Who we are
Alta Hellas owns and operates a service that allows users to explore, find and book travel around Crete. In this Policy, they are collectively referred to as our “Services.”
What personal data we collect and why we collect it
Our commitment to providing relevant, personalized, and helpful Services is greatly enhanced by the information you and others entrust us with. We understand that sharing your personal information is rooted in trust, and we take this trust seriously. Our dedication is to furnish you with valuable information, products, and Services tailored to the details you provide. Furthermore, we prioritize respecting your privacy during your interactions with our website or Services. Transparency regarding our use of your entrusted information is paramount to us. We urge you to carefully review this privacy and cookies statement (“Statement”) to acquaint yourself with our privacy practices.
This Statement outlines how we acquire, utilize, and handle your information in a clear and understandable manner. It also elucidates your rights, how to exercise them, and how to reach out to us. Please read this Statement attentively to familiarize yourself with our information and privacy practices. By accessing our website and mobile application, regardless of the device used (computer, phone, tablet, etc.), you acknowledge having read this Statement.
As we cater to users across various countries and territories, each with distinct laws and customs, this Statement serves as a general overview of our privacy practices.
Information Collected and Processed
When you access or use our Services, we collect and process information from and about you to provide the Services in a more personalized and relevant way. Some information we collect passively; for example, with our servers or with cookies or other similar tracking technologies. Some information we collect from different sources, including from you, affiliated entities, business partners, and other independent third-party sources. When you use our Services by “clicking-through” from a third-party website or when you visit third-party websites via our Services, those third-party websites may share information with us about your use of their service. Any information we receive from third-party websites may be combined with the information provided by you. Information collected may include the following:
Contact information, including name, phone number and postal and email addresses (both hashed and unhashed)
Billing and other payment information (such as your bank account information, credit card number, cardholder name, expiration date, authentication code and billing address)
Username and password
Photos, reviews, social posts, and videos you may have provided to us
Geolocation information
Device information, such as when you accessed our Services and information about the Device used (for example, IP address, software or internet browser used, preferred languages, unique Device identifiers and advertising identifiers)
Online activity, including pages you have visited, content reviewed, and apps reviewed
Purchasing and booking history
Information about your travel and experience plans and preferences
Communications when you contact our customer service team, including inbound and outbound calls
Information that you have provided to third party companies for the purposes of logging into social media platforms. This includes publicly available information, such as name, age range as well as email addresses.
We may also collect, in instances where you have provided it, information about other travelers, including their email address and other travel-related information. If you are sharing information with us about other individuals, you must obtain their consent and ensure that they have understood and accepted how we will use their personal information (as described in this Statement).
In addition to the categories noted above, we may also collect certain location information if you have instructed your Device to send such information via the privacy settings on that Device, or, for example, if you have uploaded photos tagged with location information.
Information Uses and Purposes
Our aim is to provide you with relevant content and a personalized experience when using our Services. To achieve this, we utilize information about you in various ways, including:
Registration and contractual obligations:
- Registering and managing your account to facilitate access to and use of our Services
- Assisting with your bookings
- Processing payments
- Offering promotional incentives such as competitions, gift cards, rewards, cash back, and discounts
Improvement of Services:
- Analyzing information for the purpose of enhancing our Services
- Providing a tailored and optimized experience by segmenting users based on usage patterns, interests, and demographics
- Sending survey or market research invitations
Individualization and customization:
- Notifying you about special offers, prize draws, competitions, and Services offered by us, our affiliates, or our partners that may be of interest
- Personalizing your experience by making inferences about your interests and preferences derived from your activity, and customizing advertisements displayed to you on and off our website
Information Sharing
In order to provide some of our Services, we may need to share information with certain other third parties, including our group of companies, in the following circumstances:
- Service Providers. We share information with certain service providers used to facilitate our Services, including to help with transactions.
- Business Partners. We may share information about you, your Devices and your use of our Services with our trusted business partners. For example, we may share information so that we can facilitate payments for services you may see promoted on the websites of our partners. This sharing is generally pursuant to written agreements which include confidentiality, privacy and security obligations; please note, however, that we do not control the privacy practices of these third-party business partners.
- Social Media Sites. When you use our Services and elect to share information with third-party social media websites, the information you share will be governed by the privacy policies of those social media websites and the privacy settings you have set with those social media websites.
- Fraud Detection Companies. Third parties may assist us by providing us with their fraud detection technologies.
- Other third parties, such as referring websites.Third parties may also assist us in collecting information by, for example, operating features of our website or facilitating the delivery of online advertising tailored to your interests. We may share audience segments and other information, such as hashed email addresses, with third parties that use that information for tailored advertising to you. Other third parties may also provide us with their content and contract generation, management, and hosting tools. Third parties may only collect or access information as needed to perform their permitted functions. If and to the extent these third parties only assist us to perform our processing operations, we have bound them contractually to only act on our behalf as so-called data processors.
Certain Device operating system versions permit you to opt out of certain types of information sharing, including to certain advertising networks. You can change the privacy settings of your Device at any time in order to turn off the functionality that collects and shares location information. Please check your Device settings if you want to limit such tracking. However, turning off location-sharing may affect certain features that we offer. If you have any questions about the privacy settings of your Device, we suggest you contact the manufacturer of your Device or your mobile service provider for help.
We also may share your information if we believe, in our sole discretion, that such disclosure is necessary:
- To comply with legitimate and enforceable subpoenas, court orders, or other legal process; to establish or exercise our legal rights; to defend against legal claims; or as otherwise required by law. In such cases, we reserve the right to raise or waive any legal objection or right available to us.
- To investigate, prevent, or take action regarding illegal or suspected illegal activities; to protect and defend the rights, property, or safety of Viator, our customers, or others; and in connection with our Terms of Use and other agreements.
- In connection with a corporate transaction, such as a divestiture, merger, consolidation, or asset sale, or in the unlikely event of bankruptcy.
Children’s Information
Our Services are not directed towards children, defined as: (i) individuals aged 13 or under, or the age of privacy consent in your jurisdiction; or (ii) the age of legal capacity to enter into agreements when processing data based on a contract.
We will only collect or process information belonging to children under specific circumstances. For instance, we may need to gather personal information from children if it’s necessary for an experience-related reservation. However, we will only collect such information with the consent of a parent or guardian. If we discover that we have processed a child’s personal information without valid parental or guardian consent, we will promptly delete the information.
Information Security
We have established comprehensive administrative, technical, and physical security protocols to safeguard your information. Access to personal data is restricted to authorized personnel, who may only access it for approved business purposes. Encryption is utilized when transmitting information between your system and ours, as well as between our system and any third parties with whom we share data. Moreover, we employ firewalls and intrusion detection systems to deter unauthorized access to your information. Nonetheless, we cannot ensure the absolute security of data against unauthorized entry or use, hardware or software failures, or unforeseen circumstances beyond our control.
Data Deletion and Retention
We will preserve copies of your information for the duration of your account’s existence or as required for the purposes outlined in this Statement, unless prolonged retention is mandated by applicable law. Furthermore, we may retain your information for the duration necessary to establish, exercise, or defend any legal rights.
Cookies
We want your access to our Services to be as easy, efficient, and useful as possible. To help us do this, we use cookies and similar technologies to improve your experience, to enhance website security, and to show you relevant advertising.
Cookies are small text files that are automatically placed on your Device when you visit almost any website. They are stored by your internet browser and contain basic information about your internet use. Your browser sends the information from these cookies back to a website every time you revisit it, so it can recognize your Device and improve your experience by, among other things, providing you with personalized content. We also use other tracking technologies, such as pixel, SDKs, or server logs, that have a similar functionality. We also use cookies and tracking technologies to remember your login details, so you don’t have to re-enter them repeatedly when you use our Services or to help us understand your preferences.
To give you control, we provide you with a Cookie Consent Tool which allows you to adjust and customize your cookie settings. You can access the Cookie Consent Tool by clicking the “Cookie Consent” link at the bottom of every page and modify your preferences in our cookie banner. In addition, you can manage cookies through the settings of your internet browser. You have the right to withdraw your consent to cookies at any time by clicking on the “Cookie Consent” link and modifying and saving your preferences. In the settings of your Internet browser, you can choose which cookies to accept and reject.
Most advertising networks offer you a way to opt out of advertising cookies. See www.aboutads.info/choices/ and www.youronlinechoices.com for useful information on how to do this.
If you decline certain cookies, your access to some functionality and areas of our Services might be degraded or restricted.
Our use of any information we collect through cookies is subject to this Statement, which is linked on every page of our website.
Changes to Statement
This Statement may be revised in the future. In the event of material changes, we will notify you through one or more of the following methods: sending a communication regarding the changes, displaying a notice on the website, and/or publishing an updated Statement on the website. The date of the most recent update will be indicated at the top of this Statement. We recommend checking back periodically to review the latest version and to stay informed about our privacy practices.
Contact
If you have a data privacy request, such as a request to delete or access your data, please contact us.
Comments
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.