Personal Data – GDPR

Pioneers in tourism

Travel Idea

At “TRAVEL IDEA”, we fully respect our customers and place the protection of your privacy as a top priority. For all our services, the data controller – the company responsible for the protection of your personal data – is [company].

At “TRAVEL IDEA”, with the strategic objective of ensuring the highest level of protection of our customers’ personal data, we consider it our duty to inform you both about our practices and about the choices and rights you have regarding the collection and processing of your personal data.

Our principles and values

  • We fully respect our customers and prioritize the protection of your privacy as a core priority of our company.
  • We ensure full transparency in the way we handle your personal data.
  • We collect and process your data only for lawful, fair, specific, and clearly defined purposes.
  • We treat all customer information as strictly confidential and apply all necessary organizational and technical measures to protect it.
  • We do not disclose or transfer your personal data to third parties without your consent, unless required by law or by our contractual relationship.
  • We fully comply with applicable legislation and all obligations arising from it as a data controller.
The personal data we collect

The types of personal data we collect from you depend on the products or services you choose to receive from us. In particular, for the purposes of fulfilling this transaction through our online platform, we collect the following personal data:

  • Your personal details (e.g. full name, tax identification number, date of birth or other identification data, gender, ID card or passport details).
  • Your contact details (e.g. telephone number, residential address, email address).

The personal data we are required to collect in order to provide you with the travel services you have booked through our website are the only mandatory data you must provide.

Depending on the type of travel services you use, we may also collect:

  • Your frequent flyer programme number (Frequent Flyer Number / Miles Card),
  • Information regarding your dietary requirements and health-related information that you voluntarily provide to us (if any),
  • Other information related to your travel or required by another travel service provider (such as airlines and hotels).

This list is indicative and not exhaustive.

  • When you complete the online form on our website in order to proceed with your booking.
  • When you contact one of our representatives by telephone to complete your booking.
  • When you call our customer support department, we collect the data you provide during the call.
  • If you make a booking on behalf of another person through our website, we will request personal data relating to that person. In such cases, we rely on you to inform those individuals about this Privacy Policy.

In certain cases, we may process so-called “special categories of personal data” relating to you, which may be considered sensitive data. This would apply, for example, if (i) you have submitted a medical certificate for a refund from an airline, (ii) you have a medical condition or health issue affecting your travel and for which you request assistance or specific approval, or (iii) you have submitted a request that reveals other sensitive personal data about you.

Before processing your sensitive personal data, we require your consent. You may withdraw your consent at any time. We will not process sensitive personal data that you do not permit us to process or that you have not provided to us. A limited number of our staff members will have access to your sensitive personal data, and once we have processed such data in accordance with your request, we will delete it as soon as reasonably possible.

In order for us to be allowed to process your personal data, applicable data protection laws require that we have a so-called “legal basis” for each purpose for which we process your personal data. We use your information in different ways – what we do depends on the information. The tables below provide details on this matter, showing what we do and why we do it.

What we do (our purposes for processing your personal data) Our legal basis Retention period
Execution of the travel and bookings requested by you (booking of travel services we mediate – provision of our services). Contractual necessity – Consent for sensitive personal data 365 days from the date of purchase. Consent may be withdrawn at any time.
Creation of a user account on our website (username and password). Contractual necessity Data related to travel and personal information will be automatically deleted upon deletion of your account.
Initiation of the booking process without completion, where an email address has been provided. Our legitimate interest in conducting business activities (if you do not wish to receive informational emails, you may unsubscribe at any time via the procedure included in each email or on our website). Within five working days after interruption of the process. Within ninety days for group requests.
Provision of additional information and offers related to your trip (e.g. extra baggage) and other useful travel-related information. Our legitimate interest in conducting business activities (you may unsubscribe at any time via the procedure included in each email or on our website). Data related to offers and information will be automatically deleted upon deletion of your account.
Our newsletter, containing suggestions for other trips and travel-related products and services that may be of interest to you.

If you have provided your email address for the purpose of receiving our newsletter.
Our legitimate interest in conducting business activities.

If you do not wish to receive informational emails, you may unsubscribe at any time via the procedure included in each email or on our website.
If you have requested the newsletter as a service, we will send it until you decide to discontinue the service (termination of the contract).
Use of cookies to improve website usability, provide a personalised experience, and collect usage statistics. We also use temporary cookies to enhance website security. Our legitimate interest in improving our service through internal analysis and, where applicable, handling your requests or claims. If you do not wish cookies to be stored, you may change your browser settings. Depending on the type of cookies (see below).

You are not required to provide any of the above personal information. If you do not provide it, you may not be able to complete your purchase on our e-shop or in our store. However, this is your choice – and we respect it.

We collect and process your personal data, as well as the information relating to your current online booking, in order to issue your invoice and to keep you informed about the proper submission and receipt of your booking by you. We also process this information to manage, provide, tailor, and improve our services and business operations. More specifically, your personal data may be collected and processed by our company for the following purposes, which are deemed necessary for the performance of our contractual relationship:
  • To issue and send you the invoice for the services provided.
  • To ensure your entitlement to the warranty for the products and services you purchase, in accordance with the terms specifically agreed between us.
  • To notify you of any significant changes or developments regarding your online booking, up to its completion.
  • To communicate with you via email, telephone, or other means, regarding any matter arising in the context of our contractual relationship and until its completion, including, by way of example, responding to inquiries, complaints, or cancellations relating to our products and services.
  • To assign and carry out the monitoring of any changes or cancellations and, in general, any irregular development of our transaction.
  • To safeguard our rights before any Court or Authority, as well as for the purposes of complying with and enforcing court decisions or legal provisions, directives, regulations, and circulars.
To facilitate the achievement of our purposes, we may transfer, disclose, grant access to, or share your personal data with third parties. In such cases, these third parties may include:
  • Partners and subcontractors who provide data storage (data hosting), data hosting services, or support for our online store.
  • Companies that cooperate with us in order to complete your booking and successfully conclude our transaction, such as airlines, hotels, insurance companies, and Global Distribution Systems (GDS), in order to facilitate the organization of your travel and your bookings.
  • Public authorities and organizations, legal entities governed by public law (NPDD) or private law (NPID), judicial authorities, regulatory bodies and organizations, regardless of jurisdiction or level, where required by law, court decision, regulation, directive, order, opinion, circular, etc.
  • Our special or universal successors in the event of the sale, transfer, merger, or liquidation of our business.
Each partner is responsible for the handling of your personal data once they receive it from us, which means that you should contact the respective partner directly for any requests related to your rights under the applicable data protection legislation. We recommend that you review the respective privacy policies of our partners to obtain information on how they process your personal data. Due to the global nature of the travel industry, your personal data may be processed in various locations worldwide when the parties to whom we disclose your personal data are based in countries outside the EU/EEA. Our disclosure of personal data outside the EU/EEA requires an appropriate legal basis under the applicable data protection legislation. In cases where a country is deemed by the European Commission to provide an adequate level of protection for personal data, this will constitute our legal basis. Otherwise, there are three main types of legal basis upon which we may rely for such data transfers:
  • that the transfer is necessary for the performance of the contract we have entered into with you (for example, when you have booked a flight with an airline based outside the EU/EEA),
  • that the transfer is based on the standard data protection clauses for the transfer of personal data to countries outside the EU/EEA adopted by the European Commission (you can find a copy of these standard clauses at http://ec.europa.eu/justice/data-protection/international-transfers/transfer/), and
  • the EU–US Privacy Shield, in cases where the transfer is made to the United States and the recipient is duly certified.
In order to ensure the proper use and integrity of the personal data it collects, and to prevent unauthorized or accidental access, processing, deletion, alteration, or any other misuse, our company implements specific internal compliance policies and adopts all appropriate organizational, technical, physical, electronic, and procedural security measures, as well as relevant technological standards, in accordance with applicable laws and regulations.
In accordance with applicable data protection legislation, you have certain rights as a “data subject.” Your rights are outlined below. Your rights include the following:
  • Right of access – You have the right to access the personal data we process. You also have the right to receive certain information about how we use your personal data. This information is provided in this document.
  • Right to rectification – Under certain circumstances, you have the right to correct inaccurate personal data and to complete incomplete personal data. Please note that we may not be able to correct inaccurate personal data you have provided due to, for example, airline regulations, and that a fee may apply for such changes.
  • Right to erasure – Under certain circumstances, you are entitled to have your personal data deleted. This is also known as the “right to be forgotten.”
  • Right to restriction of processing – Under certain circumstances, you are entitled to restrict the way we use your personal data.
  • Right to data portability – You are entitled to receive your personal data (or to have your personal data transmitted directly to another data controller) in a structured, commonly used, and machine-readable format.
  • Right to object – You have the right to object to certain types of personal data processing carried out by us. This applies to all processing activities based on our “legitimate interests.”
  • The right to lodge a complaint with your data protection regulator – in Greece, the Hellenic Data Protection Authority (http://www.dpa.gr/).
In all cases, it is our intention to ensure the accuracy of your personal data. For this reason, if you find that any of your personal data is inaccurate or incomplete, please do not hesitate to request its correction or completion. In addition, we would like to inform you that you have the right to request the erasure of your personal data where (a) it is no longer necessary for the purposes of our electronic transaction, (b) it has been processed unlawfully and beyond the purposes described in this document, or (c) erasure is required by law. You also have the right to withdraw (in whole or in part) your consent to the collection and processing of your personal data by our company. In such a case, please note that any withdrawal of your consent may result in the inability to complete our electronic transaction. In any case, you have the right to lodge a complaint with the Hellenic Data Protection Authority if you believe that your rights have been infringed by the processing of your personal data. We will report any unlawful data breach of this website’s database or the database of any third-party data processor to any and all directly affected parties, as well as to the competent authorities, within 72 hours of becoming aware of the breach, where it is evident that personal data stored in an identifiable form has been compromised.

We always value hearing from our customers (especially if you feel that we have fallen short or could have served you better).

If you:

  • Have questions or comments about this notice.
  • Would like us to stop using your information.
  • Wish to exercise any of your rights as described above or to lodge a complaint.

Please do not hesitate to contact our Customer Service team, who will be happy to answer any questions you may have. For further information or clarifications regarding our company’s data protection practices, you may contact us either by post at the contact details provided below or via email at info@travelidea.gr.

Alternatively, you may write to us at:

“Taxidiotikes Idees General Tourism Office Ltd.”, trading as “TRAVEL IDEA”, with its registered office in Athens, at 5 Akadimias Street.

We may update this page from time to time to better reflect how we process your data. If we make significant changes, we will make this clear on the TRAVEL IDEA website or through other communication channels, such as email, so that you can review the changes before continuing to use TRAVEL IDEA services.

We use cookies on our website. For more information about cookies, please refer to our cookie notice.

Cookies are small text files stored on your computer—some only until you close your browser (so-called “session cookies”) and some for an extended period (so-called “persistent cookies”). If you do not wish to allow cookies to be stored on your device, you can change your browser settings. Please note, however, that in some cases this may result in certain features of our website not functioning properly and some content not being displayed correctly.

This website uses cookies for various purposes, including providing a personalized experience, improving the usability of the website, and collecting usage statistics. We also use session cookies to enhance the security of this website.

In some cases, when using cookies, we disclose data to third parties. For example, we use Google Analytics and Google Ads services, which transfer website traffic data to Google servers. Google Analytics does not identify individual users and does not associate your IP address with any other data held by Google. We use reports provided by Google to understand website traffic and usage, and to optimize the advertisements we purchase from Google’s advertising network and others. Google may process the data as described in the Google’s Privacy Policy and for the purposes outlined above in this section. You can disable Google Analytics by disabling or rejecting the cookie, disabling JavaScript, or using the opt-out service provided by Google. To disable Google’s advertising features, follow this link.

For more information about cookies, please visit http://www.youronlinechoices.com/
.

Our goal is to help people in the best way possible. this is a basic principle in every case and cause for success. contact us today for a free consultation.