This Policy applies to the following companies: Aphrodite Hills Resort LTD, Property Management LTD, Services LTD, Tennis and SPA LTD hereinafter collectively referred to as “Aphrodite Hills” or “AH” as data controller of the personal data collected from this website.
2 Personal Data Collection and Use
Aphrodite Hills has designed a standard website contact form to initiate communication with any interested individual. This form is used for any inquiries or requests and it directs them to the appropriate division or staff member. Additionally, we provide Aphrodite Hills phone numbers for a more direct contact if required. Our landline phone calls are recorded for training and monitoring purposes, and our recordings are usually held for six months. In order to handle and address your inquiries and requests we might collect and store your name, email, telephone number and any other information you might choose to share with us. That information is strictly used to adequately respond to your inquiries or requests and will not be disclosed to third parties others than those mentioned in this policy or where disclosure is required or permitted by law.
Aphrodite Hills has designed other services through the website such as requesting information on buying or renting properties in Aphrodite Hills resort area, to check the availability of residences, using golf, tennis, spa activities, wedding planning, book a table at the restaurant and dining services. For these purposes, Aphrodite Hills needs to receive your name, email address, phone number, country, the special offer you prefer and anything else you choose to share with us.
Aphrodite Hills also offers the ability to book a room in the “The Aphrodite Hills Hotel” through the website of Atlantica Hotel Management Limited (hereinafter referred to as “Atlantica”). If you choose to proceed with a booking reservation then you will be automatically redirected to the website of Atlantica who will be the controller of your personal data and therefore will be responsible to inform you respectively.
In case Aphrodite Hills and all the affiliates decide to use your personal data for different purposes than those described in this policy, e.g. marketing purposes (news, events, activities, new products and services offered by them, advertising campaigns and/or promotional activities) you will be informed and asked for your consent. In any case that a user of the service may wish to withdraw consent, we offer the ability through the emails that we send or by contacting our DPO. In such cases we also permanently delete the email address from our database.
For processing to be lawful under the General Data Protection Regulation (GDPR), we identify a lawful basis before we can process your personal data. In case you were directed to agree with this policy, the legal basis for the data processing effected by us is the granting of your explicit consent to the processing, by submitting the consent form only in case you agree with this policy.
3 Transfer of Personal Data
Aphrodite Hills may disclose Personal Data collected to our suppliers or subcontractors insofar as reasonably necessary for dealing with your inquiries or requests. Such transfers will be protected by appropriate safeguards (e.g. appropriate contractual clauses, data processing contracts, intra-group disclosures of personal data, etc.). In addition, we may disclose Personal Data where such disclosure is necessary for compliance with a legal obligation to which we are subject. In any case that we might need to transfer personal data at third parties, Aphrodite Hills is committed to ask for your consent if we will not recognize any other legal basis.
Our website is not intended for children and we do not intentionally solicit or collect personal data from individuals under the age of 18. If we are notified or otherwise discover that a minor’s personal information has been improperly collected, we will take all commercially reasonable steps to delete that information.
In limited instances, we may have a campaign or program targeted towards children. In these instances, details on the information practices will be presented within the terms and conditions of the program or campaign.
5 Personal Data Retention and Deletion
Aphrodite Hills is committed not to retain personal data for a longer period than it is necessary regarding the reasons that the personal data was obtained and we will make sure we will delete it securely. For additional information on retention and deletion periods, please refer to Our Details section.
6 Rights of Data Subjects
In this section Aphrodite Hills addresses the rights deriving from Regulation (EU) 2016/679 and how these rights can be accessed from the Data Subjects. For any further clarifications please refer to Our Details section
7 Individual’s Right of Access or Rectification
Aphrodite Hills assumes that Personal Data collected directly from the individual will be accurate and complete. Individuals can access and update their own Personal Data using the Data Subject Request Form.
8 Individual’s Right to Erasure
The data subject may request that any information held on them is deleted or removed, and any third parties who process or use that data must also comply with the request. An erasure request can only be refused if an exemption applies. The Right to Erasure can be requested using the Data Subject Request Form.
Aphrodite Hills is obligated to erase personal data where one of the following applies:
If the request to erase Personal Data has been received, identity has been confirmed, the request meets one of the above requirements and there is no legal contrary reason for processing, Aphrodite Hills must delete the relevant data in its entirety. The request shall be recorded in the Data Subject Request Log.
If Aphrodite Hills cannot actually delete personal data, Aphrodite Hills will ensure that:
9 Individual’s Right to Restrict Processing
The data subject has the right to obtain from the controller restriction of processing using the Data Subject Request Form.
10 Individual’s Right to Object
Individuals have the right to object at any time to processing of their personal data using the Data Subject Request Form.
11 Individual’s Right to Data Portability
Upon request and provided that the relevant requirements stipulated in Article 20 of GDPR are met, a data subject should have the right to receive a copy of their Personal Data in a structured format using the Data Subject Request Form.
These requests should be processed within one month, provided there is no undue burden and it does not compromise the privacy of other individuals. A data subject may also request that their data is transferred directly to another system. This must be done for free.
If Aphrodite Hills cannot respond fully to the request within 30 days, the DPO shall nevertheless provide the following information to the Data Subject, or their authorized legal representative within the specified time:
13 Our Details
If you have any concerns, questions or complaints about this policy, then please contact us at: firstname.lastname@example.org
In case you have any concerns regarding the processing of your data by us such us violation of the applicable laws, you may file a complaint to the corresponding supervising authority. You can find the contact details for all EU Supervisory Authorities at: