Casa D’ Irene Privacy Policy of http://www.casadirene.gr/

Privacy Policy Last Updated: May 28, 2018 We are firmly committed to protecting your privacy and we will not collect any personal information about you as a visitor unless you provide it voluntarily. This privacy policy (the “Policy”) is designed to tell you about our practices regarding collection, use, disclosure and transfer of personal information that you may provide, or Casa D’ Irene and its affiliates from time to time (“we” or “us”) may collect, via this Website or at our properties.

Information Collection And Use

We collect several different types of information for various purposes to provide and improve our service to you.

Types of Data Collected

Personal Data While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you (“Personal Data”). Personally identifiable information may include, but is not limited to:       • First name & last name       • Contact Information including Phone number, Email Address       • Address, State, Province, ZIP/Postal code, City       • Passport or ID/ Vat number       • Payment Information: Payment Credit Card / Debit Card Number and other card information       • Cookies and Usage Data We actively collect information from our guests. Examples where we actively collect your information include when you communicate directly with us via e-mail, by filling in online forms on our Website (or via third party websites). You may also provide us with Personal Information during registration and check-in at our properties (for example, when you complete our hard copy registration form when you register with us in person). Other examples of where we actively collect your information include: (i) when you register your interest in booking a room or other experience with us; and (ii) for sales enquiries and transactions. Each time you use the Website, we will automatically collect the following information: • details of your use of the Website including your city, country, page views, searches, downloads (file names) • technical information, including your device model, operating system of the machine running your web browser, type and version of your web browser, IP address, date and time when you accessed the Website • web page download information • general Website usage information

Tracking & Cookies Data

We use cookies and similar tracking technologies to track the activity on our website and hold certain information. Cookies are files with small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Tracking technologies also used are beacons, tags, and scripts to collect and track information and to improve and analyze our Service. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service. Examples of Cookies we use:      Session Cookies. We use Session Cookies to operate our service.      Preference Cookies. We use Preference Cookies to remember your preferences and various settings.      Security Cookies. We use Security Cookies for security purposes.

Analytics

We may use third-party Service Providers to monitor and analyze the use of our service. Google Analytics Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network. You can opt-out of having made your activity on the Service available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sharing information with Google Analytics about visits activity. For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies. google.com/privacy?hl=en Purposes & Use of Information/Data We may collect, process and otherwise use your Personal Information for purposes that are required by applicable law, regulation or other contracts or to allow us to fulfill our business needs and legal obligations. These purposes include: • to administer, improve and develop the Website • for administration and completion of bookings, reservations and registrations • for tax & accounting legal purposes • to administer membership, rewards programmes, promotional offers and related offers • to personalise your user experience (e.g. by tailoring the content delivered to you on our Website) • for legal disputes, regulatory investigations and compliance purposes • to assist us in providing the services you request at any of our properties and to ensure we meet your needs while you are staying with us and/or to allow us to contact you in relation to matters that arise from your stay with us We may rely on third party service providers to help deliver our goods and services to you, including when you visit our Website or any of our properties. Sometimes we partner with other businesses to provide you with services, products and other offers (for example, car hire services and package offers). We may need to share your Personal Information with our business partners in order to provide you with those services. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer. Casa D’ Irene will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information. Disclosure Of Data In some circumstances, we may need to process or disclose your Personal Information in connection with the purposes listed in this Privacy Policy or as otherwise permitted by law. We may disclose your Personal Information: (a) to our affiliates in Casa D’ Irene (b) to our agents and consultants who assist us in running our business, including our properties, reservation systems, booking systems and who are subject to appropriate security and confidentiality obligations (c) where we are under a duty to disclose or share your personal information in order to comply with any legal or regulatory obligation or request. Some of these disclosures may involve transfers of your Personal Information to a country outside of the European Union or the wider European Economic Area (EEA) (“International Transfers”). The EEA is comprised of the member states of the European Union, and Norway, Iceland and Liechtenstein. In some cases, International Transfers may be made to countries which do not have similar data protection laws to those of the European Union. In those circumstances, we will only disclose your Personal Information: • where the recipient of the Personal Information is located within a country which has been assessed by the European Commission as ensuring an adequate level of protection for personal information • with your explicit consent • on the basis of an agreement, designed to protect your information, in the appropriate form approved for this purpose by the European Commission (or an equivalent body) • where we remain in control of the information; or • where otherwise permitted under applicable law We will make sure that adequate safeguards are in place to protect your Personal Information where disclosure of your information requires an International Transfer. Security of Data We will take appropriate measures to keep your information confidential and secure in accordance with our internal procedures covering the storage, access and disclosure of information. Please note that messages you send to us by e-mail or via any internet connection may not be secure. If you choose to send any confidential information or Personal Information to us by such means you do so at your own risk with the knowledge that a third party may intercept this information. We are not responsible for the security or integrity of such information. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access. Your rights If any of the Personal Information that you have provided to us changes, please contact us and let us know the correct details. Under applicable law, you have the right to: • request a copy of the personal information about you that we hold • request correction or deletion of Personal Information about you that is inaccurate • withdraw any applicable consent for processing and transfer • object to our using your personal information for marketing purposes • object to profiling and automated decision making In some circumstances, you may also have a “data portability” right to require us to transfer your personal data to you or to a new service provider. We will ask your consent if we intend to use your data for marketing purposes or if we intend to disclose your information to any third party for marketing purposes. To exercise any of these rights at any time, please contact us. Retention of information We intend to keep your Personal Information accurate and up-to-date. We will retain your data for no longer than required. From time to time we may delete or anonymise your personal information if you have not stayed with us for a certain period of time. Links To Other Websites Our Service may contain links to other sites that are not operated by us. If you click on a third party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services. Children’s Privacy Our Service does not address anyone under the age of 18 (“Children”). We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your Children has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers. Changes To This Privacy Policy We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. We will let you know via email and/or a prominent notice on our Service, prior to the change becoming effective and update the “effective date” at the top of this Privacy Policy. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page. Contact Us If you have any questions about this Privacy Policy or our data protection practices, please

contact us:

By email: info@casadirene.gr By phone number: +30 6951800522 Address: 39 Artemonos str, 11631, Athens Greece