JavaScript must be enabled

DATA PROTECTION

25.02.2025

This privacy policy applies to the website experievities.gr

Responsible:

Ioanna Mitroulaki

Kolonnenstr. 8

10827 Berlin

Email: contact@experievities.gr

1. Processing of personal data

Within the scope of the website, we process personal data from you, among other things, as follows (for further data processing within the website, please refer to the following sections of this privacy policy):

Log files when visiting the website

When using our website, our hosting provider logs so-called "log file" data for each access to the servers, such as the name of the accessed website, previously visited page ("referrer" URL), product and version information of the used browser and operating system, requesting provider, date and time of access, used search engines, country of access, amount of data transmitted, names of downloaded files, and IP address.

The legal basis for processing is Article 6(1)(f) of the GDPR. Our legitimate interest in storing the log file data lies in ensuring system security, including investigating misuse. The log file data is deleted or anonymized after a maximum of 30 days, unless it is required for a security-related incident, such as for investigation or evidentiary purposes.

Personal data we collect automatically:

Upon visiting our website, we gather specific data automatically. This comprises your IP address, the time and date of accessing our services, as well as details concerning your computer's hardware and software, such as the operating system, internet browser, software or application versions, and language preferences. Additionally, we gather information about your clicks and the pages that have been displayed to you.

Contact:

When you make contact inquiries, we process your personal data such as name, address, email address, phone number, or similar information that we require to responde to your inquiry.

The legal basis for processing your personal data in the context of contact inquiries is Art. 6(1)(b) of the GDPR if your inquiry is aimed at concluding a contract. Otherwise, Art. 6(1)(f) of the GDPR applies, with our legitimate interest lying in responding to inquiries.

In the context of contact inquiries, we store your personal data for as long as it is necessary to process your request or for compliance with legal retention obligations.

Newsletter:

When you subscribe to our newsletter, we process the data collected during the registration process, such as your email address, salutation, etc., for the purpose of sending the newsletter.

If the data processing for the purposes described above is based on your consent, the legal basis is Article 6(1)(a) of the GDPR. Otherwise, the data processing is based on Article 6(1)(f) of the GDPR ("legitimate interests"), where the legitimate interests lie in the aforementioned purposes.

We store the personal data necessary for sending the newsletter for as long as we need it for this purpose or until you withdraw your consent to receive the newsletter. Any legitimate continued storage for other purposes (such as customer communication) remains unaffected by this.

2. Why we collect and use your personal data?

The information we gather about you serves multiple purposes and can be utilized in the following manners:

  • Marketing activities: We will utilize your provided contact details to regularly deliver updates regarding travel-related offers, products and services that are displayed to our website. If you wish to discontinue receiving email marketing communications, you have the option to unsubscribe effortlessly and promptly at any point. You can simply click on the 'Unsubscribe' link present in every newsletter.
  • Communicating with you:We handle the communications you send to us, and there are various reasons for doing so, including: We will address and manage any inquiries or requests made by you in a timely manner.
  • To enhance the quality of our services and provide an improved user experience, we utilize personal data for analytical purposes and continuous product enhancement. This involves using data for testing, troubleshooting, and generating statistical insights about our business. Our objective is to understand the performance and usage patterns of our services in order to optimize and customize our website, making it more user-friendly and meaningful. Whenever feasible, we prioritize the use of anonymized and de-identified personal data for these analytical efforts.

3. Cookies

Cookies are small text files that are stored on the user's computer and enable analysis of the user's usage of the website.

Cookies can, for example, be used to make the website usage easier and more convenient for the visitor, or to enable certain functions, or for the analysis of visitor traffic.

If personal data is processed by individual cookies used by us, the processing is carried out in accordance with Art. 6(1)(b) GDPR for the performance of the contract, in accordance with Art. 6(1)(a) GDPR in the case of consent given, or in accordance with Art. 6(1)(f) GDPR for the protection of our legitimate interests in the commercially viable operation of our online offerings and the user-friendly and effective design of website visits.

The storage duration of cookies may be limited to the duration of the respective browser session, i.e., the cookies are deleted after the browser is closed (temporary cookies), or the storage duration may extend beyond that in order to recognize the user during their next visit and display preferred content, for example (persistent cookies). Unless we provide different information in this privacy policy, in our cookie management services, or in other separate cookie information, you should assume that cookies are persistent and have a storage duration of up to two years.

You have the option to revoke your consent to the setting of cookies or to object to the processing of data by cookies at any time by deleting the cookies in your browser settings.

You can also configure your browser to accept the storage of cookies only if you consent to it.

When it comes to display cookies, you can block and/or manage many of them through the following services:

However, if you refuse cookies, you may not be able to use certain website features, services, applications, or tools.

Cookies on our websites may be set by us. We use essential and analytical cookies.

Necessary: These cookies and additional technologies are necessary for the operation of our website and for delivering any requested services. It does not contain any data that can be used to identify the website visitor. It stores information about the categories of cookies the site uses and whether visitors have given or withdrawn consent for the use of each category. This cookie has one year lifetime.

Analytics: Analytical cookies and technologies assist us in gaining insights into user interactions with our website, ultimately leading to enhancements in our site's performance and the delivery of engaging and pertinent content to you. We generate anonymous reports and statistics.

Cookies list:

    Necessary:

  • XSRF-TOKEN: It stores the current CSRF token that is included with each response generated by the framework (that was used to create the website). It is used to protect against Cross Site Request Forgery.
  • experievities: It is a session cookie. This cookie expires with the end the session.
  • Analytics:

  • experievities_cookie_consent: It stores whether visitors have given consent for the use of analytics cookies. This cookie has one year lifetime.
  • experievities_notify_cookie: It stores whether visitors have withdrawn consent for the use of analytics cookies. This cookie has seven days lifetime.

Our website contains affiliate links. If you click on such an affiliate link and potentially make a transaction on the destination page, we may receive a commission or other compensation from the affiliate program operator.

Based on the link, the affiliate program operator can see that you have accessed the respective destination page through our website and thus attribute the aforementioned compensation.

In the affiliate links and/or in a cookie that is set on your computer, additional information can be included in this context, such as the referring website (referrer), the timestamp, an online identifier of the operator of the referring website and/or the respective offer, the type of link used, the type of offer, or an online identifier of the user.

To the extent that data processing for the purposes described above is based on your consent, the legal basis is Article 6(1)(a) of the GDPR (consent). Otherwise, data processing is carried out based on Article 6(1)(f) of the GDPR ("legitimate interests"), where the legitimate interests lie in the purposes mentioned above.

Affiliate programs used:

5. Affected rights

You have the right, according to Article 15 of the General Data Protection Regulation, to request information about the processing of your personal data ("Right of access by the data subject").

You have the right, according to Article 16 of the General Data Protection Regulation, to request the correction and deletion of your personal data that is inaccurate or incomplete ("Right to rectification").

According to Article 17 of the General Data Protection Regulation, you can request the deletion of your personal data if one of the listed grounds applies ("Right to erasure").

Similarly, you have the right, according to Article 18 of the General Data Protection Regulation, to request the restriction of processing of your personal data if one of the listed conditions applies ("Right to restriction of processing").

According to Article 20 of the General Data Protection Regulation, you have the right to receive the personal data concerning you, which you have provided, in a structured, commonly used, and machine-readable format and have the right to transmit those data to another controller ("Right to data portability").

Revocation of consent: See the section "Right to withdraw consent" in this privacy policy. Right to object: See the section "Right to object" in this privacy policy. You have the right to lodge a complaint with the competent supervisory authority.

6. Right of withdrawal

You can revoke your consent to the processing of your personal data at any time, for example, by sending an email to the email address provided at the beginning. The lawfulness of the processing carried out based on the consent prior to its revocation will not be affected by this.

7. Right to object

To the extent that our data processing is based on Article 6(1)(f) of the GDPR ("legitimate interests"), you have the right, in accordance with Article 21 of the GDPR, to object to the processing of your personal data.