We may collect personal information about you when you use our website, and otherwise interact with us. The information we collect falls into three categories: (a) information you provide us; and (b) information we collect through automated methods, and (c) information we collect from other sources.

We may combine the information you provide us, with information that is collected through automated methods, and with information we receive from other sources.

We collect information you provide us. You may provide the following information to us:

• (a)
  personal details, such as your name, postal and email addresses, phone number, date of birth and other contact information, when you register with our Website, log-in to Wi-Fi, enter one of our competitions, or contact us by phone or through our online services;
• (b)
  transaction, information, including information about the services you book, prices, method of payment and payment details;
• (c)
  Account information, such as your username or password (or anything else that identifies you) used to access our online services or to buy or use our products and services;
• (d)
  Profile information, including products and services you like, or times you prefer to visit us; and
• (e)
  Other personal information you choose to give us when you interact with us.

We collect information through automated methods:

• (a)
  We may use automated technology to collect information from your computer system or mobile device when you visit our restaurants, use our online services, or in-restaurant technology. Automated technology may include cookies, local shared objects, and web beacons. There is more information below about cookies and other technologies.

We may collect information about your:

• (a)
  internet protocol (IP) address;
• (b)
  computer or mobile-device operating system and browser type;
• (c)
  type of mobile device and its settings;
• (d)
  unique device identifier (UDID) or mobile equipment identifier (MEID) for your mobile device;
• (e)
  device and component serial numbers;
• (f)
  advertising identifiers (for example, IDFAs and IFAs) or similar identifiers;
• (g)
  referring website (a site that has led you to ours) or application;
• (h)
  online activity on other websites, applications, or social media;
• (i)
  communications to us or regarding us on social media; and
• (j)
  activity related to how you use our online services, such as the pages you visit on our sites or in our mobile apps.

Our Website may collect information about the exact location of your mobile device or computer using geolocation and technology such as GPS, Wi-Fi, Bluetooth, or cell tower proximity. For most mobile devices and computer systems, you are able to withdraw your permission for us to collect this information by using the device or web-browser settings. If you have any questions about how to prevent us from collecting exact information about your location, we recommend you contact your mobile-device service provider, the device manufacturer, or your web-browser provider. Our Website may not work properly without information about your location. If you would like us to delete information we have collected which could identify your location, please contact us at the address, phone number or email address below.

We may collect information about your:

• (a)
  We may collect information about you from other companies and organizations. We may also collect information that is publicly available. For example, we may collect information about you when you interact with us through social media.

We may obtain information about your general internet usage by using a cookie file which is stored on your browser or the hard drive of your computer. Cookies contain information that is transferred to your computer’s hard drive. They help us to improve our site and to deliver a better and more personalised service. Some of the cookies we use are essential for the site to operate. Please note that our advertisers may also use cookies, over which we have no control. For more information on the way we use cookies, please refer to our Cookies Policy.

We use information held about you in the following ways:

• (a)
  To ensure that content from our site is presented in the most effective manner for you and for your computer.
• (b)
  To provide you with the information or services you have requested and for internal customer administration and business purposes.
• (c)
  To allow you to participate in interactive features of our Website, when you choose to do so.
• (d)
  To notify you about changes to our Website.
• (e)
  If you consent to receive marketing material from us, we may use your data to send you marketing and other materials relating to Mitsis Hotels.

We may also use your data, or permit selected third parties to use your data, to provide you with information about goods and services which may be of interest to you and we or they may contact you about these. We do not disclose information about identifiable individuals to our advertisers, but we may provide them with aggregate information about our users. We may make use of the personal data we have collected from you to enable us to comply with our advertisers’ wishes by displaying their advertisement to that target audience.

The data that we collect from you shall not be transferred to, and stored at, a destination outside the European Economic Area (“EEA”).

All information you provide to us is stored on our secure servers. Any payment transactions will be encrypted.

Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

We retain personal information for the period of time necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

We will only share your information as described in this Privacy Policy.

We may share your information within the Mitsis Hotels Group of Companies. The Mitsis Hotels Group of Companies includes all our Hotels, our affiliates and our subsidiaries. Members of the Mitsis Hotels Group of Companies who receive this information from us are not authorized to use or share the information, except as set out in this Privacy Policy.

We may share your information with vendors who provide services to us, such as fulfilling orders, providing data processing and other information technology services, managing promotions, contests, prize draws and sweepstakes, carrying out research and analysis, and personalizing individual customer experiences. We do not allow these vendors to use this information or to share it for any purpose other than to provide services on our behalf.

We may, for strategic or other business reasons, decide to sell or transfer all or part of our business. As part of that sale or transfer, we may pass information we have collected and stored, including customer information, to anyone involved in the sale or transfer.

There may be times where we may share information when it does not directly identify you. For example, we may share anonymous, aggregated statistics about your use of our Website. Or we may combine information about you with other customers and share the information in a way that does not identify you.

We have the right to use or share information as necessary to keep to any law, regulation or legal request, to protect our Website, to bring or defend legal claims, to protect the rights, interests, safety and security of our organization and our employees, or users of the Website, or in connection with investigating fraud or other crime, or violations of our policies.

Under the applicable legislation you have the right to request access to the personal data we hold about you, i.e. to be informed upon your request whether your personal data are subject to processing and to receive further information on such processing, including information on eventual transfers of personal data outside the EU and the appropriate or suitable safeguards we have in place for such transfer. As long as the requirements under the applicable legislation are met, you may also request the correction of any inaccurate information we hold about you or the deletion of the same or restriction of the processing concerning your personal data. If such a request places us or our affiliates in breach of its obligations under applicable laws, regulations or codes of practice, then we may not be able to comply with your request but you may still be able to request that we block the use of your personal information for further processing. You may also have a right to data portability to another data controller under certain circumstances. You may withdraw your consent at any time. The withdrawal of your consent will not affect the lawfulness of processing based on consent before its withdrawal. You may also lodge a complaint with the competent Data Protection Supervisory Authority, if you feel that the processing contravenes the law.

If you would like to exercise your rights above or if you have any questions or concerns about our Privacy Policy please contact [email protected].

Our Website may, from time to time, contain links to and from the websites of our partner networks, and advertisers. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

We may also have providers of other apps, tools, widgets and plug-ins on our online services, such as Facebook “Like” buttons, which may also use automated methods to collect information about how you use these features. These organizations may use your information in line with their own policies.

This Privacy Policy is in effect as of the date noted at the top of the statement. We may change this Privacy Policy from time to time. If we do, we will post the revised version here and change the “last updated date” (the date it applies from) at the top of the statement. You should check here regularly for the most up-to-date version of the statement.

Any changes we may make to our Privacy Policy in the future will be posted on this page and, where appropriate, notified to you by e-mail.

If you want to contact us about this Privacy Policy as well as for the exercise of your rights, you can reach us at [email protected].