• USE – DISCLOSURE OF PERSONAL DATA

We use your Personal Data to respond to your requests for provision of services, to execute a contract between us and for all other purposes as described in detail in Section 2.We do not disclose your Personal Data to third parties not affiliated with us, unless required to do so by our legitimate professional and business needs, in order to respond to your requests and / or if required or permitted by law or business standards provided we have your express consent to this.In all the above cases, Grande Albergo Hotel only transfers Personal Data to third parties that meet our strict data processing and security standards and act only as specifically  authorized by us. We also ensure that such third parties are fully bound by terms of privacy and confidentiality as provided in the applicable data protection and privacy regulation.It should be noted that when storing, accessing and/or processing your Personal Data, the employees and agents of the Grande Albergo Hotel fully comply with the relevant provisions of the GDPR as well as with current Greek legislation and jurisprudence on the protection of Personal Data. The Grande Albergo Hotel requires of its employees, its website hosting and service providers, as well as its third party partners to take all necessary technical and organisational measures (including appropriate policies and procedures) to prevent unauthorised disclosure of  Personal Data to which they gain access, and implement procedures for the management and processing of Personal Data in a manner that is lawful and protect such data according to GDPR imposed obligations.In the event of reorganization or sale of Grande Albergo Hotel to another organization, the Grande Albergo Hotel may also disclose Personal Data relating to the sale, assignment or other transfer of business.In addition, Grande Albergo Hotel may disclose Personal Data, if necessary, during the conduct of audits concerning the protection of Personal Data and system’s security and / or for investigation or response to a complaint or security threat.

• TRANSFERS OF PERSONAL DATA TO COUNTRIES OUTSIDE THE EU AND EEA

We may transfer the Personal Data we collect from you to countries outside the country in which the Personal Data were originally collected. These countries may not ensure the same level of protection as the country in which the Personal Data were originally collected. When we transfer your Personal Data to third countries, we take the appropriate measures to protect the Personal Data in accordance with this Policy and all applicable privacy laws and regulations.

• INFORMATION SECURITY

The Grande Albergo Hotel uses commercially reasonable administrative, technical, personnel-related, and physical security measures designed to safeguard the Personal Data in our possession against loss, theft and unauthorized use, disclosure, or modification. Such measures include, where appropriate, the use of firewalls, secure server installations, encryption, implementation of appropriate access rights systems and procedures, implementation of access control policies, careful selection of vendors and other reasonable organizational and technical measures for providing appropriate protection for your Personal Data, which are updated taking into account the technology developments and the cost of implementing them.All employees are bound by terms of privacy and confidentiality and your Personal Data is processed only by Grande Albergo Hotel’s specifically authorized personnel.

• STORAGE – PROTECTION OF PERSONAL DATA

The Grande Albergo Hotel has taken appropriate technical and organizational measures to ensure the security and protection of Personal Data by achieving safe storage of the Personal Data and prevention of any accidental loss or destruction and any unauthorized and / or illegal access, use, modification or disclosure. Examples of such measures include:ü  physical security measures such as access control and logging, security policies, implementation of document destruction measures, installation of security locks, etc.ü  electronic security measures such as encryption, pseudonymization, control of user access to information systems, installation of security hardware and software, etc.ü  regular training and updating of authorized usersü  regular checks on the adequacy of security systems.Your Personal Data is stored in data centers which are located mainly in Greece, where the Grande Albergo Hotel ‘s data center is located, while the Grande Albergo Hotel’s (primary) backup site is located in the Grande Albergo Hotel in a secure area fulfilling all necessary precautions.Also some of the stored data may be located in cloud service providers whose datacenters are located in Europe. If you need more information, please contact the Grande Albergo Hotel at dpo@casinorodos.gr.

• RETENTION PERIOD

We retain your Personal Data both in physical and electronic form, for the period required to perform and complete the purposes stated above, including complying with legal, accounting or information requirements and fulfilling, to the extent possible, your needs. It is specified that we will keep and process your Personal Data for the duration of our contractual / customer relationship and for the period required by the applicable tax, employment and social security laws and regulations. We will also keep your Personal Data:Ø  For clients: ü  If you send us an e-mail at dpo@casisnorodos.gr submitting a request, your Personal Data is retained for as long as it is required to address you request.ü  if you send us a request through our website’s contact form, for as long as it takes to respond to your enquiry or address your request.ü  for marketing communications, your Personal Data is retained until you withdraw your consent to receive communications.Ø  For employees: ü  If you send us a resume, for as long as it takes for the Grande Albergo Hotel to evaluate your qualifications and abilities and to consider opportunities for collaboration. If you are not finally selected for the post, your CV will be retained in file for future use, for 1 year.However, any necessary Personal Data relating to your transactions with the Grande Albergo Hotel as well as notices provided to you about the processing of your data, may remain as client information to ensure that the Grande Albergo Hotel  is legally processing your Personal Data, and to secure both parties’ legal claims. Please note that if there is a pending legal dispute between us that go beyond the aforementioned retention periods, we will keep your data until issuance of a final court decision. After the retention period expires, your Personal Data is permanently removed from the Grande Albergo Hotel ‘s records and information systems or we anonymise them so you can no longer be identified.

• YOUR RIGHTS REGARDING THE PROCESSING OF YOUR PERSONAL DATA

Whenever we process Personal Data concerning you, we take reasonable steps to ensure that your Personal data is kept accurate and up-to date for the purposes for which it was collected.Under GDPR (Articles 12 to 22), you have the following rights:Ø  Request a copy of your Personal Data,Ø  Withdraw your consent when this is the legal basis for the processing of your Personal Data,Ø  Request the deletion of the Personal Data you have provided, subject to any restrictions provided by applicable law,Ø  subject to applicable law, ask for restriction of processing,Ø  Request the portability of your Personal Data,Ø  Object to the processing of your Personal Data.To exercise the above rights, you may contact us at the following e-mail:  dpo@casisnorodos.gr or by post or in person at Casino Rodos , Geor. Papanikolaou 4, Rodos 851 00, Greece. In case where you exercise one or more of the above  rights, we will take all reasonable steps to satisfy your request within a reasonable time, but not later than one (1) month of receipt of the request. The above timeline may be extended by two (2) further months, taking into account the complexity and number of the requests. The Grande Albergo Hotel may retain the minimum Personal Data necessary to safeguard its legitimate interests.Taking into account the circumstances and the nature of your request, we may not be allowed to give you access to Personal Data or otherwise fully comply with your request, for example, when the exercise of your request may reveal the identity of another person. We reserve the right to charge the appropriate administrative fee to fulfill  your request, where permitted by applicable law, and / or to refuse your request in cases where such request is unfounded, excessive or otherwise unacceptable in accordance with applicable legislation.Finally, each data subject has the right to submit a request to Grande Albergo Hotel inquiring on how the Grande Albergo Hotel processes and protects your Personal Data, and if you consider that your rights are infringed, you have the right to file a complaint with the Data Protection Authority (http://www.dpa.gr/, Kifisias 1-3, P.C. 115 23, Athens, 210 6475600).

• OUR CHILDREN’S POLICY

We are committed to protecting the privacy of children. You should be aware that this Website content and services are not intended for, or designed to be addressed to children under the age of 16. No Personal Data should be submitted to the Grande Albergo Hotel through the Website by visitors who are younger than 16 years old. If it comes to our attention that an under 16 years old user of this Website has volunteered Personal Data and/or health-related Personal Data, without the given or authorized consent of the holder of parental responsibility over such child, we will promptly, upon relevant notification or request, delete such Personal Data in accordance with our deletion policy.

• SOCIAL MEDIA SHARE BUTTON

The Grande Albergo Hotel has official social media accounts, specifically on Facebook and Instagram. On its Website, the Grande Albergo Hotel incorporates an additional social media share button for Facebook and Instagram, inviting website visitors and users to follow the Grande Albergo Hotel in the respective social media (follow/like) as well as upload posts and comments. During your use of the social media we may collect certain Personal Data (such as your profile data in the corresponding medium).Based on European Court of Justice case-law, the Grande Albergo Hotel is considered a Joint Controller for processing your data together with each social medium. Within this context, the Grande Albergo Hotel strictly complies with the obligations relating to the protection of Personal Data by taking the appropriate technical and organisational measures (such as limiting the number of people with access to corporate social media accounts) in order to ensure the safe processing of data.The purpose of the data processing is to make visible and promote the Grande Albergo Hotel ‘s image and services, to provide updates or to communicate with you, responding to the messages/comments you send us.The legal basis for processing is your consent, which you provide when you actively click on the social media share button, the “like” or “follow” button on the Grande Albergo Hotel ‘s social media. You can withdraw your consent at any time in the same manner in which you provided it, i.e. by clicking “unlike” or “unfollow”.The Grande Albergo Hotel is not responsible for how each social medium processes your data and it is your responsibility to be informed about it by reviewing the respective Privacy Policy of each social medium .Finally, while the Grande Albergo Hotel wishes and encourages users to comment on posts and/or pages it maintains on social media, it informs users that any post or comment uploaded should respect the basic rules of politeness, decency and respect to different views, ensuring a safe online environment and will remove any content deemed to violate the terms of use of the  website, such as insulting, pornographic, or threatening content or content violating intellectual property rights, and may block users who violate these terms.  In any case, if you consider that content posted on Grande Albergo Hotel’s official social media accounts violates the terms of use, please contact us  immediately.

• CALOPPA DO-NOT-TRACK NOTICE

Grande Albergo Hotel does not track its users over time and across third party websites and therefore does not respond to Do Not Track (DNT) signals. Grande Albergo Hotel does not authorize third parties to collect Personal Data directly from our users on our website, such as through the use of third party advertisements.

• PRIVACY POLICY UPDATES

Grande Albergo Hotel may, at any time, revise this Policy by updating this posting.  Please check the Date of Implementation of the Policy at the top of the Policy to see when it was last updated. The updated privacy policy will become effective as soon as it is published at the Website.If we make substantive changes to this Policy that broaden our rights to use the Personal Data that we have already collected from you, we will inform you and provide you with a choice for the future use of these data.