At “International Airport of Heraklion Crete S.A.” we stress the importance of privacy and are committed to adopting and implementing high standards for the protection of personal information in accordance with the Regulation (EU) 2016/679 (General Data Protection Regulation or “GDPR”) and other applicable data protection legislation.
The present Website Privacy Notice (“this Notice”) applies for the use of the website of “International Airport of Heraklion Crete S.A.”. Its purpose is to provide information about the collection, storage, use and any other type of processing of visitors’ data by “International Airport of Heraklion Crete S.A.”, in its capacity as “Controller” as well as your rights in accordance with applicable legislation.
This Notice outlines the type of personal information/data we collect and receive through the use of this website, the circumstances in which we collect or receive personal information, the procedures we have established outlining its use and storage, and for sharing certain types of personal information in certain limited circumstances, the procedures you should follow if you have any questions or requests in respect of your personal information and where such questions or requests should be directed, and the means by which to communicate with us.
In this notice “International Airport of Heraklion Crete S.A.” means “International Airport of Heraklion Crete S.A.” and its affiliated companies, as they may exist from time to time, which include, without limitation, the subsidiaries which carry on business that use the following names: {Company Name} and {Company Name}. The words ‘we’, ‘us’ and “International Airport of Heraklion Crete S.A.” are used interchangeably in this Notice and does not include any third parties .
In this Notice, the following definitions shall apply:
“Personal Information/Data” means information about you (or another physical person) where you/or other person are already identified or that is personally identifiable like a person’s name, an identification number, address, location data, e-mail address or phone number.
“Controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal information/data.
“Processor” means a natural or legal person, public authority, agency or other body which processes personal information/data on behalf of the controller.
“Data Subject” means the physical person, for which the Controller collects and processes personal information.
“Processing” means any operation or set of operations which is performed on personal information/data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
You are the Data Subject within the context of this Notice.
“International Airport of Heraklion Crete S.A.”, Ikarou Avenue 26, Nea Alikarnassos, PC 71307, Heraklion Crete, is the “Controller” of your personal data that may be collected, received, processed and retained.
“International Airport of Heraklion Crete S.A.” does not collect or process special categories of personal data, as these defined in the provisions of the applicable data protection legislation (such as indicatively data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or data concerning health or data concerning a natural person’s sex life or sexual orientation).
Below we will outline the type of information normally collected in each of these circumstances, the reasons for doing so, how we will use it and store it.
“INTERNATIONAL AIRPORT OF HERAKLION CRETE S.A.” OFFERS YOU THE ABILITY TO SUBSCRIBING TO OUR NEWSLETTER AND /OR RECEIVE TARGETED, TIMELY NOTIFICATION OF TIME SENSITIVE OFFERS
For subscribing to our newsletter or to sign up for this marketing service we require you to provide us with your e-mail address, first name, last name, language preference, and country of residence. You may unsubscribe at any time using the link provided on every e-mail message and you will no longer receive the newsletter or e-mail offers and promotions for the specified subscription or website.
You may at any time in the future opt-in to subscribing to our newsletter and/or receive e-mail offers.
You can opt out from receiving our newsletter or of our advertising and marketing communications at any time by any of the following methods:
For information as to the use of “cookies” on our website please refer to our Cookies Policy.
We may also evaluate our content and services and tailor our website, for visitors, based on other information we collect, such as IP addresses, which are numbers assigned to your computer whenever you use the Internet, pixel tags (or clear gifs), and the type of Internet browser or operating system you are using. This information is collected in the aggregate, but we may tie it to your personal information through cookie use as described above.
We disclose personal information only in these limited circumstances:
Any such disclosure of a user’s personal information by “International Airport of Heraklion Crete S.A.” to a third party will be made on terms and conditions corresponding to each particular case and only on a confidential basis conditioned upon the information being used only for the purpose for which it has been disclosed.
Your personal information will be retained for as long as required for the purposes for which the information is collected and used, taking into account legal and regulatory requirements to retain the information for a minimum time period, limitation periods, for taking legal action and “International Airport of Heraklion Crete S.A.” business purposes.
For website visitor we may keep your data for a period of [three (3) years] from their collection. Following this time period, “International Airport of Heraklion Crete S.A.” will proceed with the secure destruction and/or deletion of your data.
In order to operate our website and any activity over our website, we may need to transfer your personal information to locations outside Greece. We will only transfer your data within the European Economic Area (EEA).
In the event where we need to transfer your personal information to a location outside the EEA, we will implement appropriate measures to ensure that your personal information remains protected and secure in accordance with applicable data protection legislation.
You are always free to refuse to provide personal information to us, or exercise any of your rights provided below.
You may also withdraw your consent with respect to the use of your personal information for subscribing to our newsletter or to sign up for marketing purposes at any time as indicated above in the relevant section of this notice.
However, in the event you refuse to provide personal information to us or withdraw your consent or exercise certain of our rights provided below, this may limit our ability to serve you.
Withdrawal of previously given consent will have effect for the future and will not affect the lawfulness of processing based on consent until the time of its withdrawal. Please note however that, even after you have chosen to withdraw your consent we may be obliged or able to continue to process your personal information to the extent required or other wise permitted by law.
Website and System Security:
The website and the system infrastructure of “International Airport of Heraklion Crete S.A.” utilized for the collection and storage of personal information use security mechanisms providing sufficient security and are operated by trained and authorized personnel in order to achieve the maximum possible protection of personal information within today’s digital environment.
Nevertheless, it is your responsibility to ensure that the equipment (e.g. personal computer, tablet, etc.) software, telecommunication equipment that you use is sufficiently secure and protected from malware (e.g. viruses). You should be aware that, by not using sufficient security measures (e.g. secure settings in your browser, updated malware protection software, avoidance of use of software and hardware from non-legitimate sources, etc.), entails the risk that the data, as well as the passwords you use, can be disclosed to non-authorized third parties. Further, the transmission of information over the internet is not completely secure and we cannot thus guarantee the security of your information transmitted to our website. Any such transmission is at your own risk.
GDPR and other applicable data protection legislation provide you with certain rights with respect to the processing of your personal information.
You may exercise a right to request:
Change of our Website Privacy Notice
If we decide to change our website privacy notice, we will post any changes on this page of the site so that you always know how we use the information we collect and under what circumstances we disclose it to others.
List of Processors:
Website: Mozaik
Contact
You can contact us anytime either regarding clarifications on our privacy notice/practices or regarding questions you may have on the use of your personal information or if you wish to make a request in respect of your personal information.:
“International Airport of Heraklion Crete S.A.” Privacy Officer
Address: Ikarou Avenue 26, Nea Alikarnassos,
Phone number: +30 216 2000 720
e-mail: [email protected]
In the event where you are under the impression that your rights under the applicable data protection legislation are infringed, you may file a complaint with the Hellenic Data Protection Authority:
Hellenic Data Protection Authority
Address: 1-3 Kifisias Ave., 115 23, Athens
Call Center: +30-210 647 5600
Fax: +30-210 647 5628
Email: [email protected]