ESPA

Privacy policy

THE STORYTELLER Privacy Policy

The Storyteller Boutique House Kalabaka

The confidentiality and security of your information is very important to us. When booking a room, we want to make sure that the information you provide to us is handled by us and protected in accordance with applicable law.

This Privacy Policy provides you with clarifications about who we are and how we collect and manage your information.

Who we are

This Privacy Policy provides an overview of the basic principles governing the processing of personal data in our company, their security and protection as they meet the requirements of the legislation, both at European and national level and the needs of staff. of the company, its customers and partners.

Information we collect, how we process and share it

We collect and process personal information in case you make a reservation through our booking system and / or stay in a hotel under The StoryTeller brand. We generally collect this information directly from you, but in some cases we may collect your information from other sources. We also collect information through the use of third-party service providers technologies, such as pixels, traffic lights, monitoring tools, and the like.

You do not have to provide us with your information, although in some cases, if you do not do so, it may mean that you will not be able to use our services. For example, we may not be able to complete any bookings you wish to make.

To learn more about how we collect, process and share your information, please select the relevant section below.

 

If you are booking at the Company or staying at a hotel with The StoryTeller brand

Information we collect : We collect your information when you make a reservation through the booking system we have or stay at the hotel. Information collected during your booking and stay may include:

  • Your name, e-mail address, home and work address, telephone number, nationality and payment card information,
  • Information related to your subscription to one of our services.
  • Information such as accommodation and room preferences stated in your booking, such as the type of room you prefer and specific hotel requests.

This information may be provided to us directly when booking through one of the international booking offices, through our websites, directly at the hotel or through our mobile applications. In some cases we receive this information from third parties, such as when booking through an online travel agency.

How we process your information:  We process the information we collect from you primarily to complete the booking you have made. Before your stay this may include sending your information to the relevant hotel or sending you pre-stay messages. After your stay, we may also send you messages and satisfaction surveys to get feedback from your experience.

In some cases where we have your consent or are permitted by applicable law, we may send you promotional messages (which may include text messages or telephone conversations using autodialer technology) for products and services. which we consider may be relevant to you.

Who do we share your information with:  We share your information with the hotel where you are going to stay to complete your booking. We may also share your information with third-party service providers to provide services related to our business, as well as to help improve our products and services.

 The legal basis for the processing of your personal data

We are committed to collecting and processing your information in accordance with applicable data protection laws.

We will only collect, process and disclose your information in cases where we are confident that we have the appropriate legal basis to do so. This may be because:

  • you have given us your consent to the use of personal information,
  • our use of your information is necessary for the performance of the contract with you, for example, by making and managing your booking,
  • our use of your information is necessary in order to meet our obligations to our regulators, tax officials, law enforcement authorities, or otherwise to meet our legal obligations,
  • our use of your information is based on our legitimate interest as a business, for example in the operation and improvement of our services and in informing the public about our products and services (including the reasons for profiling and targeted advertising) – In such cases, we will always process your information in a manner that is appropriate and respectful of your privacy rights and you will have the right to object to the processing as explained in the  “Objection to the way we use your information” section.

If you would like to know more about the legal basis on which we process personal information, please contact our contact offices (information can be found in the  “How to contact us” section ). If you have given your consent to our processing of your information you can revoke your consent at any time by contacting the Company Data Protection Coordinator (DPC) (information can be found in the  “How to contact  us ” section ).

Data Transmission

As we also operate through an international network of corporate offices, booking and service centers, data centers and hotels, it may be necessary to transfer your information to a country other than the country where it was originally collected or to your country of residence or nationality. The information you provide to us during booking or through the provision of any other services may be transmitted to any legal entity or hotel owned by the company for the purposes of performing or performing these services.

Where we transmit information from the European Union (“EU”) to a non-EU country (eg US), we will take steps to ensure that such transfers are carefully managed to protect your privacy rights:

  • where we transmit your data outside the company including other companies that provide us with their services, we will undertake contractual commitments and assurances from them to protect your information. Some of these assurances are well-recognized certification schemes such as permanent contract clauses and the EU-US Personal Data Protection Shield transmitted from the EU to the United States of America,
  • We will only transfer personal information to countries that are recognized as providing an adequate level of legal protection or where we can be assured that there are alternative arrangements for protecting your privacy rights; and
  • Any request for information we receive from law enforcement or regulatory authorities will be reviewed prior to the disclosure of personal information.

Use of  WI – FI services

When using our WI-FI services within our Hotel we may collect and process any additional information.

What information do we collect

  • Registration and User-Provided Information : When you register to use the Hotel Login we may collect personal information about you. You may also provide us with personal information about you in a variety of ways when using the Hotel Connection for example when sending us customer service related requests.

How We Process The Information We Collect

We only process personal information for the purposes described in this Policy, unless you have been notified otherwise at the time the data is collected or in addition is authorized by law or by you.

We process personal information that we collect through your Login to the hotel for the operation, maintenance, improvement and provision of all features of the service, in order to provide the services and information you request, answer comments and questions and provide support to users.

We process personal information we collect through your Hotel Login to understand and analyze our users’ usage trends and preferences, improve our Hotel Login service, and develop new products, services, features, and functionality. Please see the section ” Managing your preferences and information” below .

How we protect your information

We are committed to protecting the confidentiality and security of the information you provide to us. To do this, technical, physical, and organizational security measures are in place to protect against any unauthorized access, notification, damage, or loss or loss of your information. We can never guarantee that the collection, transmission and storage of information will be completely secure, however, we take steps to ensure that the appropriate security guarantees are in place to protect your information.

 Manage your preferences and information

We want to make sure you have the tools you need to control the information you provide to us, including how we communicate with you. It is also important that you contact us to update your information if any of this information is inaccurate or has changed. Please select the relevant section below to learn more about how to control how we communicate with you and how to update, modify and delete your information.

Manage your communication preferences

Through the services described above, we, and in some cases third parties and service providers, may be able to contact you about your booking through online digital services (e.g., online advertising, social media chats), or to support some of the other services we provide.

In some cases, you can go to your account, sign in, and select the “Communication Preferences” section to correct your communication preferences. Additionally, your opt-out option will be included in the same communication. In all other cases, or if you have difficulty deleting from any communication specialist, please contact the hotel.

Please note that deleting from one contact category may not delete you from another category. Similarly, deletion from our communications may not guarantee deletion from certain communications performed independently by third parties

Manage your information

In the event that any information you provide to us is inaccurate, changed or you wish to delete it, your information may be updated by contacting the hotel. In some cases, you may update some of your personal information by logging in to your account, logging in and selecting the “Personal Information” section to update and modify your personal information. For all other cases, please contact the company.

We will respond to your request within the deadlines set by law.

Links to Other Pages

Our websites and applications include links to websites maintained and / or controlled by third parties, as well as on social media (facebook and twitter). In some cases these websites may have the same brand and bear our logo or other trademarks. You can always find out if you are on one of our websites by checking the URL of the page you are visiting. We encourage you to review the privacy policies of third party websites as their privacy practices may differ from ours.

Children

Our websites are not intended for children and we do not intentionally solicit or collect personal information from persons under 18 years of age. If we are informed or otherwise find that a minor’s personal information has been improperly collected, we will take all professionally reasonable steps to delete that information. In limited cases, we may run a campaign or program that targets children. In these cases, the information of the information practices will be presented within the terms and conditions of the program or campaign.

 Retention of your information in our systems

We generally only retain your information for as long as is reasonably required for the reasons explained in this privacy policy. In some cases we keep transaction records (which may include your information) for longer periods of time if necessary to meet legal, regulatory, tax or audit needs. We will also retain information if we reasonably believe there is a prospect of litigation.

We maintain a data retention policy which we apply to the files we maintain.

How to contact us

For any questions or concerns regarding this Privacy Policy or our privacy practices, please contact us:

You may also use the above contact information to request access to any of your personal information held by us.

You have the right to file a complaint with your local data protection authority at any time. However, we ask that you first try to resolve any issues with us before submitting your complaint to the supervisory authority.

Changes to this Privacy Policy

In some cases, we may change, correct or modify this Privacy Policy in order to comply with the evolving regulatory environment or the needs of our business. In accordance with any applicable legal requirements for the provision of additional information, any changes to this Privacy Policy will be made known through our website and our mobile applications. However, if changes are made to the use of your personal information in a manner different from that specified at the time of collection, we will take the appropriate steps to inform you, such as posting an update on our website 30 days before the date entry of the changes or by sending you an email.

Your rights under EU data protection legislation

You have the legal rights to your personal information under EU data protection law.

  • Access to personal information

You can ask us to confirm whether or not we have and process your personal information as well as a copy of your information.

  • Correction / deletion of personal information

You can ask us to correct any information about you that is incorrect. We will be happy to correct such information but will need to confirm the accuracy of the information first.

You can ask us to delete your information if you feel that we do not need to process it for a longer period of time for the purpose for which we collected it from you. You may also request the deletion of your information if you have either revoked your consent to our processing of the information (if we originally sought your consent to the processing of your information), or you have exercised your right to object to the lawful processing of the information or where we have them we process unfairly, or where we are required by law to delete your personal information.

We may not always be able to comply with your request, for example where we need to continue to process your information to comply with our legal obligation or where we need to use your information to establish, exercise or defend legal claims.

Restriction of the way personal information is processed

You may request that we restrict our use of your information in certain circumstances, for example:

  • where you consider the information to be inaccurate and need to be confirmed,
  • where the processing of your information by us is not legal but you do not wish us to delete it,
  • where the information is no longer required for the purposes for which it was collected but is processed for the purpose of establishing, exercising or defending legal claims, or
  • where you have objected to our use of your personal information but still need to confirm whether we have overriding reasons to process it.

We may continue to process your information upon request for the restriction where we have your consent to use it, or we need to process it to establish, exercise or defend legal claims, or we need to process it to protect the rights of other persons or company.

  • Objection to the way you use your information

You may object to any processing of your information that we have justified on the basis of our legitimate interest if you believe that the fundamental rights and freedoms of data protection outweigh our legitimate interest in using the information. If you object, we may continue to process your information if we can demonstrate that we have a legitimate interest in processing the information.

You can also ask us to stop processing your data for direct marketing purposes.

  • Request to transfer your information to another

You may request that we provide your personal information in a structured, commonly used and machine-readable format, or you may request that it be forwarded directly to another data controller (eg another company).

You may only exercise this right where we process your information for the purpose of contracting with you, or where we seek your consent to use your information. This right does not apply to any information we hold or process that is not digitally retained.

  • Right to obtain a copy of the applicable personal information guarantees for transfers outside your jurisdiction

You can request a copy, or a reference to the guarantees under which your personal information is transmitted outside the European Union.

We may enter into data transfer agreements for the protection of commercial terms.

We may ask you for proof of identity when you apply for one of these rights. We do this to ensure that we only transmit information where we know it is the right person.

We will not charge you unless we consider your request to be unfounded, repetitive or excessive. Where a charge is required, we will notify you before proceeding with your request.

We intend to respond to all valid requests within one month. However, we may need more time if the request is very complex or you have submitted several requests. We will let you know if we consider that an answer will take more than a month. To help us respond more quickly, we may ask you to provide us with more information about what you would like to receive or what concerns you.

We may not always be able to do what you ask for, for example if it is going to affect the duty of confidentiality we owe to others, or if we otherwise have the legal right to handle your request differently.

totop