At C.E. Papouis Hotels Ltd, we are committed to protecting the privacy and security of your personal information in accordance with the General Data Protection Regulation (GDPR).

 

Data Controller:

C.E. Papouis Hotels Ltd is the data controller responsible for the processing of your personal data collected through our website.

 

Legal Basis for Processing:

We will only process your personal data when we have a legal basis to do so. This includes when:

 

• You have given consent to the processing of your personal data for one or more specific purposes;
• Processing is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract;
• Processing is necessary for compliance with a legal obligation to which we are subject;
• Processing is necessary to protect your vital interests or those of another natural person;
• Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us; or
• Processing is necessary for the purposes of our legitimate interests or those of a third party, except where such interests are overridden by your interests or fundamental rights and freedoms.

 

Data Subject Rights:

Under the GDPR, you have the following rights regarding your personal data:

 

• Right of access: You have the right to request access to your personal data and information about how we process it.
• Right to rectification: You have the right to request correction of inaccurate or incomplete personal data.
• Right to erasure: You have the right to request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or when you withdraw your consent (if the processing is based on consent) and there is no other legal basis for processing.
• Right to restriction of processing: You have the right to request restriction of processing of your personal data under certain circumstances, such as when you contest the accuracy of your personal data or when the processing is unlawful.
• Right to data portability: You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
• Right to object: You have the right to object to the processing of your personal data under certain circumstances, such as when the processing is based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: If we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.

 

Data Protection Officer:

C.E. Papouis Hotels Ltd has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with the GDPR. You can contact the DPO at:

9 Georgiou & Marias Tyrimou

Naxos Apartments, Office 1

6027 Larnaca, Cyprus

Tel: (+357) 24 657 100

Email: info@papouishotels.com

 

Data Security:

We take the security of your personal data seriously and have implemented appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including encryption, access controls, and regular security assessments.

 

Data Transfers:

If we transfer your personal data outside the European Economic Area (EEA), we will ensure that appropriate safeguards are in place to protect your personal data, such as standard contractual clauses approved by the European Commission.

 

Contact us:

If you have any questions or concerns about our GDPR compliance or how we process your personal data, please contact us at:

C.E. PAPOUIS HOTELS LTD

9 Georgiou & Marias Tyrimou

Naxos Apartments, Office 1

6027 Larnaca, Cyprus

Tel: (+357) 24 657 100

Email: info@papouishotels.com

 

By using our website, you consent to the processing of your personal data in accordance with this GDPR Compliance Statement.