Privacy Policy

Who we are

Our website address is: https://discoverathenstours.com.

What personal data we collect and why we collect it

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Contact forms

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Analytics

Who we share your data with

The website https://www.discoverathenstours.com (hereinafter referred to as the “Site” or “Website”) is owned by DAT Ltd (“Discover Athens Tours”, “we”, “our”, or “us”). Discover Athens Tours operates and respect your privacy and is committed to complying with this Privacy Policy, which describes how DAT, as a travel and software company, collects and uses the personal data you provide to us. This Privacy Policy describes what personal data we collect about you, how we collect it, how we use it, with whom we may share it, and what choices you have regarding our use of your personal data. We also describe the measures we take to protect the security of your personal data and how to contact us.

This Privacy Policy applies to Discover Athens Tours travel services provided to you, including via DAT websites that display or link to this Privacy Policy (hereinafter collectively, the “Services”). Once you leave our websites for others, the privacy policies of the other websites or applications shall apply.

We encourage you to read this Privacy Policy carefully and in its entirety as it relates to your rights regarding the processing of your personal data. As a user of our Services, you understand and agree that we collect, use, and disclose your personal data in accordance with this Privacy Policy.

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where we send your data

Visitor comments may be checked through an automated spam detection service.

How we secure your payments

All payments made using the card are processed through the electronic payment platform of “Alpha e-Commerce” of Alpha Bank and uses TLS 1.2 encryption protocol encryption with 128-bit (Secure Sockets Layer – SSL). Encryption is a way of coding the information until it reaches its recipient, who will be able to decode it using the appropriate key.

Your contact information

Additional information

How we protect your data

What third parties we receive data from

Directly from you when you access various parts of our Websites and Services, including when you communicate with us via email or other channels;

From other sources, for instance, the company which you are an employee of or are otherwise traveling on behalf of (“Company”), including such Company’s third parties who may send us your personal data on your or your Company’s behalf; and

From the network of websites accessible through or utilized by our Services and our company, including third party suppliers and our DISCOVER ATHENS TOURS related companies, affiliates, subsidiaries, joint ventures, partners, subcontractors, and agents. This includes personal data we collect automatically through our websites, for instance by using cookies and similar technologies.

The provision of personal information is voluntary.

What automated decision making and/or profiling we do with user data

Personal Data shall only be processed based on the legal basis except where such interests are overridden by the fundamental rights and freedoms of the Data Subject which will always take precedent. If the Data Subject has provided specific additional Consent to the processing, then such consent may be withdrawn at any time (but may then result in an inability to fulfill travel requirements).

DAT will not use personal data for any monitoring or profiling activity or process, and will not adopt any automated decision-making processes.

Personal Data shall be processed lawfully, fairly, and in a transparent manner.
The Personal Data collected will only be those specifically required to fulfill travel, accommodation, or other travel-related requirements. Such data may be collected directly from the Data Subject or provided to DAT via his /her employer. Such data will only be processed for that purpose.
Personal Data shall only be retained for as long as it is required to fulfill contractual requirements or to provide statistics to our Client Company.
Personal Data shall be adequate, relevant, and limited to what is necessary for relation to the purposes for which they are collected and/or processed. Personal Data shall be accurate and, where necessary, kept up to date.
The Data Subject has the right to request from DAT access to and rectification or erasure of their personal data, to object to or request the restriction of processing concerning the data, or to the right to data portability. In each case, such a request must be put in writing.
The Data Subject has the right to make a complaint directly to a supervisory authority within their own country.

Industry regulatory disclosure requirements / Interpretetion

Personal Data: (Article 4 of the GDPR)personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Processing: (Article 4 of the GDPR): means any operation or set of operations which is performed upon personal data or sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, erasure or destruction.
Legal Basis for Processing: (Article 6 of the GDPR): At least one of these must apply whenever personal data is processed: 1. Consent: the individual has given clear consent for the processing of their personal data for a specific purpose. 2. Contract: the processing is necessary for compliance with a contract. 3. Legal obligation: the processing is necessary to comply with the law (not including contractual obligations). 4. Vital interests: the processing is necessary to protect someone’s life. 5. Public task: the processing is necessary to perform a task in the public interest, and the task or function has a clear basis in law. 6. Legitimate interests: the processing is necessary for the legitimate interests of the Data Controller unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests.
Consent: the individual has given clear consent for the processing of their personal data for a specific purpose.
Contract: the processing is necessary for compliance with a contract.
Legal obligation: the processing is necessary to comply with the law (not including contractual obligations).
Vital interests: the processing is necessary to protect someone’s life.
Public task: the processing is necessary to perform a task in the public interest, and the task or function has a clear basis in law.
Legitimate interests: the processing is necessary for the legitimate interests of the Data Controller unless there is a good reason to protect the individual’s personal data which overrides those legitimate interests.
Data Controller: (Article 4 of the GDPR): this means the person or company that determines the purposes and the means of processing personal data.
Data Processor: (Article 4 of the GDPR): means a natural or legal person, public authority, agency or any other body which processes personal data on behalf of the controller.
Data Subject Rights: (Chapter 3 of the GDPR) each Data Subject has eight rights. These are:
– The right to be informed; This means anyone processing your personal data must make clear what they are processing, why, and who else the data may be passed to.
– The right of access; this is your right to see what data is held about you by a Data Controller.
– The right to rectification; the right to have your data corrected or amended if what is held is incorrect in some way.
– The right to erasure; under certain circumstances you can ask for your personal data to be deleted. This is also called ‘the Right to be Forgotten’. This would apply if the personal data is no longer required for the purposes it was collected for, or your consent for the processing of that data has been withdrawn, or the personal data has been unlawfully processed.
– The right to restrict processing; this gives the Data Subject the right to ask for a temporary halt to the processing of personal data, such as in the case where a dispute or legal case has to be concluded, or the data is being corrected.
– The right to data portability; a Data Subject has the right to ask for any data supplied directly to the Data Controller by him or her, to be provided in a structured, commonly used, and machine-readable format.
– The right to object; the Data Subject has the right to object to the further processing of their data which is inconsistent with the primary purpose for which it was collected, including profiling, automation, and direct marketing.
– Rights in relation to automated decision making and profiling; Data Subjects have the right not to be subject to a decision based solely on automated processing.