Privacy Policy

The purpose of this present Privacy Policy of Personal data is to inform you with respect to the ways and reasons, for which we collect and process your Personal Data, as well as the rights you have as individuals whose data are subject to processing, based on the new regulatory framework for the protection of personal data laid out by the European Union (EU) 2016/679- the so called General Data Protection Regulation («GDPR»). We recommend that you carefully read the Villa Leblon Privacy policy stated primarily for your safety and protection.

GDPR forms a common framework for the protection of our private life of individuals and as a binding legal act with a compulsory implementation to all member countries of the EU, since the 25th May 2018.

Who is the person Responsible and Processing Officer?

Our property with the distinct title “Villa Leblon”, based in Kalo Livadi, Mykonos postal code 84600, in Greece, as the organisation responsible for the Execution and Processing of Personal Data ( «Villa Leblon»), within the framework set by GDPR and the Greek Legislation (Law article Ν.4624/2019), effective and applied as directed, collects and process your Personal Data and Personal Data of Special Categories, as defined by article 4 within GDPR (as of now referred to as “Personal Data”), according to the herewith Personal Data Privacy policy.

You can always contact us at the details listed below:

Villa Leblon Mykonos
Kalo Livadi, Mykonos, 84600
Greece
Telephone +30 6981 70 3000
Email info@leblonmykonos.com

Why do we collect and process your Personal Data?

A legal reason for the collection and processing of Personal Data constitutes the provision of hospitality services to our guests, together with the following mentioned reasons set by the requirements which are stated in article 6 of the GDPR regulation.
The Personal Data are strictly processed within the context of the regulations and are not submitted to further processing, which is somehow incompatible with the initial purpose of their collection and processing. The additional processing of personal data for archiving purposes, emerging from serving our guests, during their stay at our hotel, is not considered inconsistent to the reason why we collected their data in the first place, for which we have already received their written consent.
Specifically, Villa Leblon will collect and use your personal data for the following purposes:

• For the instruction, execution and completion of the provision of hospitality services to you.
• For the provision of catering services of food and drink to you, upon request.
• For the provision of specific experiential services such as Spa, Yoga sessions and Personal Training to you.
• For communicating with you with promotions, informing you on new product and services, special offers, research and development of services that we offer
• For the communication with you for various other reasons, such as the management of a query you may have.
• For the invoicing of services provided to you by us.
• For the safety of individuals and their personal belongings, either of our guests who stay at our hotel, or of our employees, as well as the monitoring of our premises as an act of prevention, research, detection or even the combating of criminal activities. For this reason, throughout our public spaces of our premises we operate a closed circuit monitoring cameras (known as CCTV- Closed Circuit Television).
• For the protection and the assurance of your health during your stay at our hotel, exceptionally and in case of emergency, regardless of whether you have given us your consent or whether you are in no position to provide it, such as in case of an accident.
• For the compliance of our hospitality company to its legal obligations, such as the management and the resolution of potential legal dispute or complaint.

What Personal Data do we collect and use?

Villa Leblon will collect and process the type of Personal Data that are absolutely necessary within the context of servicing the purposes that have been stated herein. Specifically, we may collect and process the following:

• Personal data of our guests, identity and contact details: the details that describe a person, such as name and surname, Identity number, passport number, VAT, home address, telephone number, photograph, email address (personal IP), hardware identifiers, online profile, social media profiles and credit card numbers.
• Sensitive personal guest data: Details that describe special personal information such as religious beliefs, health status, medical history or other special needs and dietary habits of a person.
• Data relating to behavior, personal preferences of our guests: personal preferences relating to their stay at the hotel such as room preference.
How do we collect your Personal Data?
Ways in which we collect your Personal Data are indicated below:
• Either directly from you: by filling in a form or by forwarding them via post or email or fax, by making an electronic booking on our booking engine, powered by our supplier “Book Online Now”, on the re-directed URL https://leblonmykonos.book-onlinenow.net, via our website leblonmykonos.com
• Either via 3rd party suppliers or agents: to whom you turn to book rooms, such as travel agencies, electronic engines/platforms of large OTAs and other worldwide distribution systems, or GDS.

How do we forward your Personal Data?

The primary consideration for Villa Leblon is the protection and confidentiality of your Personal Data. For this reason your Personal Data are used solely by appointed members of our in-house employees and strictly in the context of executing their daily duties.
Occasions when we shall need to collect and forward your Personal Data to third party suppliers or other organisations- within or outside the boundaries of Greece or inside or outside the EU- will occur when it is absolutely necessary, exclusively in the context of guest service, as follows:

• To companies and professionals who operate as Official Processing Officers and are responsible autonomously conforming to the legal processing of your Personal Data, according to their own privacy policies and information. For example, banks via certified online systems for the payment of services that we provide to you, to hotel agents or intermediaries, to lawyers, to chartered accountants, to insurance companies and health providers for the protection of your vital security interests, such as in case of an accident.
• To outsourced providers collaborating with our Company, who operate on behalf of our company as Processing Officers and are committed to safeguard confidentiality of data, to whom we transfer data which are necessary for executing tasks we have appointed to them, for example providers of IT services and accountants.
• To the local police, administrative, tax, judicial, or other authorities, in cases of emergency for your own security and protection.

Villa Leblon will not expose your Personal Data to third parties, in any way, as long as they are not related to the purposes of collecting and processing, referred to above in this present Privacy Policy, unless it is demanded by law, or legal enquiry, or a demand from local authorities.
Villa Leblon does not intent and will not transfer your Personal Data to third parties for use in commercial promotional activities.

How and where do we store your Personal Data?

Your Personal Data are kept by Villa Leblon in an electronic or/and paper format, in one or more archive files and are stored in a private server, as well as in physical secured storage areas at the central premises of Villa Leblon at Kalo Livadi, Mykonos and our offices in Athens, Greece.

For how long do we keep your Personal Data?

Your Personal Data are stored by Villa Leblon for the duration needed to fulfill hospitality services to you and for twelve (12) additional years in our database. In case you have given us your Personal Data but never used our services, we shall still keep them, provided that we have received your consent. In certain circumstances, your Personal Data may be kept beyond the above stated duration, due to possible legal obligations, or matters of compliance related to Villa Leblon.

How do we protect your Personal Data?

Villa Leblon will take all technical and organisational security measures for the protection of your Personal Data from misuse, loss, non -authorized access, disclosure or destruction. Taking into consideration best practices of modern technology, we have invested in a complete software for securing data, amongst others, including a software shield for our website and our IT systems with firewalls, a password secured user access for the abstraction of information from our database, as well as applying regular penetration and accessibility inspections to our network. You may have to take into consideration that due to the special nature of the world wide web it is not feasible to completely control the risk involved when using the internet, hence we draw your attention to the presence of potential risks relating to the use and operation of the internet.

What are your rights with respect to your Personal Data?

At any moment of time and according to the relevant prerequisites that are anticipated by the Greek and European legislation, you can exercise the following rights relative to your Personal Data:

-Rights of accessing: You have the right to be informed of the type of Personal Data we keep and process, to receive a copy of these, as well as any other information about their processing.
-Rights of rectification: You have the right to request rectification or/and completion of inaccurate Personal Data so that they are accurate in our database.
-Right to erasure (right to be forgotten): You have the right to ask for erasure of your Personal Data, that are not required anymore for the initial purpose for which they were collected, or if their erasure is directed by law.
– Right to restriction of processing: You have the right to ask for the restriction of processing of your Personal Data in the circumastances when a. There is a dispute on the given data accuracy, b. Data processing is unlawful and instead of erasure you wish to proceed with the restriction of its use and c. Data are not required anymore for the initial purpose for which they were collected.
-Right to portability: You have the right to receive your Personal Data in a structured electronic readable format, as well as forwarding these directly to third parties, that you have pointed out.
-Right to objection: You have the right to object submitting your Personal data for further processing by us.
-Right of Notification obligation regarding rectification or erasure of personal data or restriction of processing : You have the right to be notified by our Processing Officer for every correction or erasure or restriction of processing of your Personal data, unless this is impossible or equals to an ineffectively large effort to achieve. Moreover, you have the right to request updates on information regarding the parties which receive your Personal Data.
-Right not to participate in Automated individual decision-making, including profiling : You have the right to request that we do not use your Personal Data in decision making processes that we may complete by exclusively using automated processing, that include customer profiles.

How to apply for your Rights

To receive the application for exercising your rights, click here
Exercising the above rights requires the completion of the downloadable application which is sent either by post to the postal address:
Villa Leblon, Kalo Livadi – Mykonos, Postal Code 84600, or via email dpo@leblonmykonos.com.

Hellenic Data Protection Authority
Also, you have the right to submit an inquiry or a complaint with the Hellenic Data Protection Authority, which is based in Athens, on No.1 Kifissias Avenue, contact number +30 210-6475600 or on email address complaints@dpa.gr

Data Protection Officer
In case you have any query regarding the processing of your Personal Data, or for the purpose of exercising your rights, you can contact our Data Protection Officer via email at the address dpo@leblonmykonos.com and by sending a letter via post to the address Villa Leblon, Kalo Livadi – Mykonos, Postal code 84600, Greece for the attention of our DPO Officer or call at +30 6981 70 3000.

Updates in the present Privacy Policy
Villa Leblon reserves the right to alter the current Privacy Policy at any given time, by publishing the updated one on online website (www.leblonmykonos.com) For this reason, we suggest that you visit our website on the url leblonmykonos.com/privacy-policy to be informed for any revisions made to the Villa Leblon Privacy Policy.