GDPR Privacy Notice

Introduction and background

The purpose of this policy is to outline how LuxOlympus Ltd has established measures to protect your privacy and information rights.

 

Your rights

We recognise that you have rights as a ‘data subject’, and that we have an obligation to uphold these.

This privacy notice aims to outline how we maintain these rights. In particular, it outlines:

  • How we collect and process your information
  • Why we do this
  • How you can exercise your rights
  • Who to contact in the event you’re unhappy with our performance

Depending on why we have collected your information, your information rights could include:

Rights Explanation
Right to be informed This encompasses the obligation for us to be transparent in how we collect and use your personal data.
Right of access You have the right to access your personal data and supplementary information.
Right to rectification If the information we hold on you is inaccurate or incomplete, you can request we correct this.
Right to erasure You can request we delete or remove personal data where there is no compelling reason us to continue processing
Right to restrict processing You have the right to request we cease processing your data, if:

  • You consider it inaccurate or incomplete
  • Where you object to processing and we are considering whether we still have a legitimate interest to process it.
  • Where we don’t need the data for the original reason we collected it, but may need it to support a legal claim
Right to data portability Where you have consented to our processing your data, or where the processing is necessary for us to deliver a contract, you can request a copy of that data be provided to a third party in electronic form.
Right to object You have the right to object to our processing under certain circumstances. For example, you can object to:

  • direct marketing (including profiling); and
  • processing for purposes of scientific/historical research and statistics
Rights relating to automated decisionmaking including profiling Where we apply automated decision making, we must:

  • give you information about the processing;
  • introduce simple ways for you to request human intervention or challenge a decision;
  • carry out regular checks to make sure that our systems are working as intendedInformation related to automateddecision making is contained later inthis notice

 

 

Information we collect

Please find below a summary of the information we collect and how we use this to deliver services to you.

Information we collect Why we collect this How we process this
Personal details Necessary details you provide us with in order to process your booking. In all our correspondence and data processing we ensure all information is written in plain English
Family, lifestyle, social circumstances and religion: For our tailor made services sometimes we might ask for such information in order to offer you the best possible experience with LuxOlympus (i.e.: children-friendly environment, space for prayers, etc.).

If we do not receive this kind of data we may not be in a position to offer the highest level of experience.

In all our correspondence and data processing we ensure all information is written in plain English.

 

Retention of data

LuxOlympus Ltd retains information for five (5) years from our point of last contact. We hold this information to support our legal and regulatory requirements. If you object to this retention, please contact us – details provided in the ‘Contact’ section.

 

Reasons/purposes for processing information

We process personal information to enable us to provide travel agency services to our customers, to promote our services, to maintain our accounts and records and to manage and support our employees. We also use CCTV systems to monitor and collect visual images for the purposes of security and the prevention and detection of crime.

Who the information may be shared with

We sometimes need to share the personal information we process with the individual themselves, their relatives, guardians or our business partners. Where this is necessary we are required to comply with all aspects of the Data Protection Act (DPA). What follows is a description of the types of organisations we may need to share some of the personal information we process with for one or more reasons.

Where necessary or required we share information with:

  • suppliers and service providers

 

Contact details

We recognise that you may have questions on how we process and/or store your data, or may want to change either the data we hold on you or how we communicate with you in the future.

If you have given consent for processing, you are free to withdraw that consent.

To let us know this is the case email us at [email protected]

If you have any questions in respect of this notice, or would like to exercise your rights as a data subject (for example, to correct data or to exercise your right to access) please contact LuxOlympus Ltd, as data controller, at [email protected]

If you are unhappy that we have responded to your query inadequately, or if you have a further complaint, The Information Commissioner’s Office can be contacted on [email protected]

GET IN
TOUCH

  • United Kingdom

  • 84 Brook Street
  • Mayfair, London - UK
  • W1K 5EH
  • +44 (0)20 7193 7074
  • Greece

  • Ermou & Kornarou 1
  • Syntagma, Athens
  • Greece - 10563
  • +30 210 32 24 897
  • [email protected]