1. Introduction & Data Controller Identification
Showusmeaclipcompss Hellenic Journeys Ltd (hereinafter "Showusmeaclipcompss", "we", "us", or "our"), with corporate registration at Dionysiou Areopagitou 18, 117 42 Athens, Greece (Company No. 10984920), operates the domain showusmeaclipcompss.sbs. We are committed to upholding the highest standards of data integrity and transparency under Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation or GDPR) and relevant international statutes including the California Consumer Privacy Act (CCPA).
This Privacy Policy explains how we collect, store, process, and safeguard your personal information when you access our architectural dossiers, travel recommendations, interactive itineraries, and digital concierge inquiries.
2. Categories of Information Collected
We restrict collection to information necessary to provide cultural insights and maintain functional, secure web delivery:
- Direct Communications Data: Your name, email address, telephone contact (if voluntarily supplied), travel dates, and message content submitted through our concierge or contact interface.
- Technical & Telemetry Data: Internet Protocol (IP) address, anonymized network identifier, browser user agent, device operating system, hardware specifications, language settings, and referring URLs.
- Interaction & Analytics Data: Time spent viewing specific architectural dossiers, navigational scrolls, click sequences across attraction itineraries, and preference states recorded in browser local storage.
3. Lawful Basis for Data Processing
Under Article 6 of the GDPR, our processing of personal data is supported by the following lawful grounds:
- Consent (Art. 6(1)(a)): Provided explicitly when opting into analytics cookies or voluntarily transmitting requests through contact forms.
- Performance of a Contract (Art. 6(1)(b)): Where processing is required to deliver requested travel advisory dossiers or customized booking assistance.
- Legitimate Interests (Art. 6(1)(f)): Maintaining server network defense, preventing distributed denial of service (DDoS) incidents, and assessing aggregate audience engagement to refine cultural articles.
- Compliance with Legal Obligations (Art. 6(1)(c)): Retaining records demanded by Greek tax authorities or European telecommunication directives.
4. Third-Party Processors & Cross-Border Transfers
We do not sell, rent, or monetize your personal information. Data may be shared strictly under confidentiality agreements with certified third-party service providers:
- Cloud Hosting & CDN Infrastructure: Enterprise cloud hosts located within the European Economic Area (EEA) adhering to ISO/IEC 27001 standards.
- Web Performance Analytics: Privacy-centric aggregated analytical services operating in compliance with European data privacy standards.
Where data transfers occur outside the EEA, we enforce standard contractual clauses (SCCs) approved by the European Commission to ensure an equivalent level of protection.
5. Data Retention Policies
We retain personal contact records only as long as necessary to fulfill the operational purpose of your inquiry, generally not exceeding twenty-four (24) months from the final communication date, unless extended compliance is mandated by Hellenic commercial law. Telemetry server logs are purged on a rolling 90-day cycle.
6. Your Statutory Rights Under GDPR & CCPA
Eligible individuals possess comprehensive rights concerning their personal data, including:
- Right of Access: Obtain confirmation and copy of all personal records maintained by us.
- Right to Rectification: Rectify inaccurate, outdated, or incomplete data entries without delay.
- Right to Erasure ("Right to Be Forgotten"): Request total deletion of personal records where processing is no longer legally justified.
- Right to Restriction of Processing: Limit processing while dispute investigations are underway.
- Right to Data Portability: Receive your provided data in a structured, commonly used, and machine-readable format.
- Right to Object: Oppose processing grounded on legitimate interests or direct informational updates.
To exercise any statutory prerogative, transmit a written notice to our Data Protection Officer at: [email protected].
7. Data Protection Officer (DPO) Contact
Showusmeaclipcompss Hellenic Journeys Ltd
Attention: Data Protection Officer
Dionysiou Areopagitou 18, 117 42 Athens, Greece
Email: [email protected]