Privacy Policy & Personal Data Protection

The business “HANKOUL ABDOUL WHAHID” – hereinafter referred to as “the Company” – owner of the website corfuboattours.gr, respects the privacy of its visitors and customers and is committed to protecting their personal data, in accordance with the General Data Protection Regulation GDPR – Regulation (EU) 2016/679 – and the applicable Greek legislation.

This Privacy Policy is intended for informational purposes and describes how the Company collects, uses, stores and protects the personal data of visitors and customers of the website.

Data Controller

The data controller of the personal data is the business:

1. What personal data we collect

During your browsing of the website or during the use of our services, we may collect the following personal data:

HANKOUL ABDOUL WHAHID 
Website: corfuboattours.gr
Contact email: info@corfuboattours.gr 
Address:  Paleokastritsa, P.C. 49083, Corfu, Greece

    • Full name

    • Contact telephone number

    • Email address

    • Booking details

    • Date and time of booking or interest

    • Billing details, where required

    • Contact details provided through forms

    • IP address and technical browsing data

    • Cookie data, where cookies are used on the website

The data is collected only when it is necessary for the provision of our services or when it is voluntarily provided by the user through contact forms, booking requests or other functions of the website.

2. Purposes of processing

The personal data we collect is used for the following purposes:

    • Communication with the customer or interested person

    • Management of boat requests and bookings

    • Provision of information regarding tours, rentals and services

    • Organization and confirmation of bookings

    • Provision of support before or after the booking

    • Issuance of lawful documents, where required

    • Improvement of the user experience on the website

    • Security and proper operation of the website

    • Sending informational material or offers, only where relevant consent has been given

3. Legal basis for processing

The processing of personal data is carried out, as applicable, on the basis of the following legal grounds:

    • Performance of a contract or pre-contractual measures, when the user requests information, an offer or a booking.

    • Compliance with a legal obligation, such as the issuance and retention of tax documents.

    • Consent of the user, where required, such as for the sending of informational material or for the use of non-essential cookies.

    • Legitimate interest of the Company, for the security, operation and improvement of the website and the services provided.

4. Cookies

The website may use cookies and similar technologies for its proper operation, the improvement of the browsing experience, traffic analysis and, where applicable, advertising purposes.

Cookies may be used for:

    • Essential operation of the website

    • Traffic statistics

    • Improvement of user experience

    • Advertising purposes

    • Remarketing or display of relevant advertisements

The use of non-essential cookies, such as statistics or advertising cookies, takes place only where the user has given the relevant consent, where this is required.

The user may manage or modify cookie preferences through the relevant mechanism/settings of the website, where available, or through the settings of their browser.

If the website uses tools such as Google Analytics, Google Ads, Meta Pixel or other tracking/advertising platforms, it is recommended that a separate Cookie Policy and an appropriate cookie banner with accept and reject options are available.

5. Recipients and transfer of data

The Company does not sell, rent or disclose personal data to third parties for commercial exploitation.

Personal data may be transferred only when this is necessary for the provision of our services or when required by law.

Indicatively, recipients of data may include:

    • Website hosting providers

    • Technical partners supporting the website

    • Email or contact form providers

    • Accountant or tax advisor, where required

    • Payment providers, where online payments are used

    • Analytics or advertising platforms, where used and where the required consent exists

In all cases, the Company takes measures to ensure that partners who process data on its behalf comply with personal data protection requirements.

6. Transfer of data outside the European Union

In the event that third-party services are used, such as analytics, advertising, email or cloud services, some data may be transferred outside the European Union.

In such cases, the Company seeks to ensure that the transfer is carried out in accordance with the safeguards provided by the applicable personal data protection legislation.

7. Data retention period

Personal data is retained only for as long as necessary for the purposes for which it was collected.

Indicatively:

    • Contact data is retained for as long as required to respond to and serve the user’s request.

    • Booking data is retained for as long as required for the completion of the service and customer support.

    • Billing data is retained for as long as required by the applicable tax and commercial legislation.

    • Data related to consent for informational material is retained until the user withdraws their consent.

8. Security of personal data

The Company takes appropriate technical and organizational measures to protect personal data from unauthorized access, loss, alteration, disclosure or destruction.

However, no transmission of data over the internet can guarantee absolute security. The Company makes every reasonable effort to protect users’ data.

9. User rights

The user has the following rights regarding their personal data:

    • Right of access to their data

    • Right to rectification of inaccurate or incomplete data

    • Right to erasure, where permitted by law

    • Right to restriction of processing

    • Right to object to processing

    • Right to data portability

    • Right to withdraw consent, where the processing is based on consent

To exercise the above rights, the user may contact the Company at the email address:

info@corfuboattours.gr

The Company will review each request and respond within the time period provided by law.

10. Right to lodge a complaint

If the user considers that their rights regarding the protection of their personal data are being violated, they have the right to lodge a complaint with the competent supervisory authority.

The competent authority in Greece is:

Hellenic Data Protection Authority
Website: www.dpa.gr

11. Informational material and offers

The Company may send informational material, news or offers only where the user has given their consent.

The user may withdraw their consent at any time by contacting the Company at the email address:

info@corfuboattours.gr

12. Amendment of the Privacy Policy

The Company may amend this Privacy Policy whenever required, for reasons of compliance with legislation or for the purpose of improving the information provided to users.