

Payment Methods / Transaction Security

Recognizing the importance of electronic payment security, NBG is a licensed Payment Institution by the Bank of Greece (Decision No. 280/3 / 23-7-2018 GG B 3010 / 25-7-2018), and manages securely card payment transactions, in accordance with the regulatory framework of the card transaction security management standard. NBG is certified in accordance with the PCI DSS compliance standards. All NBG  services are made through secure connections with 256bit SSL certificates. NBG  also supports the ability to use the 3D Secure service, an additional security token for VISA & MasterCard. The Payer then has to enter his personal secret code to complete the transaction successfully.

Limitation of liability

Except where prohibited by law, in no event shall ISSA LESVOS be liable for any special, indirect, or consequential damages or any damages whatsoever, whether in an action in contract or tort, arising out of the use or performance of this Site or the Content, or the performance or non-performance by ISSA LESVOS or any third-party providers of products or services related to this Site. This limitation of liability shall apply regardless of whether the claim asserted is based on contract, negligence, or any other theory of recovery, even if ISSA LESVOS have been advised of the possibility of such damages.

Indemnity

You agree to indemnify and hold ISSA LESVOS and their respective affiliates, officers, directors, agents and employees harmless from any claim or demand, including reasonable attorney’s fees, made by any third party due to or arising out of your use of the Site, your breach of these terms and conditions or your violation of any law or the rights of a third party.

Use of Facilities, Premises and Equipment

This use of ISSA LESVOS’ property, facilities, staff, equipment, and/or services carries with it certain inherent risks that cannot be eliminated regardless of the care taken to avoid injuries. In consideration of using the property, facilities, staff, equipment and services (e.g. use of gym, spa, sport facilities, swimming pools etc) of ISSA LESVOS, you , for yourself, your heirs, personal representatives or assigns, do hereby release, waive, discharge, and covenant not to sue ISSA LESVOS, its directors, officers, employees, and agents from liability from any and all claims including the negligence of resulting in personal injury, accidents or illnesses (including death), and property loss arising from, but not limited to, participation in activities and/or use of facilities, premises, or equipment. You understand and agree that these and other risks are inherent in the activities and facilities offered to you by ISSA LESVOS and you knowingly assume all such risks.

You also agree to INDEMNIFY AND HOLD ELLECTRA HOTELS AND RESORTS HARMLESS from any and all claims, actions, suits, procedures, costs, expenses, damages and liabilities, including attorney’s fees brought as a result of your use of any facilities and/or premises and to reimburse us for any such expenses incurred.

Privacy

Your use of this Site is subject to ISSA LESVOS Privacy Policy. If you would like to view the privacy practices that govern how we process information provided on this Site, please review our Privacy Policy. By using this Site, you consent to your personal information being used as set out in our Privacy Policy.

General Notice

ISSA LESVOS strive to ensure that the Contents are accurate and reliable. Howeverc and their agents are not infallible, and errors and/or omissions may sometimes occur.

ISSA LESVOS do not warrant the accuracy, currency or completeness of the contents, including, without limitation, any information relating to prices or availability. ISSA LESVOS will from time to time revise the Contents and/or the products, services and resources described there-in and reserves the right to make such changes without any obligation to notify past, current or prospective visitors of this Web site. In any case, ISSA LESVOS reserves the right to change the room number granted to the guest until the moment of arrival. It is noted that the room number provided to the guest during the check-in process before arrival is indicative and not binding.

Governing Law

These terms and conditions will be governed by and construed in accordance with Greek Law and any disputes relating to these terms and conditions will be subject to the exclusive jurisdiction of the courts of Mytilene.