Owned by “ATHOS LUXURY TRAVEL”

Data Protection Policy

       “ATHOS LUXURY TRAVEL”, owner of “www.gettour.gr” – “GetTourAthens” has taken every possible measure to ensure the confidentiality of your personal information. However, some of the details must be passed on to the service providers (e.g., FareHarbor BV) involved in conducting the tours. Such information is subject to their data protection policy.

       “ATHOS LUXURY TRAVEL” processes your personal information (e.g . financial data, full name etc.) provided by you for the purposes of the providing Service. The Company relies on the legal basis that the processing of your personal information is necessary for entering into and the performance of a contract. If you do not provide us with the required personal information, we are not able to provide you the Service.

Bear in mind FareHarbor’s Privacy Policy and Terms of Service, which describe your rights and responsibilities when using the online booking, reservation, and facilitated payments solution.

After providing the Service, your personal information will be shared with the Provider so the Provider can perform the Activity Contract. Your personal information will be processed further by the relevant Provider, in accordance with their own policies. For such processing of personal information, the relevant Provider is responsible as the data controller. Therefore, if you have a request or a complaint regarding the processing of your personal information by the Provider, please contact said Provider directly. In addition, we may share your personal information with third party service providers who assist us in operating our Service, such as payment service providers and web hosting companies.

The Company will process your information for as long as our processing purpose and our legitimate interests in documentation and keeping evidence require it or storage is a technical requirement, unless we are legally required to keep your personal information, for example in connection with contractual obligations or supervisory and tax obligations. If there are no contrary legal or contractual obligations, we will delete or anonymize your information once the storage or processing period has expired as part of our usual processes.

We may transfer information to countries outside of your country of residence, which may have data protection laws and regulations that differ from those in your country. Any transfers of information originating from within the European Economic Area to countries outside the EEA will be made on the basis of the standard clauses approved by the European Commission, which may be found at the Commission’s website here, without prejudice to our right to conclude that another justification
may also apply.

You have the rights to access; rectification; erasure; restriction on processing; objection to processing and portability. You can exercise those rights by filling out the Data Request Web Form. You also have the right to lodge a complaint with the competent supervisory authority.