On 25 May 2018, Regulation (EU) 2016/679 of the European Parliament and European Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46 / EC became applicable (referred to as “RODO”, “ORODO”, “GDPR”, “General Data Protection Regulation” or General Data Protection Regulation). Therefore, we would like to inform you about the processing of your data and the terms on which it will be carried out from May 25, 2018.

What are personal data and what data we process?

Personal data is any information about a natural person that allows you to identify, directly or indirectly, the identity of that person. Personal data processing is operations performed on personal data, in particular collecting, recording, storing, processing, changing, sharing and deleting data.

We process the following personal data:

• First name and last name,
• Date of birth,
• Identity number,
• Phone number,
• E-mail address,
• Identity card number and date of validity (for booking and insurance purposes),
• Passport number and date of validity (for booking and insurance purposes),

The administrator of your personal data is the Travel Agency FirstClassGreece, ul. Emilii Plater 47/15 00-118 Warsaw, having an entry in the register of tour operators and brokers under No. 12384-14, Tax Identification Number: 5252707026, REGON: 367035126.

Access to personal data is available only to authorized employees of FirstClassGreece Travel Agency and its owners.

The Administrator can be contacted via traditional mail to the following address: Emilii Plater 47/15 00-118 Warsaw, or via e-mail address: contact@firstclassgreece.com.

For what purpose do we process personal data?

Personal data is processed in order to:

• Book a tourist event,
• Prepare a contract regarding the provision of tourist services,
• Buy the participants insurance for the duration of the tourist event,
• Register the procedures of touristic events
• Arrange marketing and promotional activities – voluntary consent.
• Register the image during the tourist event – voluntary consent.

Providing personal data is a condition for the validation of a contract regarding the provision of tourist services. In the event that the customer does not agree to provide personal data, the contract can not be successfully signed.

An exception is the situation in which the customer does not consent to the processing of personal data for marketing and promotional purposes or to register the image during the tourist event. Consent to data processing for marketing and promotional purposes and consent to record the image during the event is a voluntary option and does not affect the validation of the contract (regarding provision of tourist services). In these cases personal data can be withdrawn at any time.

Who can we provide personal information to?

Your data may be transferred to entities that use data connected with the services ordered by us (eg the insurer, the implementation of a tourist event by Tour operators, pilots and tourist guides, drivers providing transport services and yacht owners/skippers). Your data may also be transferred to third countries for the purpose of implementing the contract, (entities cooperating with FirstClassGreece such as hotels, foreign contractors regarding transfer of data for registration, etc.).

What rights do you have in relation to your personal data?

You have the right to request access to data, rectification, transfer, deletion or limitation of their processing. You have the right to withdraw your consent at any time. Withdrawal of consent does not affect the legality of the processing of your data, which were made on the basis of the consent granted prior to its withdrawal. The consent is independent of the time in which you use the services, and is valid until it is canceled. Granting consent means you agree to receive marketing information tailored to your needs and offers regarding products and services provided to the e-mail address or phone number given,  as well as entitling to telephone contacts.

For what period of time are personal data processed?

The period of personal data processing depends on the purpose for which the data is processed. After the tourist service is performed, personal data will be deleted or anonymised. However, we process personal data processed for accounting purposes and for tax purposes for a period of 5 years until the end of the calendar year in which the tax obligation arose. After this period, the data will be deleted or anonymised.

What are the legal grounds for processing your data?

Every processing of your data must be based on a proper legal basis, in accordance with the applicable law. The legal basis for processing your data with the aim to provide services is indispensable for the validity of contracts. In addition, the legal basis is indispensable to fulfil the legal obligation imposed on the administrator and  for the purposes arising from legitimate interests pursued by the administrator such as answering your letters and applications.