Privacy Notice

Last Updated: May 24th, 2018

At Hotel & Tourism Company South East Rhodes S.A - Hotel Atrium Prestige, we are committed to protecting and respecting your privacy. Please read this notice as it contains important information about how we use personal data that we collect from you or that you provide to us.

Information & Consent

This Privacy Notice describes how we collect, use, process, and disclose your information, including personal information about you (hereinafter, the “User”), in conjunction with your access to and use of our booking system.

By reading this Privacy Notice, the user is hereby informed on how we collect, process and protect personal data furnished through the booking engine.

The User must carefully read this Privacy Notice, which has been written clearly and simply, to facilitate its understanding, and to freely and voluntarily determine whether they wish to provide their personal data, or those of third parties, to Hotel & Tourism Company South East Rhodes S.A - Hotel Atrium Prestige.

When this notice mentions “booking system,” “booking engine,” “system,” “website,” “platform,” “app,” “webapp,” “services,” “online services,” it refers to all pages and functions under https://atriumprestige.reserve-online.net/ unless specified otherwise.

By accessing the platform or providing information, you agree to our privacy practices as set out in this privacy statement. We may change this notice from time to time. You should check this notice frequently to ensure you are aware of the most recent version.

Identity

When this notice mentions “we,” “us,” or “our,”, “data controller,”, “controller,”, it refers to Hotel & Tourism Company South East Rhodes S.A - Hotel Atrium Prestige.

Data Controller

Hotel & Tourism Company South East Rhodes S.A - Hotel Atrium Prestige operates this booking system through a data processor, as explained below. For the purposes of the General Data Protection Regulation (“GDPR”) (EU) 2016/679, we are the Data Controller. There is a strict contractual framework between the data controller and the data processor for the protection of your personal information. We are:

Atrium Prestige Thalasso Spa Resort & Villas “Hotel & Tourism Company South East Rhodes S.A - Hotel Atrium Prestige”
Lachania Beach
851 09, Rhodes
GR

Data Processor

WebHotelier operates this booking system on behalf of Hotel & Tourism Company South East Rhodes S.A - Hotel Atrium Prestige and is committed to protecting the privacy of the users of this system. WebHotelier is:

WebHotelier Technologies Limited
Mnasiadou 9 (Demokritos Building, Office 16)
1065 Nicosia
Cyprus

For the purposes of the GDPR, where WebHotelier processes your personal data on behalf of Hotel & Tourism Company South East Rhodes S.A - Hotel Atrium Prestige, WebHotelier is the the Data Processor. When this notice mentions “data processor,” “processor,” “WebHotelier,” it refers to WebHotelier Technologies Limited.

WebHotelier is a certified PCI-DSS Level 2 Service Provider audited monthly by Trustwave.

The User may contact WebHotelier's Data Protection Officer:

Data Protection Officer
dpo@webhotelier.net

Obligatory nature of providing the data

The data requested in the forms accessible from the booking engine are, in general, mandatory (unless specified otherwise in the required field) to meet the stated purposes. Accordingly, if they are not provided or are not provided correctly, we will be unable to process the request.

Personal data we collect and process

This will include:

personal information about you which we ask you for (e.g. your name, address, and email address) when you make a booking from our booking engine;
financial details in order to process your booking when we require pre-payment;
details of transactions you carry out through our booking engine and details of the fulfilment of your orders.
our data processor may only collect and process personal data collected and/or processed on behalf of us in accordance with our instructions. WebHotelier cannot process it in any other way or for any other purpose.

We grant permission to our data processor:

to use your personal information for reserving rooms and/or other services for you at Hotel & Tourism Company South East Rhodes S.A - Hotel Atrium Prestige;
to pass on your financial details to Hotel & Tourism Company South East Rhodes S.A - Hotel Atrium Prestige and/or appropriate third party (for example, credit card company) for the purpose of confirming or paying for a booking;
to use your information for marketing purposes (where you explicitly agree to this); and
to pre-complete forms and other details on our website to make your next visit to our booking engine easier (e.g. when amending or cancelling a booking).

Social Login:

In the event of registration and/or access through a third-party account, we may collect and access certain information of the User’s profile from the corresponding social network, solely for internal administrative purposes and/or for the purposes indicated above.

Third-party data (e.g. book for a friend)

In the event that the User provides third-party data, they declare that they have the third party’s consent and undertake to provide the interested party -the data holder- with the information contained in this Privacy Notice, duly exonerating us and our data processor from any liability in this regard. However, we may carry out the necessary verifications to verify this fact, adopting the corresponding due diligence measures, in accordance with the data protection regulations.

Sensitive Data

Unless specifically requested, we ask that you not send us, and you not disclose, on or through the Services or otherwise to us, any Sensitive Personal Data (e.g., social security numbers, national identification number, data related to racial or ethnic origin, political opinions, religion, ideological or other beliefs, health, biometrics or genetic characteristics, criminal background, trade union membership, or administrative or criminal proceedings and sanctions).

Use of Services by Minors

The Services are not directed to individuals under the age of sixteen (16), and we request that they not provide Personal Data through the Services.

Purpose of processing personal data

Depending on the User’s requests, the personal data collected will be processed in accordance with the following purposes:

To manage the bookings made, including payment management (where applicable) and the management of the user’s requests and preferences.
To manage registration in loyalty or membership programs, as well as obtaining and redeeming points.
To manage the User’s contact requests with us through the channels provided to this end.
To manage the sending of personalised commercial communications from us, by electronic and/or conventional means, in cases in which the User expressly consents.
To manage the provision of the contracted accommodation service, as well as additional services.
To manage surveys and/or evaluations regarding the quality of the services provided by us and/or the perception of its image as a company.

Data Retention

We will retain your Personal Data for the period necessary to fulfill the purposes outlined in this Privacy Notice unless a longer retention period is required or permitted by law or if the User requests their withdrawal from us, opposes or revokes their consent.

The criteria used to determine our retention periods include:

The length of time we have an ongoing relationship with you and provide the Services to you (for example, for as long as you have an account with us or keep using the Services or if you have a booking that has not yet been fulfilled)
Whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them)
Whether retention is advisable considering our legal position (such as, for statutes of limitations, litigation or regulatory investigations)

Legitimate interest for processing your data

The data processing required in fulfilment of the aforementioned purposes that require the User’s consent cannot be undertaken without said consent.

Likewise, in the event that the User withdraws their consent to any of the processing, this will not affect the legality of the processing carried out previously.

To revoke such consent, the User may contact us through the appropriate channels.

By the same token, in those cases in which it is necessary to process the User’s data for the fulfilment of a legal obligation or for the execution of the existing contractual relationship between us and the User, the processing would be legitimized as it is necessary for compliance with said purposes.

Data Disclosure

We will use and disclose Personal Data as we believe to be necessary or appropriate:

to comply with applicable law, including laws outside your country of residence;
to comply with legal process;
to respond to requests from public and government authorities, including authorities outside your country of residence and to meet national security or law enforcement requirements;
to enforce our terms and conditions;
to protect our operations;
to protect the rights, privacy, safety or property of our own, you or others; and
to allow us to pursue available remedies or limit the damages that we may sustain.

We may use and disclose Other Data for any purpose, except where we are not allowed to under applicable law. In some instances, we may combine Other Data with Personal Data (such as combining your name with your location). If we do, we will treat the combined data as Personal Data as long as it is combined.

International transfers of personal data

We may transfer your personal information to our data processor(s) or/and sub-processor(s) based outside of the EEA for the purposes described in this notice. If we do this, your personal information will continue to be subject to one or more appropriate safeguards set out in the law. These might be the use of model contracts in a form approved by regulators, or having our suppliers sign up to an independent privacy scheme approved by regulators (like the US ‘ Privacy Shield’ scheme).

Our data is stored in the cloud using Amazon Web Services in N. Virginia, USA and in Frankfurt, Germany. If you are accessing any of our systems from outside the USA, you acknowledge that your personal information may be transferred to the USA, a jurisdiction which may have different privacy and data security protections from those of your own jurisdiction, to be processed and stored.

User's Responsibility

The User:

Guarantees that they are of legal age or legally emancipated, where applicable, fully capable, and that the information furnished to us is true, accurate, complete and up-to-date. For these purposes, the User is responsible for the truthfulness of all the data communicated and will keep the information updated, so that said data reflects their actual situation.

Guarantees that he/she has informed third parties on whose behalf he/she has provided data, where applicable, of the aspects contained in this document. Also guarantees that he/she has obtained the third party’s authorisation to provide their data to us for the purposes indicated.

Will be responsible for false or inaccurate information provided through the Website and for damages, whether direct or indirect, that this may cause to us or third parties.

Exercise of Rights

The User may contact us at any time free of charge, to:

To obtain confirmation about whether or not personal data concerning the User are being processed by us.
To access their personal details.
To rectify any inaccurate or incomplete data.
To request the deletion of their personal data when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
To confirm revocation of consent.
To obtain from us the limitation of data processing when any of the conditions provided in the data protection regulations are met.
To request the portability of your data.

Likewise, the user is informed that at any time he/she may file a complaint regarding the protection of their personal data before the competent Data Protection Authority.

Security Measures

We will process the User’s data at all times in an absolute confidential way and maintaining the mandatory duty to secrecy with regard to said data, in accordance with the provisions set out in applicable regulations, and to this end adopting the measures of a technical and organisational nature required to guarantee the security of their data and prevent them from being altered, lost, processed or accessed illegally, depending on the state of the technology, the nature of the stored data and the risks to which they are exposed.

PRIVACY NOTICE

Summary

We respect your right to privacy and treat the personal data you give to us with care and we act according to the European Regulation 2016/679 (GDPR) for the protection of the personal data and the Greek Legislation. This Privacy Policy describes how we collect, use, share, store or otherwise process the information we hold about you. We are committed to ensuring the personal data you provide is used for the purpose it was collected and is kept secure.

We encourage you to read this Privacy Notice carefully when using our website or services or transacting business with us. By accepting this Privacy Notice you are informed and you provide your free, informed, specific and unambiguous consent for the personal data you provide on the website at https://www.atriumprestige.gr/

Your personal information allows us to provide the products and services you have asked for, as well as enabling us to improve those products and services by understanding your interests and preferences.

Please note that Atrium Hotels is the Data Controller of your personal data. PRESIDENTIAL and AITHRION PALACE, (Greece) Limited (“we”, “our”, “us”) is the data controller when you provide information to any of our brands, including: Atrium Platinum, Atrium Palace and Atrium Prestige.

The principles set out in this Privacy Notice apply to all instances in which Atrium Hotels receives your personal data as a Data Controller for the purposes described in this notice. Those purposes are processing of data in order to participate in the various activities available on this website or as mentioned below.

If you have any questions about our privacy practices, please refer to the end of this Privacy Notice for information on how to contact us.

What information do we collect?

Atrium Hotels is the only Data controller of these data. The term “personal information or personal data” in this Policy refers to information that identifies or is capable of identifying you as an individual.

We do not sell, rent or otherwise disclose personal information collected by us to third parties in the ordinary course of business. The use of information collected through our website shall be limited to the purpose of providing the service for which you have engaged us.

When you interact with our products and services, for example when browsing our website or booking a hotel room οr you filling in any contact form, we collect information about you and that particular interaction.

Generally, the types of personal data that we process may include:

1. Data provided by users for making reservations, both through our website, the call center, the contact form on our website and emails for room bookings and combined packages (airline tickets and room bookings):

name, surname,

email address

credit card details (name/surname of the holder, card number, expiration data and security code)

arrival time and other requests

dietary and other requests

allergies

Data the user provides on a voluntary basis:

country

telephone number

company

address (name, number)

purpose of stay

city/location

state/region

postal code

comments

Data provided by users for changing or cancelling their reservations:

name, surname

email address and/or telephone number.

credit card details (name/surname of the holder, card number, expiration data and security code)

Data provided for sending out Newsletters:

email address.

Data provided by applicants for submitting employment applications

name, surname

e-mail address

CV, résumé

telephone number (on a voluntary basis)

Special Categories of Personal Data – Sensitive Personal Data

When referring to the notions of “special categories of personal data” or “sensitive personal data”, it means that this kind of personal information reveals racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership and genetic data, biometric data which allows to uniquely identify a natural person, health data and/or data regarding sexual orientation. At Αtrium Ηotels, we do not collect sensitive personal data, unless you provide us them along with an explicit consent for every related purpose of processing. Such a case is when we ask you to provide us information about your health (i.e. allergies), in order to be able to offer you the best gastronomic services in relation with your health status. This information is stored securely with restricted access and handled with the greatest respect for your privacy. Where you provide information to us about other people, you need to make sure you have their permission to do so or that you can speak on their behalf, for example, in the case of children.

What is the purpose of collecting such personal information?

The justification for processing your personal data will be as follows:

for making reservations, both through our website, the call center the contact form on our website and emails for room bookings and combined packages (airline tickets and room bookings): performance of the contract between the parties. The use of the Website, is to provide an online booking service (room or flight) to its users (legitimate interest of Atrium Hotels)

for changing or cancelling their reservations: the performance of the contract between the parties. The use of the Website, is to provide its users with the opportunity to amend or cancel their bookings (legitimate interest of Atrium Hotels).

for sending newsletters: the consent provided by the user. However, if the user withdraws its consent, this will not affect the legality of prior processing.

for submitting employment applications: the consent provided by the user. However, if the user withdraws its consent, this will not affect the legality of prior processing.

How we keep your personal data secure

We take all the necessary precautions, security measures as well as the relevant technical and organizational measures to ensure the confidentiality of the provided personal data. We have secure systems and processes in place to ensure the personal information you provide us is kept safe. We store personal information on our secure electronic systems. We can assure you that we take all reasonable steps to ensure your data is handled securely under appropriate agreements with our suppliers.

Minors Data

At Atrium Hotels, it is not part of our policy to seek or obtain personal data directly from minors (i.e. under the age of 18) without their parental or legal guardian’s consent. However, as it is impossible to always determine the age of persons who access and use our websites, we encourage parents or guardians to contact us if they notice any case of unauthorized data provision by minors in order to exercise accordingly their rights such as deletion of their data.

How we use the data we collect from this website?

We always base the processing of your personal data to a valid legal basis such as law, contract or your explicit consent etc.

We need your personal data in order to:

a. Comply with legal obligations:

Verify your identity

Monitor the use of our products and services and content

Facilitate administration and marketing purposes including analyzing your travel and accommodation preferences, as well as communication purposes in relation to our products and services our strategic marketing partners, and other trusted third parties (ELSTAT)

Comply with general legal obligations on us

Keep guests safe and ensure the security of our hotels

Ensure the acceptable use of our services

Facilitate payments and credit checks (i.e. completing a reservation, billing purposes etc)

Investigate and respond to disputes

send you product or service related communications, service messages (Law 3471/2006)

b. Enter a contract or fulfill the hospitality contract we have with you:

Provide you with help and support where it may be required. For example, we may contact you to provide assistance if experience technical difficulties, where we have your contact details

Provide you with the products and services you have requested, including administering your booking, amend it or cancel it, responding to any enquiries, complaints or requests you may have

Verify your identity

Process a transaction (i.e. completing a reservation, responding to a request for information etc)

Detect ad blockers and other technologies that affect the services we provide

Send you product or service related communications, service messages

Offer you the opportunity to work with us and become a member of our hospitality team

c. Promote the legitimate interests of Atrium Hotels:

In order to help you enter a contract with us or to fulfill the hospitality contract we already have between us. (Verify your identity, provide you with the products and services you have requested, including administering your booking, amend it or cancel it, responding to any enquiries, complaints or requests you may have)

Improve our services as well as promote questionnaires or surveys in order to provide you personalized offers about our products and services;

Make decisions about what direct marketing to show you based on how you have interacted with us

Monitor the use of our products and services and content

Improve our products and services online and offline, including our websites and apps

Comply with legal obligations on us

Keep guests safe and ensure the security of our hotels

Offer you personalized information about us and special offers, goods, services any events that may interest you or/and send you direct marketing, where you have consented

Ensure the acceptable use of our services

Facilitate payments and credit checks

Offer you the opportunity to work with us

Improve the efficiency of our websites and our various means of communications, facilitate our advertising campaigns, and/or promotional activities

However, for certain activities we may also need your explicit consent to process your data. Where the consent is needed for the processing it is clearly mentioned in this Privacy Notice.

Withdrawing consent or otherwise objecting to direct marketing/profiling

In addition to sending you information about the products and services you use (product communications) and in-life communications while you stay with us, where we have your permission or where we are relying on our legitimate interest, we may send you direct marketing communications about our products, services, events and offers.

Direct marketing communications may be sent by post, email, telephone, SMS and MMS, through social media (such as Whatsapp, Instagram, Twitter, and Facebook), messages including push notifications to your mobile devices, and via other electronic means such as when you visit our websites or use our apps. This may also include any websites and apps of our partners who are in our advertising networks.

We may send you direct marketing while you have an ongoing relationship with us and for a reasonable time after you have used one of our products or services where we feel we have a legitimate interest.

Wherever we rely on your consent, you will always be able to withdraw that consent, although we may have other legal grounds for processing your data for other purposes, such as those set out above. You have an absolute right to opt-out of direct marketing, or profiling we may carry out for direct marketing, at any time. You can do this by contacting us using the details set out in the end of this Privacy Notice.

How long do we keep your personal data?

We will retain your information for as long as necessary for the uses set out in this Policy or while there is a legitimate business reason for doing so. If you ask us to delete your information before this time, we may not be able to do so for technical, legal, regulatory or contractual constraints. Your information will be retained in order to comply with legal and regulatory obligations as well as for analysis, to prevent fraud, collect any monies owed, and to resolve disputes.

More specifically,

for making reservations, both through our website, the call center, the contact form on our website and emails for room bookings and combined packages (airline tickets and room bookings): the data will be stored throughout the contractual relationship, and after termination of the same, for the limitation period for legal actions that could result from it.

for changing or cancelling their reservations: will be stored throughout the contractual relationship, and after termination of the same, for the limitation period for legal actions that could result from it.

for sending newsletters: will be stored for as long as the user does not withdraw the consent provided for this.

4.for submitting employment applications: if your application for employment is unsuccessful, the organisation will hold your data on file for 12 (twelve) months after the end of the relevant recruitment process. If you agree to allow us to keep your personal data on file, we will hold your data on file for a further 6 (six) months for consideration for future employment opportunities. At the end of that period or once you withdraw your consent, your data is deleted or destroyed. You will be asked when you submit your CV whether you give us consent to hold your details for the full 18 months in order to be considered for other positions or not.

If your application for employment is successful, personal data gathered during the recruitment process will be transferred to your Human Resources file (electronic and paper based) and retained during your employment. The periods for which your data will be held will be provided to you in a new privacy notice.

Your rights

As a data subject, you have a number of rights. You can:

access and obtain a copy of your data on request; You may request a copy of your personal information which we may hold about you by getting in touch with us using the contact details below. You may also ask us to correct any inaccuracies in your personal information. This right may be restricted by law where disclosing information may result in the personal information of other individuals being disclosed and it would be unreasonable to do so.

require Atrium Hotels to change incorrect or incomplete data;

require Atrium Hotels to delete or stop processing your data, for example where the data is no longer necessary for the purposes of processing; and

object to the processing of your data where Atrium Hotels is relying on its legitimate interests as the legal ground for processing.

If you would like to exercise any of these rights, please contact Atrium Hotels at dpo@atriumhotels.gr

We will carefully consider your request as there may be circumstances which require us to, or allow us to, continue processing your data.

If you believe that the organisation has not complied with your data protection rights, you can file a complaint to the Greek Data Protection Authority (http://www.dpa.gr/portal/page?_pageid=33,15048&_dad=portal&_schema=PORTAL)

Disclosure of your personal data

In some cases, we may be required to disclose your personal information to comply with legal requirements and requests from government agencies if required for the purposes set out above, if mandated by law or if required for the legal protection of our legitimate interests in compliance with applicable laws.

Your information will only be shared and used in accordance with this Policy and where an agreement is in place to ensure that your information is protected. We won’t sell your personal information without your consent or share it with other organisations for their own marketing purposes.

We may also disclose your personal information to our group companies or to third parties:

We may share your personal data:

with our group companies and affiliates, all within the hotel sector, which require access to your data for correct provision of the chosen services.

with our advertising networks and partners, commercial partners (including but not limited to owners of hotel businesses we manage or to whom we have licensed a brand and/or hotel system), and sharing with our suppliers.

with third-party payment processors, payment service providers, IT and marketing support service providers and other consultants, vendors and service providers who need access to such information to carry out work or provide services on our behalf or who help us to provide these services to you;

with anyone involved in the process of making your travel arrangements (e.g. travel agents, group travel organisers and your employer) in order to fulfill contractual obligations;

with any law enforcement, courts, Government or regulatory bodies (in whatever jurisdiction), or otherwise in response to a request for information if we believe disclosure is in accordance with, or required by, any applicable law, regulation, court order or legal process;

if we believe your actions are inconsistent with our user agreements or policies, or to protect the rights, property and safety of our hotel or any third parties

in connection with, or during negotiations of, any merger, sale of company assets, financing or acquisition of all or a portion of our business by another company, or any change of management of a hotel;

with our advisors, which includes our accountants, auditors, lawyers, other professional advisors and business contacts for the purpose of assisting us to better manage, support or develop our business and comply with our legal and regulatory obligations;

with any other party at your consent or at your direction; and

otherwise as permitted or required by applicable laws and regulations.

User data may be disclosed to:

data provided for making reservations, both through our website, the call center, the contact form on our website and emails for room bookings and combined packages (airline tickets and room bookings): with the Companies belonging to or affiliated with Atrium Hotels, all within the hotel sector, which require access to your data for correct provision of the chosen services. The sole purpose of this communication will be to be able to provide the services to your correctly.

data provided for changing or cancelling their reservations: with the Companies belonging to or affiliated with Atrium Hotels, all within the hotel sector, which require access to your data for correct provision of the chosen services. The sole purpose of this communication will be to be able to provide the services to your correctly.

data provided for sending newsletters: will not be disclosed to third party companies.

data provided for submitting employment applications: will not be disclosed to third party companies. We will share your information within our group of hotels (Atrium Platinum, Palace, Prestige), solely for internal administrative purposes and/or for the purposes of employment.

Our site may contain links to other websites belonging to third parties. We do not control the privacy practices of these other websites. You should therefore make sure when you leave our site that you have read that website’s Privacy Notice.

Overseas Transfers of Your Personal Data

Your personal data will be stored at our hotel in which you stay or visit. Alternative, your personal data will only be shared with one or more hotels of Atrium Hotel's Group Companies. Your personal data will not be transferred to countries outside the EU.

In case we may need for some reason to transfer such data, we will only transfer such data in countries that satisfy the adequate or comparable levels of protection in order to protect personal data held in that jurisdiction, and (where we are required to do so) with your consent.

In case personal data is transferred from the EU to outside the EU, we use Model Clauses, ensuring that such data transfers are compliant with applicable privacy legislation.

The information you provide to us may be given to our third party service suppliers outside the European Economic Area for the purpose of delivering the personalized services and communications stated above. Atrium Hotels will always take steps to ensure that your information is used by third parties in accordance with this Privacy Notice and that your information is kept secure at all times. In particular, in relation to any transfer to a third party in a country that is not subject to an adequacy decision by the EU Commission, such transfer will be appropriately protected through mechanisms such as EU Commission approved standard contractual clauses, an appropriate Privacy Shield certification or Binding Corporate Rules. A copy of the relevant mechanism can be provided for your review upon request.

Our processors

There may be situations where we use data processors – companies who act on our behalf – to collect your information for us or to use the personal data we pass to them to provide your service. These processors can only use your information in accordance with our instructions and for the purposes in this Policy.

Travel agents and partners

We collect information about you when it is provided to us by third parties. This might include online travel agents, travel websites, and other partners. This could be when you make bookings, review your stay online, or where you interact with anyone who promotes our brands. You should always read the privacy policies of travel companies or other third parties you use, as they will use your information in accordance with their own privacy policies.

When you, or someone on your behalf, make a booking using travel agent, booking platform or other third party to use our services, they may pass us information about your booking, including information about anyone else on that booking. The same would be true where you use a third party to make inquiries about our products or services.

Where you interact with third parties who promote our services for us, these third parties may pass us your information.

We may also obtain information about you from our partners and other companies that have your permission to share your information both online and offline, like insight providers.

Do not track signals or browser/device settings

Our websites are not designed to respond to “do not track” signals or browser/device settings.

Analysis and product development

We may use your information to improve the products and services we offer. For example, we may look at the preferences our guests have when they stay with us to offer more relevant personalised services to them.

Linked services, third party sites and content

Our website may, from time to time, contain links to other websites which are outside of our control and are not covered by this Policy. We do not accept any responsibility or liability for other sites’ privacy policies. If you access other websites using the links provided, please check their policies before submitting any personal information.

Cookie Policy

Our site uses cookies. A "cookie" is a small file of letters and numbers that is sent to your computer by a website and automatically saved on your computer by your web browser (e.g. "Internet Explorer"). Each time you request a page from the website, your web browser sends this cookie back to the website server.

You are not obliged to accept cookies. If you wish, you can set your browser to notify you before you receive a cookie so you have the chance to accept it and you can also set your browser to refuse to receive or send all cookies. The website www.allaboutcookies.org contains step-by-step guidance on how cookies can be switched off by users.

For more information about our cookie policy visit: ....

Please note that our advertisers and third party partners may also use cookies. These parties may use so-called “third party” cookies so that they can track your response to their adverts and/or identify you on any other website that you visit which also contains their adverts. Please refer to their Privacy Notice for further details.

Social media login

Our websites and apps provide plug-ins to social media websites, including Facebook, Twitter, Youtube, and Instagram.

If you make use of, or log-in to, the social media features on our websites or apps, we may (depending on your privacy settings) access, use and store information about you, including, but not limited to: your name, e-mail address, gender, location, profile, picture, contacts, and any other information you have chosen to make available.

To find out more about the reasons and extent to which social media sites collect and process your data, or to change your privacy settings, please refer to your social media provider’s privacy policy.

Changes to our Privacy Policy

From time to time we may make changes to this Policy. This might be in relation to changes in the law, best practice, changes to the services we provide or collection and use of your personal information. We will always display clearly when the Policy was last updated and where appropriate, notify you of any relevant changes.

Contact

If you would like to get in touch with us, please contact:

ATRIUM HOTELS

Main Office: Ixia Bay
85100 Rhodes – Greece
Tel.: +30 22410 44901
Fax: +30 22410 44900
Email: info@atriumhotels.gr

Privacy contact: privacy@atriumhotels.gr

Data contact: dpo@atriumhotels.gr