Privacy Notice | The Ellinikon Experience Park

Welcome to the website www.experiencepark.theellinikon.com.gr (hereinafter the “Website”).

The website has been developed by the company “HELLINIKON S.M.S.A.”, a société anonyme duly incorporated and existing under the laws of Greece (with VAT Nr. 997674736 and General Commercial Number 115936901000), with its registered office at 37A Kifissias Avenue, 15123, in Athens Greece (hereinafter referred to as the “Company”), in order to provide information and services to the website’s users/visitors (hereinafter “Users”).

The Company is the Data Controller of your personal data, collected through the Website, pursuant to EU General Data Protection Regulation 679/2016 (hereinafter “GDPR”) and L. 4624/2019. This Privacy Notice is provided in order to inform you on the personal data collected, to explain the way and purpose of data processing, to state any third parties with whom we share your data and finally to inform you on your rights.

Personal data we collect

Personal data we collect and further process during your visit to the Website, are the following:

Technical information, such as IP address, date and time of visit, type of browser and operating system, device model, and other information collected through cookies and similar technologies, which are relevant to the analysis of your visit to the Website. For more information regarding data that are collected through cookies and similar technologies, visit the relevant section Cookies Policy.
If you subscribe to our newsletter, we retain your first name, last name and your e-mail address, on the basis of your consent. In any case, you retain the right to withdraw your consent at any time by choosing “unsubscribe” at the email that you receive from “the Company”.
If you wish to make a reservation at the Experience Park for the organization of events (e.g. children’s party) or for your registration in a class or an event (e.g. Yoga sessions), we collect data such as name, surname, email address and mobile phone number.
If you wish to contact us regarding general information, we collect data, such as your name, email and mobile phone.
If you wish to contact us regarding retail information, we collect data, such as your first name, last name, position/title, email, telephone number, mobile phone number.
If you wish to contact us regarding residential information, we collect data, such as your title, first name, last name, email, phone number, country of residence.

Why do we process your personal data?

Within the context of the Website’s use, the Company processes your data according to the following purposes and legal bases:

Α. Legitimate Interest

In the aim of ensuring and fulfilling the Company’s legitimate interests, the aforementioned processes your personal data mentioned above, in order to ensure the uninterrupted, proper and secure operation of our Website, maintain backup copies and safeguard business continuity issues.

It is also in our legitimate interest to manage any communication we receive from you in general, so that we respond to your inquiries regarding general, retail or residential information.

Β. Consent

In case you wish to receive newsletter from us, following your consent through the specific area on the Website, you may subscribe at the relevant service, so we will process the first name, last name and email address you provided us with for informative and promotional purposes. You have the ability to withdraw your consent at any time, by choosing “unsubscribe” at every communication.

Furthermore, provided that you give your consent for the use of technologies such as cookies and the local storage area of your device, your data will be stored automatically, according to the Cookies Policy of the Website, for analysis, personalization or/and advertising purposes. You may change your option regarding cookies at any time and withdraw your consent, through the Cookies Policy of your Website.

Contract

In case you wish to make a reservation at the Experience Park for the organization of an event or for your registration in an event, the Company processes your personal data within the performance of the contract or in the context of pre-contractual obligations prior to the conclusion of the contract.

With whom do you share your personal data?

Personal data we collect and further process during your visit to the Website, are the following:

Website support and management companies.
Social Media Coordinators and advertising companies.
Companies that commit to Data Protection Officer duties.
Other companies of the Group with which we collaborate for the fulfillment of the aforementioned purposes.
Any other administrative, judicial, or public authority or in general to a natural or legal person against which, on the basis of law or judicial decision the Company has a relevant obligation or right to disclose such data or in general, in order to defend our legitimate interests.

The Company has implemented all necessary measures, in order for the personnel and its partners to be specifically authorized for these purposes and fully committed to confidentiality and legal obligations under the legislation for the collection and further processing of the aforementioned personal data.

How does your Company protect your personal data?

We have implemented all appropriate organizational and technical measures, pursuant to the applicable legal framework and technical standards, in order to safeguard that processing of data is legitimate, appropriate and secured against any non-authorized or illegal access, deletion, amendment or any other use of the data.

How long we retain your personal data?

Your personal data are retained for as long as this is required for the fulfillment of each processing purpose. Upon expiration of these terms, your personal data will be deleted, unless otherwise required under the applicable legal and regulatory framework or for the establishment, exercise or defense of legal claims.

Your rights

In any case, we would like to inform you that, according to applicable legislation, you may exercise the following rights, after verification of your identity:

Right of access to your personal data, including information concerning the processing of personal data,
Right to rectification of inaccurate or incomplete personal data,
Right to erasure (“right to be forgotten”),
Right to restriction of the processing, according to law provisions,
Right to data portability, in a structured, commonly used and machine-readable format (e.g. USB), to you or to another data controller,
Right to object to the processing based on the Company’s legitimate interests, and
Right to withdraw your consent directly and freely, as described above.

You can exercise any of the above mentioned rights by submitting a written request to our Company. You can expect a reply to such a request within one (1) month following its receipt by the Company and in any case, within two (2) months, depending on the perplexity of your request or the high volume of requests received.

Furthermore, our Company is responsible for informing you, without undue delay, for any breach concerning your personal data, which may put in danger your rights and freedoms and under the condition that it doesn’t fall under the exceptions provided in the law.

Contact details

You may address any questions or requests regarding the protection of your personal data within the context of the Website’s performance, at TheEllinikon.PersonalData@lamdadev.com.

Right to lodge a complaint

In case you deem that we have not duly satisfied your request and the protection of your personal data is somehow affected, you may lodge a complaint through the dedicated online portal of the Hellenic Data Protection Authority (Athens, 1-3 Kifissias Avenue, 11523 Athens, Greece | +30 210 6475600). You may find detailed guidelines on how to lodge a complaint on the DPA’s website.

What happens with third party websites?

The Website provides access to third party websites through appropriate hyperlinks (links). These links are intended solely for the convenience of Users of the Website, and the websites to which they refer are subject to the respective terms of use and Privacy Policies. The display of the links is not a sign of approval or acceptance of the content of the respective websites by the webmaster, who does not bear any responsibility for their content as well as for the privacy practices or the accuracy of the website material. The Company has no control over the websites held by third parties or their content, which is accessed or made available through this Website and, therefore, the Company does not endorse, sponsor, or otherwise accept any responsibility for such websites or their content. The User bears full responsibility for browsing any third party websites through the links provided in the Website.

You may find more information regarding the collection of cookies at the Cookies Policy.

CCTV Monitoring Privacy Notice

The company “HELLINIKON S.MS.A.” (hereinafter “Company”) is the Data Controller of your personal data, pursuant to EU General Data Protection Regulation 679/2016 (hereinafter “GDPR”) and Greek Law 4624/2019. This Privacy Notice is provided in order to inform you on the image and video data collected via CCTV monitoring at the Park and the Parking area.

Personal data we process

The Company collects image and video data of visitors and employees of the Park and the Parking area via the CCTV Monitoring System.

Purposes and legal basis of processing

The Company uses the CCTV Monitoring System for the protection of people and assets in the Park and the Parking area. The processing is necessary in the context of the legitimate interest of the Company that acts as a Data Controller (article 6 par. 1 (f) GDPR).

Analysis of legitimate interest

The legitimate interest of the Company consists of the necessity of the latter to protect its premises and its assets from illegal actions. Moreover, the Company aims to protect life, physical integrity, health and property of our personnel and third parties that are legally in the Park and the Parking area. We only collect image and video data from areas, where there is an increased possibility of illegal actions (for example crimes against persons or crimes against property), or actions that may put in danger the security of persons and property (for example non authorized entry at working areas or areas, where, in general, dangerous work takes place). The entrance of the Park, the Parking area, as well as the perimeter of the Park and the Parking area are considered as such places. Consequently, we do not monitor areas where your privacy would be excessively violated.

Recipients of your personal data

The CCTV footage is accessible by authorized personnel of the Company that provides security services, as well as third parties, to which your data may be disclosed, for the fulfillment of the aforementioned purposes, such as:

The security company of HELLINIKON S.M.S.A.
Companies that commit to Data Protection Officer duties.
Other legal entities of our Group that collaborate with us for the purposes described above.
Insurance companies / insurance intermediaries.
Competent judicial and law enforcement authorities, when they submit a request for data within the context of the exercise of their duties or when the footage provides evidence that is necessary for the investigation of an illegal action.
The victim or the perpetrator of an illegal action, when data may constitute evidence of proof.

How does the Company protect your personal data?

Our Company has implemented all appropriate organizational and technical measures, pursuant to applicable legal framework and standards in order to safeguard that processing of data, either by the Company or by any third party is legitimate, appropriate and secured against any non-authorized or illegal access, deletion, amendment or any other use of the data.

How long is your personal data retained?

The CCTV footage is retained for fifteen (15) days. Upon the expiration of this period, the data is automatically deleted. In case we realize that an incident has occurred within this period, we shall proceed with the separate storage of this part of the video and it will be stored for one (1) month, in order for the Company to further investigate the incident and the initiation of any legal actions to ensure the legitimate interests of the Company. In case the incident refers to third persons, the footage will be retained for three (3) additional months.

What are your rights?

According to applicable legislation, you have the following rights:

Right of access: you have the right to be informed about the processing of your data and if this is the case to receive a copy of your data.
Right to restriction of the processing of your personal data: you have the right to request the restriction of processing. For example, you have the right to request from the Company not to delete data that you consider necessary for the establishment, exercise or defence of legal claims.
Right to erasure: you have the right to request the deletion of your data.
Right to object: you have the right to object to the processing of your data.

You may exercise the aforementioned rights by submitting a request to our Company and we will reply within one (1) month upon receipt of the request. This deadline might be extended for two (2) additional months, in case your requests are excessive or complicated. Additionally, the Company shall inform you without any delay on any breach of your personal data, unless such breach falls within one of the exceptions, provided by law.

What is the contact person for any issues/requests?

For any queries, clarifications of requests with regards to your personal data protection, you may contact our email TheEllinikon.PersonalData@lamdadev.com.

Lodge a Complaint

Information on CCTV System

The Company has installed cameras that do not record sound, at places that are crucial for the surveillance of areas, where serious incidents may occur, such as thefts, accidents and other incidents that may put the health of employees and visitors, as well as the property of the Park and the Parking area at risk.