Terms of Use

WEBSITE TERMS OF USE / PERSONAL DATA STATEMENT

Thank you for your interest in our website. We would like to inform you that we take the protection and security of your personal data very seriously. For the use of our website it is not necessary to collect personal data. However, if you want to use the services offered by our website, the collection of personal data may be necessary. In case the processing of personal data is necessary and there is no relevant provision, we always ask for your consent before the processing of your personal data.

COPYRIGHT

Apart from the expressly stated exceptions (copyrights of third parties, partners and entities), the contents of the website www.discovercrete.com are protected by copyright. Except for downloads offered on our website for use by third parties, the use of texts and images, even in excerpts, without the prior written consent of OnMedia Digital S.A. violates the provisions of copyright law and therefore is illegal.

This applies to all rights of exploitation, such as reproduction, translation, transmission, or use. In our website you will also find registered trademarks, trade names and logos, which are the intellectual and industrial property of the respective entities. And for the use of these, apply the corresponding legislative provisions.

OnMedia Digital S.A. as data controller takes many technical and organizational measures in order to ensure the fullest possible protection for the personal data processed through this website. However, the transmission of data over the Internet may generally have security gaps, so that its absolute protection cannot be guaranteed. For this reason, each data subject is free to transmit personal data to us by alternative means, for example by telephone.

DEFINITIONS

This privacy statement is based on the concepts used by the EU General Data Protection Regulation (GDPR). Our data protection statement should be easy to read and understand by the public, our users and our business partners. To ensure this, we would like to explain in advance the terms used in it.

Among others we use the following terms:

‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person

‘processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction

‘Restriction of processing’ means the marking of stored personal data with the aim of limiting their processing in the future

‘profiling’ means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements

‘pseudonymisation’ means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person;

‘controller’ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;

‘processor’ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;

‘recipient’ means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. ²However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing;

‘Third party’ means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data;

‘consent’ of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;

NAME AND ADDRESS OF THE PROCESSOR

OnMedia Digital S.A, 91 Dimokratis Avenue, Heraklion Crete, Postal Code 71306, dataprotection@ discovercrete.com.

NAME AND ADDRESS OF THE PERSONAL DATA PROTECTION OFFICER

…..

Any data subject may contact our data protection officer directly at any time with any questions or suggestions regarding data protection.

INDEPENDENT AUTHORITY FOR THE PROTECTION OF PERSONAL DATA

Personal Data Protection Authority, Kifisias 1-3, P.O. 115 23, Athens, Phone: 210 6475600, E-mail: contact@dpa.gr

WHEN YOU VISIT OUR WEBSITE

When you visit our website the browser you use on your device automatically sends information to our website server. This information is temporarily stored in a so-called log file. The following information is collected and stored there without your intervention until it is automatically deleted:

• IP address of your computer,
• Date and time of access,
• The name and URL of the downloaded file,
• Website from which the access is made (URL address),
• The browser you use and, where applicable, your computer's operating system and the name of your access provider.

This data is processed by us for the following purposes:

• To ensure a smooth connection to our website,
• To ensure the comfortable use of our website,
• To evaluate the security and stability of our system and
• For further organizational purposes.

The legal basis for data processing is Article 6 para. 1 f GDPR. Our legitimate interest derives from the data collection purposes listed above. Under no circumstances do we use the data we have collected to draw conclusions about your person.

In addition, we use cookies and analysis services when you visit our website.

COOKIES

To ensure the proper functioning of the website, we place small files on your computer, so-called "cookies". Cookies are small text files that a website stores on your computer or mobile device when you visit it. Cookies do not harm your device, do not contain viruses or other malware.

Cookies store information linked to the specific terminal you are using. However, this does not mean that we know your identity.

Cookies serve to make the use of our online offer more pleasant. For example, we use so-called "session cookies" to recognize that you have already visited individual pages on our website. These cookies are automatically deleted after you leave our page.

In addition, to improve user-friendliness, we use "temporary cookies" that are stored on your device for a certain period of time. When you visit our website again, it will automatically recognize that you have already been with us and what settings you have made, so you do not need to enter them again.

In addition, we use cookies to statistically record the use of our website and to evaluate it in order to optimize our offer. These cookies allow us to automatically recognize when you visit our website again that you have already been with us. These cookies are automatically deleted after a specified time.

The data processed by cookies are necessary - in accordance with article 6 par. 1f GDPR - to protect our legitimate interests and those of third parties.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or that a hint is always displayed before a new cookie is created. However, disabling cookies may has as consequence that you cannot use all the functions of our website.

REGISTER ON WEBSITE www.discovercrete.com

You can use the www.discovercrete.com website services in two different ways. On the one hand, you can be referred to partners on our website to prepare your trip. On the other hand, you can upload your travel experiences to our website and share them with other users. To prepare the trip with the assistance of www.discovercrete.com the registration and providing information during registration is mandatory. No registration is required to find existing trips and book parts of a trip with booking partners. However, if you want to rate or comment on a trip, you also need registration.

The data transmitted during the registration are used exclusively for the purposes of using the respective service. Mandatory information requested during the registration must be provided in full. Otherwise, we will reject the registration.

In case of significant changes, for example for technical reasons, we will inform you by email. The email will be sent to the address provided during the registration.

The data entered during registration is processed based on your consent (Article 6 Par. 1a GDPR). You can withdraw the consent you have given at any time. An informal email notification to …… is sufficient for revocation. The lawfulness of data processing that has already taken place remains unaffected by the withdrawal of consent.

We store the data collected during registration for the period you are registered on our website. If you cancel your registration, your personal data will be deleted. Statutory personal data retention periods remain unaffected.

When a user uploads a contribution (which may consist of text, sound, photography and/or contain audio-visual elements), the user declares that he owns the intellectual property rights, that he assigns them under this agreement to our website.

By submitting his contribution to this section, the user agrees to the content of the following clauses:

- The site decides on the suitability of the contribution for publication purposes and may technically adjust it, split it, and adapt it to the ideal format for publication.

- Contributions that violate the following principles are not allowed: right to honor, privacy of individuals and families, reputation, respect for the dignity of the individual, non-discrimination based on race, sex, religion, opinion, nationality, disability and other personal or social conditions as well as other principles which may be violated.

- The user declares and assures that he is responsible for compensation, if the following statements do not correspond to the truth:

• that his are over 18;
• that his personal information is true and verifiable.
• that he is the author of the original contribution he submitted and that he has not copied it from third parties or misappropriated it.
• that the submitted photos or audio or video contributions contain images of individuals that they were created with their consent, that they are adults and that they agree with the mission and its outcomes.

SUBSCRIBTION TO OUR NEWSLETTER

On our website, you are given the opportunity to subscribe to our newsletter. The personal data transmitted to the controller when ordering the newsletter is determined by the input mask used for this purpose.

Our website regularly informs its users and business partners about our news and offers through a newsletter. Our newsletter can only be received by the data subject if (1) the data subject has a valid email address and (2) the data subject registers to receive the newsletter. For legal reasons, an email will be sent as confirmation using the double opt-in process to the email address entered by the data subject for the first time to receive the newsletter. This confirmation e-mail is used to check whether the owner of the e-mail address as a personal data subject has authorized the receipt of the newsletter. If the link is not confirmed within … days, the affected data will be deleted after this period expires.

When you subscribe to the newsletter, we store the IP address assigned by the Internet Service Provider (ISP) of the computer system used by the data subject at the time of subscription, as well as the date and time of subscription. The collection of this data is necessary to be able to understand the (possible) misuse of the e-mail address at a later point in time and therefore serves to provide legal protection to the person responsible for the processing.

The personal data collected during the subscription to the newsletter have as a legal basis Article 6 Par. 1a GDPR and are used exclusively for sending our newsletter. Personal data collected as part of the newsletter service will not be passed on to third parties. The data subject can unsubscribe from our newsletter at any time. The consent to the storage of personal data given to us by the data subject for sending the newsletter can be revoked at any time. To withdraw your consent, there is a corresponding link in each newsletter. It is also possible to unsubscribe from the newsletter at any time by sending an email to ………. citing the email address, you entered.

COMMUNICATION THROUGH THE WEBSITE

Our website contains information that allows quick electronic contact and direct communication with us, which also includes a general address for the so-called electronic mail (e-mail address). If you contact the controller by email or via a contact form, the personal data transmitted by you will be automatically stored. Such personal data transmitted on a voluntary basis by a data subject to the controller will be stored for the purposes of processing or communication with the data subject. This personal data will not be passed on to third parties.

REGULAR DELETION AND BLOCKING OF PERSONAL DATA

The controller processes and stores personal data only for the period necessary to achieve the purpose of storage or if this is required by the European legislator or other legislator in laws or regulations to which the controller is subject.

If the purpose of storage no longer applies or if the storage period specified by the European legislator or other relevant legislator expires, personal data will be blocked or deleted in accordance with legal regulations.

RIGHTS OF PERSONAL DATA SUBJECTS

You have the right:

• in accordance with Article 15 GDPR, to request information about your personal data that we process. You have the right to request to provide you with information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been disclosed or the planned storage time, the existence of a right to rectification, erasure or restriction of processing or opposition to processing thereof.
• in accordance with Article 16 GDPR, to request the immediate correction of your incorrect personal data that we have stored.
• according to art. 17 GDPR to demand from us the deletion of stored personal data, unless the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest or for the establishment, exercise or support of a right before court.
• according to art. 18 GDPR to restrict the processing of your personal data when it is not accurate, the processing is unlawful, the processing is no longer necessary, but it is required for the establishment, exercise, or support of legal claims, or you have objected to the processing in accordance with Article 21 para. 1 GDPR.
• in accordance with Article 20 GDPR, receive your personal data provided to us in a structured, common, and machine-readable format or request their transfer to other controllers.
• in accordance with Article 7 para. 3 GDPR, withdraw your consent to the processing of your data. As a result, we will not be allowed to continue processing data based on this consent in the future
• in accordance with article 77 GDPR to file a complaint with a supervisory authority. You can contact the national supervisory authority.

RIGHT TO OBJECT

If the processing of your personal data is necessary for the purposes of legitimate interests in accordance with Article 6 para. 1 f GDPR, you have the right to object to such processing in accordance with Article 21 GDPR, if there are reasons from your particular situation or that the objection is against marketing. In the latter case, you have a general right to object, which is applied by us without any obligation to specify any situation.

If you wish to exercise your right of withdrawal or objection, please send an email to ………

AUTOMATED DECISIONS IN INDIVIDUAL CASES, INCLUDING PROFILE CREATION

Any person affected by the processing of personal data has the right granted by the European legislator not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects concerning him or her in a similar significant way, provided that the decision (1) is not necessary for the conclusion or performance of a contract between the data subject and the controller, or (2) is authorized by the law of the Union or the Member State to which the controller is subject and that the legislation provides for measures to safeguard the rights and freedoms as well as the legitimate interests of the data subject or (3) is carried out with the express consent of the data subject.

If the decision (1) is necessary for the conclusion or performance of a contract between the data subject and the controller or (2) is based on the express consent of the data subject, the controller shall take appropriate measures to ensure the rights and liberties and the legitimate interests of the data subject, which includes at least the right to human intervention on the part of the controller, to express his own opinion and challenge the decision.

If the data subject wishes to assert rights regarding automated decisions, he or she may contact an employee of the data controller at any time.

ANALYSIS TOOLS

a) Tracking-Tools

The tracking tools listed below and used by us are based on Article 6 paragraph 1 f GDPR. With Tracking-Tools, we want to ensure a design based on the needs of our website and its continuous optimization. We also use tracking tools to statistically record the use of our website and evaluate it in order to optimize our offer for you. These interests must be considered justified within the meaning of the mentioned provision.

The purposes of data processing and the categories of data processed are shown in the Tracking-Tools.

aa) Google Analytics

Google Analytics is a web analysis service provided by Google Inc. (https://www.google.com, Amphitheater Parkway, Mountain View, CA 94043, USA, hereinafter "Google"). We use it to adjust and continuously optimize our pages. In this context, pseudonymous user profiles are created, and cookies are used. Information generated by cookies about your use of this website, such as:

• Browser type / version,
• operating system used,
• Referrer URL (the page you visited previously)
• Host of the computer (IP address)

are transmitted to a Google server in the USA and stored there. This information is used to evaluate website usage, to compile reports on website activity, to provide other services related to website activity and internet usage for market research and website design purposes. This information may be disclosed to third parties if required by law or if third parties process this data. Under no circumstances will your IP address be linked to other data held by Google. The IP addresses are anonymous, so that an assignment to a natural or legal person is not possible (IP masking).

You can prevent the installation of cookies by setting your browser software accordingly. However, we point out that in this case it is not possible to make full use of all the features of this website.

You can also prevent the collection of data generated by cookies and related to the use of the website (including the IP address) and the processing of this data by Google by downloading and installing a browser plug-in (https: //tools. google.com/dlpage/gaoptout?hl=en). For more information on privacy related to Google Analytics, see the Google Analytics Help Center: https://support.google.com/analytics/?hl=en#topic=3544906

ab) Google Adwords Conversion Tracking

To statistically record the use of our website and evaluate it for the purpose of its optimization, we also use Google Adwords Conversion Tracking. Google Adwords places a cookie on your computer if you have reached our website via a Google advertisement.

These cookies expire after 30 days and are not used for personal identification. If the user visits certain pages of the Adwords client's website and the cookie has not yet expired, Google and the client can recognize that the user has visited this advertisement and been redirected to this page.

Each Adwords customer receives a different cookie. Cookies cannot be tracked through the websites of Adwords customers. The information collected using the "Conversion-cookie" is used to create statistics for Adwords customers who have chosen to use Conversion-Tracking. Adwords customers are informed of the total number of users who visited their ad and were redirected to a page containing a Conversion-Tracking-Tag. However, they do not receive information by which users could be personally identified.

If you do not want to participate in the Tracking process, you can refuse the placement of the cookie - for example, through a browser setting that generally disables the automatic setting of cookies. You can also disable cookies for Conversion Tracking by setting your browser to block cookies from Domain: www.googleadservices.com. See Google's privacy policy regarding Conversion Tracking at https://services.google.com/sitestats/en.html

SOCIAL MEDIA PLUG-INS

On our website we place – according to article 6 par. 1 f GDPR - Social Plug-ins from the Facebook/Meta social network, to make our website more popular. This commercial purpose must be considered as legitimate interest under the provision of the GDPR. The responsibility for this data protection-compliant operation must be ensured by the corresponding providers. The integration of plug-ins by us is done via the so-called "double-click" method for the best possible way of protecting the visitors of our website.

a) Meta/Facebook

On our website, Meta plugins are used to personalize their use. That's why we use the "LIKE" or "SHARE" button. This is an offer from Meta.

If you visit a page of our website that contains such a plugin, your browser establishes a direct connection to Meta's servers. The content of the plugins is transferred by Meta directly to your browser and integrated by it into our website.

By integrating the plugins, Meta receives the information that your browser has access to on the corresponding page of our website, even if you do not have a Facebook account or are not logged in to Facebook. This information (including your IP address) is transmitted from your browser directly to a Meta server in the USA and stored there.

If you log in with Facebook, Facebook can link the visit to our website directly to your Facebook account. If you interact with the plugins, for example by pressing the "LIKE" or "SHARE" button, the corresponding information is transmitted directly to a Meta server and stored there. The information will also be published on Facebook and shown to your Facebook friends.

Meta may use this information for purposes of advertising, market research and personalized Facebook pages. For this purpose, Meta creates user profiles, based on interests, relationships, etc., to evaluate for example the use of our website in relation to the advertisements displayed on Meta/Facebook, to inform other Facebook users about the activities you on our website and to provide other services related to the use of Meta/Facebook.

If you do not want Meta to connect  the data collected through our website with your Facebook account, you must log out of Facebook before visiting our website.

For the purpose and scope of data collection and the further processing and use of the data by Meta, as well as the related rights and settings regarding the protection of your privacy, please see the privacy policy (https://www.facebook.com /about/privacy/) of Meta.

b) X

Our website integrates plugins of the short message network of X Inc.. X-plugins can be identified by the X logo on our website. An overview of the X buttons can be found here: https://about......com/resourc....

When you visit a page of our website that contains such a plugin, a direct connection is established between your browser and the X server. X receives the information that you have visited our website with your IP address. If you press the button "…." of X, while you are logged into your X account, you can link the contents of our pages to your X profile. This allows X to associate your visit to our pages with your user account. We point out that as providers of our websites we are not aware of the content of the transferred data and its use by X.

If you do not want X to associate your visit to our pages, log out of your X account.

More information can be found in X's privacy policy (https://......com/privacy).

c) Instagram

Our website uses plugins of the social network Instagram, of the company Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, United States of America ("Instagram").

The plugins are marked with the Instagram logo, for example in the form of an Instagram camera.

When you visit a page of our website that contains such a plugin, your browser connects directly to Instagram's servers. The content of the plugins is transmitted by Instagram directly to your browser and integrated into our page. Through this integration, Instagram receives the information that your browser has accessed on the corresponding page of our website, even if you do not have an Instagram profile or are not logged in to Instagram.

This information (including IP address) is sent from the browser directly to an Instagram server in the USA. and stored there. If you are logged in to Instagram, Instagram can directly associate your visit to our website with your Instagram account. If you interact with the plugins, for example by pressing the "Instagram" button, this information is transmitted directly to an Instagram server and stored there.

The information will be registered in your Instagram account and will appear there to your contacts.

If you do not want the information collected through our website to be directly linked to your Instagram account, you should log out of Instagram before visiting our website.

For more information, see Instagram's privacy policy (https://help.instagram.com/155833707900388).

YOUTUBE CHANNEL

We maintain our own page on the YouTube portal, a so-called YouTube channel. The operator of the respective plug-ins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit a page with the YouTube plugin, a connection to YouTube servers is established. This tells YouTube which pages you visit. If you are signed into your YouTube account, YouTube can track your behavior on YouTube. You can prevent this by logging out of your YouTube account beforehand.

When a YouTube video is started, the provider uses cookies that collect information about the behavior of its users.

Anyone who has disabled the storage of cookies for the Google Ad program will not have cookies about them collected when watching videos on YouTube. However, YouTube stores non-personal usage information in other cookies. If you want to prevent this, you must block the storage of cookies in the browser.

More information about data protection on "Youtube" can be found in the data protection declaration of the provider at: https://www.google.de/intl/de/policies/privacy/

CHANNEL ON TikTok

We maintain our own page on the TikTok portal. The operator of the respective plugins is TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. When you visit a page with the TikTok plugin, a connection is made to TikTok's servers. When you start a TikTok video, the provider uses cookies that collect information about the behavior of its users (information you provide, e.g. information about your profile, contacts) and technical information (e.g. your operating system , the IP address and the language of the system).

More information about data protection on TikTok can be found in the provider's data protection statement at: https://www.tiktok.com/legal/page/eea/privacy-policy/en.

PARTNER OFFERS

On our website, you will find services/offers from other providers - mainly via links - which are integrated there. We cannot rule out the possibility of using cookies when using these online services. We have no influence on this. For information about the use of such cookies and the collection and processing of data by these providers, please refer to their privacy policy.

UPDATE AND CHANGE OF PRIVACY POLICY

This temporary data privacy policy is effective from …….

As a result of further development of our website or due to changes in legal or official requirements, our privacy policy may change. If you have subscribed to any of our products or services, we will notify you through the means of communication you have provided. Changes to our Statement are effective upon posting the revised Statement on the website. Your use of the Site, any of our products and services, and/or consent to the updated Statement following such changes constitutes your acceptance of the revised Statement.