At AMALIA HOTEL – TOURIST ENTERPRISES SA we aim to protect and safeguard the privacy of the information provided to us, always respecting the trust of our customers and users of our site.

We have always complied with existing national and European legislation on Privacy and we have put in place a series of actions and procedures to be fully compliant with the European Union’s new General Personal Data Protection Policy (GDPR). Please read carefully this Privacy and Data Protection Policy.

This Policy lays the basis for processing by our site of all personal data we collect from you or that you provide to us. We maintain some basic information when you visit our site and we recognize the importance of keeping this information secure and letting you know how we intend to use it.

Please read carefully this Policy to learn more about how we collect, store, use, transmit and protect the personal data and information we receive. Also, learn about your rights regarding this collection and processing, how you can exercise these rights, and how you can get in touch with us in general.


  1. Principles governing the data processing
  2. Lawfulness of processing
  3. Minors
  4. Collection and use of Personal Data
  5. Transfer of Data to third parties
  6. Rights and how to exercise them
  7. Links to other websites
  8. Provision of professional services
  9. Changes in the Personal Data Protection Policy
  10. Contact us



  1. Principles governing the data processing
  1. a) Lawfulness and transparency

All personal data we collect are processed fairly and lawfully, in accordance with applicable law and in a transparent manner with respect to the information we collect about you.

  1. b) Purpose limitation and data minimization

AMALIA HOTEL – TOURIST ENTERPRISES SA collects your personal data for specified, explicit, and legitimate purposes, and does not further process your data in a manner inconsistent with its purposes. In addition, only the relevant and necessary data are collected to the extent of the purpose for which they are processed. Namely, the information and data you share with us are not further unlawfully processed, unless there are reasons of public interest.

  1. c) Accuracy

Your personal data is accurate and, when necessary, updated. AMALIA HOTEL – TOURIST ENTERPRISES SA takes all reasonable steps to immediately delete or correct personal data, which is inaccurate, through our ready-to use edit form as well as our direct email communication, as detailed below.

  1. d) Data storage period limitation

AMALIA HOTEL – TOURIST ENTERPRISES SA retains your personal data only for the time required for the purpose of processing or compliance with the request of each individual (data subject) or until the data subject requests its deletion (and in any case, not more than 1 year unless we continue to maintain them as provided for in the applicable legislation).

  1. e) Integrity, Confidentiality and Security of the Data

AMALIA HOTEL – TOURIST ENTERPRISES SA applies the appropriate security policies and procedures to ensure that your personal data is processed in a manner that guarantees the appropriate security, including protection against unauthorized or unlawful processing and accidental loss, destruction or deterioration, using suitable techniques and organizational measures.

Despite the efforts made by AMALIA HOTEL – TOURIST ENTERPRISES SA, the security can not absolutely guarantee against all threats. In case of loss or violation of personal data, we have a specialized incident response team and a process to deal with these incidents in order to remedy the violation as soon as possible, to limit the possible consequences and to comply with our obligations under the law. We make every possible effort to ensure that access to your personal data is limited to those who need to know them. People who have access to the data are required to keep the data confidential. In the event of a violation of your personal data, we will notify you immediately and by any appropriate means.


  1. Lawfulness of processing

In order for your personal data and information to be processed lawfully, certain conditions must be met. AMALIA HOTEL – TOURIST ENTERPRISES SA always in accordance with Greek and Community law, collects only the personal data that are necessary and essential, in compliance with the above legal requirements, which are the following:

  1. a) Your consent: In order for us to process the data you provide, you must first give us your consent, by accepting the terms of use and privacy policy of our website and the use of cookies. Occasionally, we may request a special permission to process some of your personal data, and your personal data will only be processed in this way if you agree to that. You may withdraw your consent at any time either by filling out the “Personal Data Management Application” through which you may at any time request the withdrawal of your consent as regards the processing of some personal data and the extraction, correction or deletion of your personal data , maintained by us, or by contacting AMALIA HOTEL – TOURIST ENTERPRISES SA at

In general, you do not have to submit personal data to AMALIA HOTEL – TOURIST ENTERPRISES SA online but we may ask you to provide some personal information so that you can receive additional information about our services and events.  AMALIA HOTEL – TOURIST ENTERPRISES SA may also request your permission for certain uses of your personal data and you may either consent to or deny these uses. By accepting the consent clause for specific services or communications, such as an electronic newsletter, you will be able to unsubscribe from the relevant recipient list at any time by following the instructions contained in each communication. If you decide to unsubscribe from a service or communication, we will try to delete your data as soon as possible, although we may need some time and/or information before we can process your request.

(b) Performance of a contract: this is the case when processing your personal data is necessary for the fulfillment of our contractual obligations when you are a contracting party or upon your request prior to the conclusion of a contract.

(c) Legal obligation: this is the case when we are obliged to process your personal data in order to comply with a legal obligation, such as keeping records for tax purposes or providing information to a public body or law enforcement authority.

(d) Legitimate interest: We may process data about you when we have a legitimate interest in carrying out a lawful activity in order to ensure the continuity of this activity, provided it does not exceed your interests.

(e) Public interest: processing is sometimes necessary for the performance of a duty carried out in the public interest or while exercising official authority


  1. Minors

AMALIA HOTEL – TOURIST ENTERPRISES SA understands the importance of protecting children’s personal data, especially in an online environment. If the child giving consent for the processing of his or her personal data has reached the age of 16, then the processing is in accordance with the law. If the child is under the age of 16, such processing shall be lawful only if and to the extent that the abovementioned consent is granted or approved by the person having parental responsibility for the child.


  1. Collection and use of Personal Data

4.1 What data we collect

We receive your personal information only if you choose to provide them (for example, if you contact us via e-mailboxes or subscribe to some services). In some cases, you may have already provided your Personal Data to AMALIA HOTEL – TOURIST ENTERPRISES SA. By signing up and/or submitting your personal data to AMALIA HOTEL – TOURIST ENTERPRISES SA, you also consent to the use of this data in accordance with this Declaration. Your personal data is not used for other purposes unless we obtain your permission or unless this is required or allowed by law or by professional standards. For example, if you subscribe to the website of AMALIA HOTEL – TOURIST ENTERPRISES SA and provide information about your preferences, we will use this information to personalize your user experience. When you sign up or log in using a third-party subscription service, we may identify you as the same user regardless of the use of different devices and also personalize your user experience in any other websites of AMALIA HOTEL – TOURIST ENTERPRISES SA you may visit. If you send us your resume (CV) to apply online for a job at AMALIA HOTEL – TOURIST ENTERPRISES SA we will use the information you provide to check if your skills match to any job opportunities offered by AMALIA HOTEL – TOURIST ENTERPRISES SA. In some cases where you have subscribed to certain services, we may temporarily store your email address until we receive confirmation of the information you have provided via email (i.e. by sending an e-mail to the email address you have provided while subscribing, so that you can confirm the subscription request).


4.2 Automated Collection of Personal Data

In some cases, AMALIA HOTEL – TOURIST ENTERPRISES SA and its service providers use cookies and other technologies to automatically collect certain categories of data when you visit us online and through the emails we may exchange.  The collection of these data allows us to personalize your online experience, improve the performance, usability and efficiency of the web presence of AMALIA HOTEL – TOURIST ENTERPRISES SA and evaluate the effectiveness of the marketing activities of our services.


4.2.1 IP addresses

The IP address is a number assigned to your computer whenever you access the internet. It allows computers and servers to identify and communicate with each other. IP addresses which visitors seem to use in order to connect, may be logged for security of information technology and system diagnostics. This data can also be used in aggregated form to analyze the trends and performance of the site.


4.2.2 Cookies

Cookies may be placed on your computer or on your connectable to the Internet device whenever you visit us online.  This allows the site to remember your computer or device and serve multiple purposes.

A banner will appear on our site which will require your consent for the collection of cookies.  If you do not give your consent, your computer or device connected o the Internet will not be monitored for service promotion activities.  A secondary type of cookies may be required to ensure the necessary functionality.  These cookies will not be blocked by using this banner. Your option will be saved in a cookie and will be valid for a period of 365 days. If you wish to cancel your option, you can do so by deleting your browser cookies.

Although most browsers automatically accept cookies, you can choose to accept or not cookies through your browser settings (option often found in your browser’s Tools or Preferences menu).  You can also delete cookies from your device at any time. However, you must know that if you do not accept cookies, you may not be able to fully become acquainted with some of our site’s features and that some parts of our site may not be able to function properly.

Additional information on how cookies can be managed can be found in your browser’s “Help” folder or via web pages such as

Other third-party tools and widgets may be used on our site to provide additional functionality. The use of these tools or widgets may install a cookie on your device to make their service easier to use and ensure that your activity appears correctly on our web pages.

Cookies themselves do not disclose your email address to us nor personally identify you in any other way. In our detailed reports, we may receive identification information, including IP addresses, but only to identify the number of unique visitors to our webpages and the geographical origin of the visitors, and not to identify individual visitors.

By browsing our site and entering your login information to access areas only for registered users, you agree that we have the ability to place cookies on your connectable to the Internet computer or device. Types of cookies

The basic types of cookies that sites may use are described below

  • Session cookies

These are temporary cookies which remain in the cookie file of your device’s browser only during your visit and are deleted when you close the browser.

  • Persistent cookies

This remains in the cookie file of your device’s browser even after the browser closes, sometimes for one year or more (the exact time during which they remain in the file depends on the lifetime of each cookie). Permanent cookies are used when the site administrator may need to know who you are for more than one visit (e.g. to remember your username or your preferences regarding site configuration).

  • First-party cookies

These are cookies installed on the browser and/or hard drive of your device by the site you are visiting. This includes assigning a unique identifier to you in order to monitor your site navigation. Site administrators often use first-party cookies to manage visits and for identification purposes.

  • Third-party cookies

These are cookies used by third parties, such as social networks to monitor your visits to the various sites they advertise. The site administrator has no control over these third-party cookies. Cookies from video providers (Google, Vimeo, Dailymotion etc.)

These providers may place cookies on your device if you watch on our site videos that they provide as an external service. If you disable these cookies, you may not be able to see the embedded videos through our site.


4.2.3 Website traffic estimator

AMALIA HOTEL – TOURIST ENTERPRISES SA uses eXTReMe Tracker to measure site traffic. EXTReMe Tracker has been harmonized with the General Data Protection Regulation. Its records are stored in Europe and the USA at Amazon AWS.

You may find more information about the privacy policy of eXTReMe Tracker provided by AMALIA HOTEL – TOURIST ENTERPRISES SA at:

If you wish to delete your personal information from eXTReMe Tracker, you can either contact us through the personal data management form or send your request to and we will ensure that your request is met.



4.3 Social networking applications and widgets

The website of AMALIA HOTEL – TOURIST ENTERPRISES SA may include functionality so you can share through third-party social networking applications such as the Facebook Like button and the Twitter widget.  These social networking applications can collect and use information about your use of the websites of AMALIA HOTEL – TOURIST ENTERPRISES SA (see details regarding “Social Media Cookies” above). Any personal information you provide through such social networking applications may be collected and used by other members of that social networking application and these exchanges are governed by the privacy policies of the companies providing the application.  We have no control over or responsibility for these companies or the use of your information by them.

The publication of personal data of third parties (pictures, etc.) through the website of AMALIA HOTEL – TOURIST ENTERPRISES SA is illegal, unless prior consent of the data subjects has been obtained.


  1. Transfer of Data to third parties

We do not share personal data with third parties who are not affiliated with us unless this is required for our legitimate professional and business needs in order to meet your requests and/or if required by law or professional standards.

This includes the following third parties:

  • External service providers: Where appropriate, we will instruct other companies and individuals to perform certain tasks that contribute to our services on our behalf under data processing contracts. We may, for example, provide personal data to partners to host our databases and applications, provide data processing services, or send you information you requested, or to call centers for support or interview services during market research projects. All partners of AMALIA HOTEL – TOURIST ENTERPRISES SA fully comply with the General Data Protection Regulation (GDPR compliant) and are contractually bound to follow it. AMALIA HOTEL – TOURIST ENTERPRISES SA forwards personal data to them only when they meet our stringent data and security standards. We only disclose personal information that allows them to provide their services.
  • Transfer of an undertaking: In the event of reorganization, restructuring, merger, sale or other transfer of assets, we will transfer data, including personal data, to a reasonable extent, provided that the recipient agrees to respect your personal data in a manner consistent with applicable data protection laws. We will continue to ensure the confidentiality of any personal data and will inform you when your personal data become subject to a different privacy policy.
  • Courts, judicial or regulatory authorities: AMALIA HOTEL – TOURIST ENTERPRISES SA may disclose personal data in order to respond to requests from courts, judicial, governmental or police authorities, or where necessary and wise to comply with applicable law, court rulings or orders by courts or judicial authorities.
  • Public Bodies: AMALIA HOTEL – TOURIST ENTERPRISES SA may disclose personal data in the event of controls carried out by public bodies and authorities, such as inspections concerning personal data protection and security and tax audits.

Indicatively, your personal information may be shared with the following recipients:

  • Hetzner

AMALIA HOTEL – TOURIST ENTERPRISES SA shall not forward the personal data you provide to it to any third party, for their own direct use for marketing purposes.


  1. Rights and how to exercise them

If you have submitted any personal data to AMALIA HOTEL – TOURIST ENTERPRISES SA, you have the following rights:

  • Access: You have the right to access and export your personal data. Before we provide you with personal data, we may request proof of your identity and sufficient information about your transactions with us through which we can find your personal data.
  • Correction: If the data we have for you is inaccurate, you can correct it by editing your profile, the “Personal Data Management Application” or alternatively ask us to correct any inaccuracies in your data.
  • Objection to and limitation of processing: You have the right to object to the processing of your personal data by us if we do not have the right to use them anymore for any legitimate reason or to request that their processing be restricted in some cases, such as for data accuracy purposes and reasons of legitimacy.
  • Portability right: At your request, we shall transfer your data to another controller where technically feasible, provided that the processing is based on your consent or is necessary for the performance of a contract.
  • Deletion: You have the right to request the deletion of your data in some cases, for instance, if they don’t need to be processed or are in our records for a long time.

You can exercise the above rights by filling in the “Personal Data Management Application”, through which you may at any time request the export, correction or deletion of your personal data maintained by us.

You can also submit a request or exercise these rights by contacting us at  and we will make any reasonable and possible efforts to comply with your request if this is in line with the applicable law and professional standards.


  1. Links to other websites

The website of AMALIA HOTEL – TOURIST ENTERPRISES SA may include links to other sites for your convenience and information. These websites operate independently, and if they do not cooperate with the AMALIA HOTEL – TOURIST ENTERPRISES SA then they are not under our control and we are not responsible for any unlawful processing of your personal data. They may be subject to their own privacy policy, which we recommend that you consider if you visit a link to other sites before disclosing any personal data.


  1. Provision of professional services

AMALIA HOTEL – TOURIST ENTERPRISES SA receives personal data when providing professional services – usually when providing services to individuals, employers, businesses with natural persons as customers and the public sector. Our relationships with customers are governed by our cooperation letters and general terms of trade, including the use of personal data we receive. AMALIA HOTEL – TOURIST ENTERPRISES SA provides services of various types and its role may not always be clear to the data subjects. However, AMALIA HOTEL – TOURIST ENTERPRISES SA complies with its obligations under applicable Greek and European legislation on the protection of personal data, as in force, and the applicable regulatory directives relating to the management of personal data.


  1. Changes in the Personal Data Protection Policy

AMALIA HOTEL – TOURIST ENTERPRISES SA may periodically amend this Policy to comply with national and Community law and reflect our recent privacy practices. When we make any changes, we will record the date of the change or revision at the end of this page and we will notify you of the changes whenever necessary.


  1. Contact us

If you have any questions, comments or complaints about the management or protection of your personal data by us or if you wish to edit your personal data or exercise any of your rights as a data subject, please contact us at


This policy was last revised on 23 May 2018 and has been in force since 25 May 2018.