Holiday Resorts in Paphos Cyprus
Privacy Policy
Last Modified: August 1,2024
The ‘ΑΛΙΑΘΩΝ ΤΟΥΡΙΣΤΙΚΕΣ ΕΠΙΧΕΙΡΗΣΕΙΣ ΛΙΜΙΤΕΔ’ values you as a guest and recognises that privacy is important to you. We are committed to safeguarding the privacy of our customers and website visitors.
Introduction
Personal Data is information that may identify you as an individual or relate to you as an identifiable individual (hereinafter “Personal Data”).
This policy refers to Personal Data, which is defined as information concerning any living person, natural person (hereinafter “Data Subject”) that is not already in the public domain.
The General Data Protection Regulation (GDPR) and other privacy regulations seek to protect and enhance the rights of Data Subjects. These rights cover the safeguarding of Personal Data, protection against the unlawful processing of Personal Data and the unrestricted movement of Personal Data.
Scope
This Privacy Policy describes the privacy practices for Data that we collect:
- through websites operated by us, from which you can access this Privacy Policy (collectively, our Website);
- through our social media pages that we control ;
- through email messages that we send you and through your communications with us online or in person;
- when you visit or stay as a guest at one of our properties.
The Data we Collect
At touch points throughout your guest journey, we collect Personal Data in accordance with the law, and to provide you with the requested services. We collect and process the following types of Personal Data:
General Identifying Information
Including full name, postal address, e-mail address, telephone number
Demographic Information and Important Dates
Including gender, language preferences, Country, Date of Birth, Nationality
Financial Information
Including credit, debit, or other payment data.
Government-Issued Identification
Including passport or other government-issued identification (and the Personal Data contained therein).
Loyalty Club
Information
Including loyalty programme data and information collected during the registration.
Travel Information
Including prior guest stays or interactions, goods and services purchased, special service and amenity requests, tour group information, activity data.
Claims Information
Including insurance information, emergency contacts, complaints.
In more limited circumstances, we may also collect:
• Data about family members and companions (including names, and ages of children);
• Images and videos data via security cameras located in public areas, such as entrance, hallways and lobbies, in our properties;
If you submit any Personal Data about other people to us or our Service Providers (e.g. if you make a reservation for another individual), you represent that you have the authority to do so and you permit us to use said data in accordance with this Privacy Policy.
Sources of Personal Data
We collect Personal Data in the following ways:
• Customer Care. We collect Personal Data when you make a reservation over the phone, communicate with us by email or fax, or contact customer service. These communications may be recorded for purposes of quality assurance and training.
• Online Services. We collect Personal when you interact with our Online Services, by performing such actions as, but not limited to, browsing, making a reservation, purchasing goods and services from our Websites communicating with us or otherwise connecting with us or posting to social media pages, or signing up for a newsletter or participating in a survey, contest, or promotional offer.
• Automated technologies or interactions. As explained in the section below on Cookies and Automatic Data Processing Technologies, we set cookies and other automatic techniques to process website activity data when you visit our Website.
• On-Property and/or Travel Providers. We may collect your Personal Data from spa, restaurant and other facilities at our properties.
• Other Sources & Service Providers. We collect Personal Data from various third parties, such financial service providers, online travel agencies and providers.
• Internet-Connected Devices. We collect Personal and Other Data from internet-connected devices available in our properties (e.g., when you connect a device to the hotel’s internet).
Purposes of Personal Data Processing
Aliathon Resort process Personal Data for the purposes described below.
• Booking & Guest Registration. Such as facilitating reservations and bookings of Aliathon Resort accommodations and related services; engaging in prearrival communications (logistics, changes, preferences, etc.); and processing payments.
• Analytics. Aliathon Resort process identifiers and website activity data to monitor aggregate metrics such as total number of visitors, demographic patterns, use of facilities.
• Marketing, Promotions, Contests. Such as communicating about products and services that may be of interest to guests; facilitating participation in contests and other promotions.
• Loyalty Programme, Accounts, & Relationship Management. Such as registering users in loyalty programme; determining eligibility for programme and related services; administering loyalty programme; providing consistent and personalised offers and services based on past usage and preferences expressed by members; processing payments.
• Communications and handling of requests. Such as Processing communication data and other information as necessary to respond to and resolve any of Data Subject requests, including where this is required to ensure compliance with our legal obligations.
• Compliance. Aliathon Resort may process any of the categories of data mentioned herein to enforce this Privacy Policy , Terms and Conditions and to comply with any legal obligations, namely but not limited to responding to Data Subject requests.
• Emergency & Incident Response. Such as providing for the security of on-site services; responding to, handling and documenting on-site accidents and medical and other emergencies; actively monitoring properties to ensure adequate incident prevention, response and documentation (including CCTV); requesting assistance from emergency services; and sending notifications and alerts in the event of incidents or emergencies (such as via SMS, email, call).
The legal basis for processing any Personal Data is to meet contractual obligations to our clients and to also respond to marketing enquiries. The legitimate interests pursued by Aliathon Resort include the promotion and marketing of the services offered by Aliathon Resort.
Cookies and Automatic Data Collection Technologies
A cookie is a small piece of data that, when browsing a website, will ask your browser to collect and store on your computer or internet-compatible end user devices, for example, smartphones and tablets (collectively “Computer”), in order to remember information about you, such as your language preference, online activity, or login credentials (collectively “cookies”).
First and Third-Party Cookies. The cookies set by us are called first party cookies. We also use third-party cookies, which are cookies from a domain different than our Website. Both types of cookies are text files made up of bits of information that websites use to collect your user data.
Session and Persistent Cookies. Cookies can be either session cookies or persistent cookies. A session cookie expires automatically when you quit your browser. A persistent cookie will be saved on your Computer until it expires, or until you delete your cookies. Each cookie has a different expiration date; some may expire after a few minutes while others after some years.
Essential Cookies
These cookies are necessary for the website to function and cannot be switched off in our systems as they enable core website functionality. They are used to carry out the transmission of a communication, provide you with the requested services or are set in response to actions made by you, such as setting your privacy preferences, or filling in forms. You can set your browser to block these cookies, but that may cause some parts of the Website to not work properly.
Functional Cookies
These cookies allow our website to remember your preferences and choices you make on them. As a result, we’re able to personalize your experience. For example this type of cookies allows us to recognize you when you return to the website and to remember your choice of language and your preferences such as your region.
Analytics Cookies
These cookies allow us to recognize and count the number of users and to see how you use and explore the website. For example, they allow us to carry out statistical analysis of page use, interactions, and paths you take through the website to improve its performance. We use Google as a service provider to collect and analyze information about how you use the website (see also the Google Analytics section).
Advertisement Cookies
Third party advertising cookies are cookies that are set by a website other than the one you are visiting at the time and are used for tracking and online advertising purposes.
You can use our cookie banner to accept all cookies or choose to accept only essential cookies. The cookie banner will record when and in which categories cookies you have consented to.
Google Analytics
We use Google as a service provider to collect and analyse information about how users use the Website, including by collecting website activity data through first-party cookies set by our domains, and third-party cookies set by Google. Google will anonymize the last octet of a particular IP address and will not store your full IP address. Google will use the information only to provide Google Analytics services to us and will not use this information for other purposes.
You can learn more on how Google uses data here. You can opt-out of Google Analytics by visiting the Google Analytics opt-out page or by accepting only essential cookies.
To view an overview of your Google Analytics cookie please go here:
https://support.google.com/analytics/answer/6004245.
Closed Circuit Television (CCTV)
We use closed circuit television and other security measures at our properties that may capture or record images of guests and visitors in public areas, as well as information related to your location while on our properties for the protection of our staff, guests and visitors to our properties, in accordance with applicable laws that require us to collect information that is used to protect guests, employees, and visitors of the property. We retain CCTV in accordance with our data retention policies, as necessary to fulfill the purpose for which that information was collected, or as required or permitted by law. You may be able to request access to CCTV images within the time specified by applicable law and as required by law.
Disclosure
We may share Personal Data and Other Data with the following:
Service Providers. We disclose Personal Data to third-party service providers including, for example, companies that provide website hosting, data analysis, payment processing, order fulfilment, information technology and related infrastructure provision, customer service, marketing, auditing, and other services.
Our contractors and/or employees. To provide our services, our employees and/or contractors may receive access to Personal Data only on a need-to-know basis. Such employees and contractors abide by confidentiality obligations.
Aliathon Resort requires these parties to agree to process this information based on our instructions and requirements consistent with this Privacy Policy and Privacy Regulations.
To comply with the law or protect our rights or the rights of third parties. We may disclose your Personal Data to meet legal obligations, regulations or valid governmental request. We may also enforce our Terms and Conditions, including investigating potential violations of our Terms and Conditions to detect, prevent or mitigate fraud or security or technical issues; or to protect against imminent harm to the rights, property or safety of Aliathon Resort, our clients and/or the wider community.
Retention Policy
We will process Personal Data during the duration of any contract and will continue to store only the Personal Data needed for five years after the contract has expired to meet any legal obligations. After five years any Personal Data not needed will be deleted. Data storage: Data is held in the USA and Cyprus. Aliathon Resort does not store Personal Data outside these areas.
Your Rights Related to Your Personal Data
Subject to local law and applicable legal requirements and exemptions, Data Subjects have certain rights regarding their Personal Data:
• Right of access: you have the right to receive information on the Personal Data we hold about you and how such Personal Data is used, as well as a copy of your Personal Data;
• Right to rectification: you have the right to rectify inaccurate Personal Data concerning you;
• Right to be forgotten: you have the right to delete/erase your Personal Data;
• Right to data portability: you have the right to receive the Personal Data provided by you in a structured, commonly used, and machine-readable format and to transmit this Personal Data to another organisation;
• Right to object: you have the right to object to the use of your Personal Data where such use is based on our legitimate interests or on public interests;
• Right to restriction of processing: where certain conditions apply you have a right to restrict the processing.
• Right to object to automated processing, including profiling : you have the right not to be subject to the legal effects of automated processing or profiling.
• Right to file a complaint: If you are in the EEA or the UK, you also have a right to file a complaint with your local data protection authority.
In the event that Aliathon Resort refuses your request under rights of access, we will provide you with a reason as to why, which you have the right to legally challenge.
If we ask for your consent to process your Personal Data, and you have the right to withdraw your consent at any time with effect for the future.
Prior to processing any Data Subject request, we will need to verify your identity and ensure your right to proceed with the related request. This is an appropriate and reasonable security measure to ensure that Personal Data is not disclosed to any person who has no right to receive it or deleted in an unauthorized way.
To access what Personal Data is held, identification will be required Aliathon Resort will accept the following forms of ID when information on your Personal Data is requested: a copy of your national ID card, driving license, passport, birth certificate and a utility bill not older than three months. A minimum of one piece of photographic ID listed above and a supporting document is required. If Aliathon Resort is dissatisfied with the quality, further information may be sought before Personal Data can be released.
Changes to Our Privacy Policy
We may modify or revise our Privacy Policy from time to time. We may attempt to notify you of any material changes as required by law. Please periodically review the most up-to-date version of our Privacy Policy, so you are aware of any changes. The date of the Privacy Policy can be found at the top of the page (“last modified”).
Contact Information
If you have any questions about this Privacy Policy or our information-handling practices, please contact us at reservations@aliathonresort.com .
You can exercise your rights by:
- Sending your request at reservations@aliathonresort.com
- phoning 00357 26964400.
- writing to us at the address below:
ALIATHON RESORT
P.O. BOX 62303, 8063
PAPHOS,CYPRUS
Our Data Protection Officer can be contacted at the following email address: