Marina Nikolaou is the owner and operator of this site Crete Reviews (https://www.cretereviews.com). Here in Crete Reviews we understand that privacy and security are important and we are strongly committed to protecting the privacy and security of our clients and website visitors.
This privacy statement explains: The details of the information that we collect about you, how we process it, to whom we disclose it, and your rights under data protection law in relation to our processing of your data. This Privacy Policy covers personal data that are collected through all of our websites (https://www.cretereviews.com) any service provided by us and through booking engines that are integrated into third-party websites. Please note that where you access our booking engine on a third-party website this Privacy Policy only applies to your use of the booking engine, and does not apply to any other use of that third-party website.
In this Privacy Policy, the following definitions are used:
Data Protection Officer (DPO) means the person who determines the purposes for which and the manner in which any personal data are processed.
Personal data means any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier. This definition provides for a wide range of personal identifiers to constitute personal data, including name, identification number, location data, or online identifier, reflecting changes in technology and the way organizations collect information about people. The definition incorporates, where applicable, the definitions provided in General Data Protection Regulation.
“You”, “your” or “data subject” means: – Visitors to our website – Subscribers to any service we offer through our website – Users of our applications – Prospective or existing clients corresponding with us by phone, e-mail, or otherwise
Who we are: Crete Reviews, located in Rethimno, Crete, Greece, operates this website allowing you to search and book for accommodations (all kinds), excursions (all kinds), transportation, flights, travel insurance, vehicle rentals (all kinds), activities (all kinds), events (all kinds), and discussions.
We may collect and process the following data and personal information about you:
Personal data you provide us voluntarily. We collect the information provided by you to operate effectively and provide you with the best experiences with our website, products, and services.
You provide some of this information voluntarily, this includes information you provide if you create:
Account: If you set up an account on our website, we will store details of your username and password, your settings preferences (e.g. language, currency, and location), and other optional information you submit in forms on our website.
Email address: You provide your email address if you subscribe to our newsletter, in connection with any service you request from us. Your email address will be used to communicate with you regarding the service you request from us. We may also send you emails and announcements that are necessary for the proper functioning, administration, and use of our service. Without it, we may not be able to provide the requested service.
Reviews: If you leave a review in relation to your stay at a property, this will be linked to your account on our service, which means we will treat it as containing your personal data.
Email marketing: When we collect your email address we will record your preferences regarding receipt of marketing emails from us in relation to our own products and services and those of third parties.
Location data: If you enable location services on your device and perform a search using your current location or view map directions from your location, we may record your location. We may also use your IP address to determine your approximate location when you use our service.
Address book contacts: You may choose to provide address book contacts, for the purpose of inviting your contacts to use our service.
Other information: You may otherwise choose to provide us information when you fill in a form, conduct a search, update or add information to your Crete Reviews account, register to use the app, download or register the app, enter into any transaction on the app or the website, send us a query or feedback, purchase goods via the website, participate in discussion boards or other social media functions on our site, promotion or survey, when you report a problem with our website or use other features of our services. This information may also include your travel destination, travel dates, class, and number of passengers, how many people will accompany you, your children ages.
Personally identifiable information. We don’t need and hence don’t collect any of the following information about you: your name, age, email address (unless you subscribed to our email list or created an account on our website), phone number, passport details, home address, etc. Most information in our systems is non-personally identifiable, which means that even we can’t match specific records to specific individuals, unless they signed up for an account. In this case, we treat this information with utmost respect and care.
Order and payment information. Because you pay to the travel service provider directly, we have no visibility of your order information, including, but not limited to: specific ticket bought, price paid, credit card number, etc.
Children. We do not offer any products or services for purchase by children. If you are under 16, you may use our website only with the involvement of your holder of parental responsibility. We do not knowingly collect personal information from children below 16 without the consent of the child’s holder of parental responsibility.
In providing personal data about other individuals (such as someone in whose name you are registering an account or subscribing to our marketing promotions), you represent that you have notified them of (i) the purposes for which information will be used (ii) the recipients of their personal data and (iii) how they can access and correct the information. You further represent that you have obtained all necessary consents from them.
Information we automatically collect from your use of our website and service. When you use our website and service, we automatically collect information, including personal information, about the services you use and how you use them. This information is necessary for the adequate performance of the service you request from us, to enable us to comply with legal obligations and given our legitimate interest in being able to provide and improve the functionalities of the service.
Geo-location information. When you use certain features of our service, we may collect information about your location as determined through data such as your IP address or mobile device’s GPS to offer you an improved user experience. Most mobile devices allow you to control or disable the use of location services for applications in the device’s settings menu.
Usage and device information. We may collect information about your interactions with the service such as the pages or content you view, your searches for service provider listings, and other actions on our service. We may also automatically collect log data and device information when you access and use our service, even if you have not created an account or logged in.
This information may include, among other things: details about how you’ve used our service, IP address, access dates and times, hardware and software information, device information, device event information, unique identifiers, cookie data, and the pages you’ve viewed or engaged with before or after using our service.
Cookies and similar technologies. We use cookies and other similar technologies, such as pixels and mobile identifiers. We may also allow our business partners to use these tracking technologies on our service, or engage others to provide similar tracking on our behalf. You may disable the usage of cookies through your browser settings. For more information on our use of these technologies, see our Cookie Policy.
Although we mainly collect information directly from you, there are circumstances where we collect information from third-party sources.
Affiliates: We operate an affiliate program under which we advertise third parties websites or services on their behalf. If you click on one of those advertisements you are directed to their website using a technology that allow them to understand that we are the affiliate that referred you. Then they track if you make a booking, and if you do they attribute that booking to us for the purpose of paying us a commission. However, we don’t provide the affiliate with any personal information in relation to you.
Advertisements and analytics: We work with third parties to display advertisements or to analyze the functionalities of our service. When we work with third parties for these purposes we may use technologies like cookies or pixel tags to record details of your interactions, either with the advertisements or our service. This data is sometimes sent to us through cookies and pixel tags that are set on our behalf by those third parties. For more information on our use of these technologies, see our Cookie Policy.
Technical information, including personally identifiable information. Device and connectivity information such as IP (Internet Protocol) address, unique device identifiers (such as the IMEI for phones), the MAC address of the device’s wireless network interface, or the mobile phone number used by the Device, mobile network information, your mobile operating system, the type of mobile browser you use, time zone setting “Device Information”. Configuration data such as browser type, version, and language setting, time zone setting, browser plug-in types, and versions.
Details of how you used our website, such as your search queries. Information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through and from our site (including date and time), products you viewed or searched for, page response times, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page. Log information, such as error reports, download errors, any problems you experience using our website, and any phone number used to call our customer service number.
We do not match information collected automatically through cookies and analytics tools with other personally identifiable information you may have provided to us when you registered for our products or submitted a form through our website.
We may use your personal data for a number of reasons, such as tailoring advertisements and marketing emails so they are relevant to you, monitoring your use of our website and service to help us make improvements, and to provide the additional services that we make available on our website.
Email communications and notifications: We may provide status updates, notifications, and other relevant information about the service you request, to your email. In circumstances not explicitly based on your consent, we may also send you emails and notifications that are necessary for the proper functioning, administration, and use of our service. Without these communications, we may not be able to provide you with the service you request. Where we have collected your email address in the context of providing you with our service, and you have not opted out of receiving email marketing, we may send you emails that we think will be useful to you. This may include our regular newsletter, special offers, travel tips, customer surveys, and information about products and services offered by us. If you have given your consent, we may send you offers from selected third parties. These emails may include advertising that has been tailored using other information that we hold about you. You may opt out of receiving email messages at any time by clicking on the link provided in the email messages. Although when we send you an email or notification this may in certain circumstances be on the basis of your consent, for all other purposes our processing of your personal data in connection with those emails or notifications is on the basis of our legitimate interests in ensuring that our advertising is effective.
Providing, improving, and developing our services: We use information collected from or about you to enable you to access and use our service. We use your information to operate, protect, improve, and optimize our service, such as by performing analytics and conducting research. We also use your information to provide customer service, including sending you service or support messages, updates, security alerts, and account notifications. All of this processing of your personal data is on the basis of our legitimate interests in operating, improving, and securing our service.
Advertising and marketing: We always want to ensure that our advertising and marketing will be relevant to you and your interests, whether the advert appears on a website we operate, in our marketing emails, or on a third-party site. We use the information we collect to personalize, measure, and improve our advertising. We also use this information to send you promotional messages, marketing, advertising, and other information that may be of interest to you based on your preferences, and social media advertising through social media platforms (such as Facebook or Google). Some of our advertising partners (e.g., Facebook) provide a feature called audience matching to enable us to show you more relevant adverts, or to ensure that we don’t show you an advertisement that isn’t relevant to you. We will process your personal information for the purposes listed in this section given our legitimate interest in undertaking marketing activities to offer you products or services that may be of your interest. You can opt out of receiving marketing communications from us by following the unsubscribe link or instructions included in our marketing communications, or changing your opt-in settings within your Crete Reviews account.
Reviews: When you provide a review for a travel service provider we will publish this on the provider’s page on our website, and on our some of our partners’ sites. We will display the text of your review, alongside details of your gender, age range, home country and number of previous reviews. If you have not opted to be anonymous, we will also display your username alongside your review. Our processing of your personal data in order to make reviews available is on the basis of our legitimate interest in making the review system available to our users.
Queries and complaints: When you send us a query in relation to a service or if you have a complaint in relation to a service or travel service provider, we will process your personal data in order to answer your query or in order to resolve your complaint. When we process personal data in the context of a query or complaint we will do so on the basis of our legitimate interest in resolving customer queries and complaints. If you volunteer data in relation to your health, we will process that personal data on the basis that you consent to us using it in order to resolve your query or complaint.
Affiliate program: We operate an affiliate program under which we advertise third parties websites on their behalf. If you click on one of those advertisements you are directed to their websites using a technology that allows them to understand which affiliate referred you. Then they track if you make a booking, and if you do they attribute that booking to the affiliate for the purposes of paying us a commission. However, we don’t provide the affiliate with any personal information in relation to you. We process your personal data in connection with our affiliate program on the basis of our legitimate interest in operating an effective commission-based affiliate advertising program.
Required information: You are not obliged to provide us with any of your personal data. However, if you want to use a service we offer, you will need to provide us with the information that is indicated as required. If you don’t provide us with this information, we won’t be able to provide you with the service you request. Similarly, you may be required to provide certain information if you want to take part in a promotion, survey, or if you contact our customer services with a query or complaint. We will inform you where such information is required.
As part of our online advertising programs we may share your personal data with third parties, who will combine it with data that they hold about you in order to tailor advertisements that appear on third-party websites. Where this data is shared you are not directly identifiable from the information itself, as we use technologies that use non-personally identifiable codes and tags. For travel service providers that publish their information on our service, your information will be made available and visible to the general public. For example, as part of your public listing, contact names, profile photos, telephone numbers, descriptions, locations and addresses are publicly visible to others. After completing a booking, guests may write reviews and rate a travel service provider. Reviews are a part of your public listing page. If you submit content in a public forum or social media post, or use a similar feature on the service, that content is publicly visible.
Information you share publicly on our service may be indexed through third-party search engines. If you change your settings or your public-facing content, these search engines may not update their databases. We do not control the practices of third-party search engines, and they may use caches containing your outdated information. We also use a number of service providers to assist us in providing our service, some of whom will have access to your data (e.g., we use various software service providers who host our data as part of their services).
Where we engage a third party to process your data on our behalf, we make sure that they respect your privacy rights and that they process data in accordance with data protection law. We may disclose your information to courts, law enforcement or governmental authorities, or authorized third parties, if and to the extent we are required to do so by law or if such disclosure is reasonably necessary: (i) to comply with legal process and to respond to claims asserted against us, (ii) to respond to verified requests relating to a criminal investigation or alleged or suspected illegal activity or any other activity that may expose us, you, or any other of our users to legal liability, (iii) to enforce and administer our Terms & Conditions of service or other agreements with members or users, (iv) for fraud investigation and prevention, risk assessment, customer support, product development and debugging purposes, or (v) to protect the rights, property or personal safety of Crete Reviews, its employees, its members, or members of the public. In such circumstances, we will only share your personal data in compliance with data protection law.
We generally retain, store and use personal data for the least amount of time necessary pursuant to our relationship with you (e.g., to provide you with our service), in accordance with our data retention policies and any requirements that are imposed on us by law. This means that the retention period for your personal data will vary depending on the type of personal data. We do not collect more personal data than is necessary to fulfill our obligations to you or at law or for the purposes stated in this Privacy Policy. If you no longer want us to use your information to provide our service to you, you have the right to request that we remove your account and personally identifiable information entirely.
When we process your personal data on the basis of your consent, you are free to withdraw that consent at any time. You can withdraw your consent by contacting us using the contact details at the bottom of this notice. If your consent relates to receiving email marketing you can use the unsubscribe link in the email, or if it relates to notifications on your device you can turn off notifications using your device settings. Please note that if you withdraw your consent we may not be able to continue to provide the related service to you. Your rights under data protection law.
You have various rights under data protection law in connection with our processing of your personal data. For example, you have the right to request a copy of your personal data that we hold and to request that we correct any errors in the personal data that we hold. These rights are subject to certain exceptions.
You have the following rights under data protection law:
Right to access your personal data: You have the right to request a copy of the personal data that we hold about you, together with other information about our processing of that personal data.
Right to rectification: You have the right to request that any inaccurate data that is held about you is corrected, or if we have incomplete information you may request that we update the information so that it is complete.
Right to erasure: You have the right to request us to delete personal data that we hold about you. This is sometimes referred to as the right to be forgotten.
Right to restriction of processing or to object to processing: You have the right to request that we no longer process your personal data for particular purposes, or to object to our processing of your personal data for particular purposes.
Right to data portability: You have the right to request us to provide you with a copy of your personal data in a structured, commonly used machine-readable format.
In accordance with European data protection laws, we observe reasonable procedures to prevent unauthorized access and the misuse of personal information. We use appropriate business systems and procedures to protect and safeguard the personal information you give us. We also use security procedures and technical and physical restrictions for accessing and using the personal information. Only authorized personnel are permitted to access personal information in the course of their work. We are continuously implementing and updating administrative, technical, and physical security measures to help protect your information against unauthorized access, loss, destruction, or alteration.
Some of our third-party advertising partners ask us to make you aware of their privacy policies. These policies are available by following the links below:
We reserve the right to modify this Privacy Policy at any time in accordance with this provision. If we make changes to this Privacy Policy, we will update the “Last Updated” date at the top of this Privacy Policy. If you disagree with the revised Privacy Policy, you may cancel your account. If you do not cancel your account before the date the revised Privacy Policy becomes effective, your continued access or use of our websites or service will constitute acceptance of the revised Privacy Policy.
If you have any questions or complaints in connection with our processing of your personal data or about this Privacy Policy you can get in touch with us using the following contact details:
Crete Reviews
P.O.Box 3681, Prines, 74150 Rethimno, Crete
Contact support: info@cretereviews.com