This Privacy Policy describes how the Website collects, uses, stores, and protects the personal data of its users, in accordance with the General Data Protection Regulation (EU 2016/679 – GDPR) and Greek law. By accessing and using the Website, the user unconditionally accepts this Policy.

1. Data Controller: The controller responsible for the processing of personal data is the Website administrator of CreteXplorer, who determines the purposes and means of processing. The user may contact us at any time using the available contact details for questions regarding the processing of their data.

2. What Data We Collect: The Website collects personal data only when the user voluntarily provides it, such as when communicating, creating an account, placing an order, or filling out an interest form via our contact page. This data may include full name, email address, phone number, home address, billing information, as well as technical data such as IP address, device type, browser, and usage data collected via cookies.

3. Purpose of Processing: Personal data is used exclusively to provide the Website’s services, assist users, complete transactions, communicate regarding requests or orders, and improve the user experience and functionality of the Website. In certain cases, and only with consent, the data may be used for informational or promotional messages.

4. Legal Basis for Processing: The processing of personal data is based on the user’s consent, the performance of a contract, compliance with a legal obligation, and the Website’s legitimate interest in the proper operation and security of its services.

5. Data Retention Period: Personal data is retained only for as long as is strictly necessary to achieve the purposes of processing or as required by law. After this period has elapsed, the data is securely deleted.

6. Data Security: The Website takes all necessary technical and organizational measures to protect personal data from loss, leakage, unauthorized access, or destruction. Access to data is permitted only to authorized persons and only for purposes related to the operation of the Website.

7. Disclosure to Third Parties: Personal data is not disclosed to third parties unless necessary for the provision of services, such as to partner payment providers, hosting or technical support companies, and only if they are bound to maintain confidentiality and comply with data protection laws.

8. User Rights: The user has the right to access their personal data, correct inaccurate information, delete data, restrict processing, request data portability, and object to processing. They may also withdraw their consent at any time, without affecting the lawfulness of the processing that took place prior to such withdrawal.

9. Cookies: The Website uses cookies to improve the browsing experience, analyze traffic, and ensure the proper functioning of services. The user may configure their browser to accept or reject cookies; however, disabling them may affect the functionality of the Website.

10. Policy Changes: The Website reserves the right to modify this Privacy Policy at any time without notice. Changes take effect upon their publication on the Website, and the user is responsible for regularly reviewing the content of the Policy.

11. Contact: For any questions regarding this Policy or the processing of personal data, the user may contact us using the contact information listed on the contact page, which can be found by clicking here.