Privacy Policy

 

FOLLOWMETOGREECE

Privacy policy

__________________________________________________________

Followmetogreece is part of TDS Travel & Data Service GmbH

As the operator of this website, TDS Travel and Data Service GmbH (hereinafter: "We") is the responsible party for the personal data of the users (hereinafter: "You") of the website within the meaning of the German Federal Data Protection Act.

We protect your privacy and your private data. We collect, process and use your personal data in accordance with the content of this privacy policy and the applicable data protection laws as well as the Telemedia Act. We have taken technical and organisational measures to ensure that the regulations on data protection are observed by us.

These data protection regulations govern which personal data we collect, process and use about you. In the following, we inform you about which data we store, why we store it, how we use it and what right of revocation you have. We therefore ask you to read the following carefully.

In principle, you can use our online offer without disclosing your identity.

General notes

The following information provides a simple overview of what happens to your personal data when you visit our website.  We treat personal data that arises in the course of use or that you transmit to us with great care and only in accordance with the legal requirements. We have compiled all essential information on the protection of your data for you in this declaration.

If you have any further questions or comments about data protection or this statement, you can contact our data protection officer at any time by e-mail at info@followmetogreece.com or by post:

TDS Travel and Data Service GmbH

Müllerstrasse 47 80469 Munich

 

Data collection on our website

Who is responsible for the data collection on this website?

This data protection declaration applies to the use of all our Internet pages accessible under the domains www.followmetogreece.com www.tdsreisen.de or www.tdstravel.de, www.gotopelion.com, www.gotopilion.com (and all other domains owned by TDS Travel und Data Service GmbH). It concerns the collection, processing and use (hereinafter: "use") of your personal data (hereinafter: "data"). Personal data includes, for example, your name and address, your email and IP address, usage data attributable to you, etc.

The responsible body within the meaning of the data protection laws is TDS Travel and Data Service GmbH, Müllerstrasse 47 80469 Munich, Germany.

 

 How do we collect your data?

It is not necessary to provide personal data for purely visiting and researching our website. In this case, we do not collect any personal data from you.

Every time a user accesses Internet pages and every time a file is retrieved, certain data about this access inevitably accumulates for technical reasons, e.g. about the number and duration of visits to individual pages, and is stored on our server. This data is not personal. They are only evaluated statistically and used for the further development of our internet pages. Under certain circumstances, the IP address of your computer may be personal, which we either do not use or only use pseudonymously and in each case within the legally permissible scope.

If you send us a request for information or a travel reservation, on the other hand, we require various personal data from you in order to send you the requested information in the desired way.

What do we use your data for?

Part of the data is collected to ensure error-free provision of the website. Other data may be used to analyse your user behaviour. This includes information such as name, address, e-mail, age, postal address, telephone number, etc.

 We only use, process and store personal data if you provide it to us of your own accord or if it is required. This occurs in particular when booking a trip, filling out a form (e.g. contact form) or sending e-mails. Your data will be treated confidentially in accordance with data protection regulations.

 We only pass on the data that is necessary for us to fulfil our contractual obligations and for third parties to ensure a smooth process, in particular to process a concluded contract, or if their storage is required for other legal reasons. This means in particular the forwarding of the personal data required in each case for the travel or travel agency contract concluded with us to our service providers such as airlines, hotels, car rental agencies, destination agencies, travel insurance companies and the like. The data will only be used for the specified purpose and will only be stored for as long as is necessary for the intended purpose of the data collection or as long as is required by law. Data will not be passed on to third parties except for the purposes stated.

What rights do you have regarding your data?

You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the correction, blocking or deletion of this data. You can contact us at any time at the address given in the imprint for this purpose and for further questions on the subject of data protection. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

Third-party analysis tools and tools

When visiting our website, your surfing behaviour can be statistically evaluated. This is done primarily with cookies and so-called analysis programs. The analysis of your surfing behaviour is usually anonymous; the surfing behaviour cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. You will find detailed information on this in the following data protection declaration.

You can object to this analysis. We will inform you about the objection options in this data protection declaration.

Currently, TDS Travel and Data Service GmbH and Followmetogreece use the services of MAILERLITE for the delivery of email offers. MAILERLITE's use of your personal information is subject to MAILERLITE's Privacy Policy. https://www.mailerlite.com/privacy-policy

General notes and mandatory information

Your data protection

Followmetogreece - TDS Travel and Data Service GmbH takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you use this website, various personal data are collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that data transmission on the Internet (e.g. communication by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke your consent at any time. To do so, simply send an informal e-mail to info@followmetogreece.com. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right of appeal to the competent supervisory authority

In the event of violations of data protection law, the person concerned has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection issues is the state data protection commissioner of the federal state in which our company is based. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as enquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Information, blocking, deletion

Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipient and the purpose of the data processing and, if applicable, a right to correction, blocking or deletion of this data. For this purpose as well as for further questions on the subject of personal data, you can contact us at any time at TDS Travel and Data Service GmbH, Müllerstrasse 47 80469 Munich.

Objection to advertising e-mails

The use of contact data published within the scope of the imprint obligation to send advertising and information material that has not been expressly requested is hereby prohibited. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

Changes to this privacy policy

We reserve the right to change this privacy policy at any time with effect for the future. A current version is available on the website. Please visit the website regularly and inform yourself about the applicable data protection provisions. If you have registered on our website by e-mail, we will also inform you of any changes to the data protection provisions by e-mail.

Routine deletion and blocking of personal data

We, as the data controller, will only process and store your personal data for the period of time necessary to achieve the purpose for which it was collected or if this has been provided for by the European Directive and Regulation or other legislator in laws or regulations to which we, as the data controller, are subject.

If the purpose of storage no longer applies or if a storage period prescribed by the European Directive and Regulation or another competent legislator expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.

Rights of the data subject

* Right to confirmation

You have the right to request confirmation from us as to whether personal data relating to you is being processed. If you would like to make use of this right of confirmation, you can contact our data protection officer at any time.

* Right to information

You have the right to receive free information from us at any time about the personal data stored about you and a copy of this information. Furthermore, the European legislator has granted you the right of access to your personal data:

* the right to information...

o on the processing purposes

o on the categories of personal data processed

* the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations

* if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration

* about the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for you

* Access to all available information on the origin of the data

* if the personal data was not collected from you...

You also have the right to know whether personal data has been transferred to a third country or to an international organisation. If this is the case, you also have the right to obtain information about the appropriate safeguards in connection with the transfer.

If you would like to make use of this right to information, you can contact our data protection officer at any time.

* Right of rectification

You have the right to request that inaccurate personal data concerning you be corrected without delay. You also have the right to request that incomplete personal data be completed, including by means of a supplementary declaration, taking into account the purposes of the processing.

If you would like to make use of this right of correction, you can contact our data protection officer at any time.

* Right to erasure (The right to be forgotten)

You have the right to request that we delete the personal data concerning you without delay, provided that one of the following reasons applies and insofar as the processing is not necessary:

* The personal data were collected or otherwise processed for purposes for which they are no longer necessary.

* The data subject revokes the consent on which the processing was based pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR and there is no other legal basis for the processing.

* The data subject objects to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) of the GDPR.

* The personal data have been processed unlawfully.

* The deletion of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.

* The personal data was collected in relation to information society services offered pursuant to Art. 8(1) GDPR.

If one of the above reasons applies and you wish to arrange for the deletion of personal data stored by us, you can contact our data protection officer at any time. Our data protection officer or an employee appointed by him will ensure that the request for deletion is complied with immediately.

If the personal data has been made public by us and our company as the controller is obliged to erase the personal data pursuant to Article 17 (1) of the Data Protection Regulation, we shall take reasonable measures, including technical measures, taking into account the available technology and the cost of implementation, to inform other data controllers which process the published personal data that you have requested from them to erase all links to your personal data or copies or replications of your personal data, unless the processing is necessary. Our data protection officer or an employee appointed by him will arrange the necessary in individual cases.

* Right to restrict processing

You have the right to request us to restrict processing if one of the following conditions is met:

* You dispute the accuracy of the personal data for a period of time that enables us, as the controller, to verify the accuracy of the personal data.

* The processing is unlawful, you refuse to erase the personal data and instead request the restriction of the use of the personal data.

* We as the controller no longer need the personal data for the purposes of processing, but you as the data subject need it to assert, exercise or defend legal claims.

* You have objected to the processing pursuant to Art. 21 (1) GDPR and it is not yet clear whether our legitimate grounds override those of you as the data subject.

If one of the above conditions is met and you wish to request the restriction of personal data stored by us, you can contact our data protection officer at any time. Our data protection officer or an employee appointed by him will arrange the restriction of the processing.

* Right to data portability

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, common and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us as the controller to whom the personal data has been provided, provided that the processing is based on consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR or on a contract pursuant to Article 6(1)(b) of the GDPR and the processing is carried out with the aid of automated procedures, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us as the controller.

Furthermore, when exercising your right to data portability pursuant to Article 20(1) of the GDPR, you have the right to have the personal data transferred directly from one controller to another controller, insofar as this is technically feasible and provided that this does not adversely affect the rights and freedoms of other individuals.

To exercise the right to data portability, you can contact our data protection officer at any time.

* Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6 (1) (e) or (f) GDPR. This also applies to profiling based on these provisions.

We will no longer process the personal data in the event of objection, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If we process personal data for the purpose of direct advertising, you have the right to object at any time to the processing of personal data for the purpose of such advertising. This also applies to profiling, insofar as it is connected with such direct advertising. If you object to us processing your personal data for direct marketing purposes, we will no longer process it for these purposes. If you wish to exercise this right of objection, please contact: info@followmetogreece.com

In addition, you have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out by us for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.

To exercise your right to object, you may contact our data protection officer. You are also free to exercise your right to object by means of automated procedures using technical specifications in connection with the use of information society services, notwithstanding Directive 2002/58/EC.

* Automated decision in individual cases including profiling

You have the right not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly significantly affects you, unless the decision (1) is necessary for the conclusion or performance of a contract between you and us, or (2) is authorised by Union or Member State law to which we are subject and that law contains adequate measures to safeguard your rights and freedoms and legitimate interests, or (3) is based on your explicit consent.

If the decision (1) is necessary for entering into, or the performance of, a contract between you and us, or (2) it is made with your explicit consent, we will take reasonable steps to safeguard your rights and freedoms and your legitimate interests, including at least the right to obtain the intervention of a person on our part, to express your point of view and to contest the decision.

If you wish to exercise your rights with regard to automated decisions, you can contact our data protection officer at any time.

* Right to revoke consent under data protection law

You have the right to withdraw consent to the processing of personal data at any time.

If you wish to exercise your right to withdraw consent, you can contact our data protection officer at any time.

Legal basis of the processing

Art. 6 (1) lit. a GDPR serves our company as the legal basis for processing operations in which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which you are a party, as is the case, for example, with processing operations that are necessary for the performance of a travel contract, the provision of another service or consideration, the processing is based on Art. 6 (1) lit. b GDPR. The same applies to processing operations that are necessary for the implementation of pre-contractual measures, for example in the case of enquiries about our products or services. If our company is subject to a legal obligation by which the processing of personal data becomes necessary, such as for the fulfilment of tax obligations, the processing is based on Art. 6 (1) lit. c GDPR. In rare cases, the processing of personal data might become necessary in order to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor to our business or a participant in our trips were to be injured and as a result their name, age, health insurance details or other vital information had to be passed on to a doctor, hospital or other third party. Then the processing would be based on Art. 6(1)(d) GDPR. Finally, processing operations could be based on Art. 6(1)(f) GDPR. Processing operations which are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary to protect a legitimate interest of our company or a third party, provided that your interests, fundamental rights and freedoms are not overridden. Such processing operations are permitted to us in particular because they were specifically mentioned by the European legislator. In this respect, it took the view that a legitimate interest could be assumed if you are a customer of ours (recital 47, sentence 2 of the GDPR).

Legitimate interests in the processing pursued by the controller or a third party

If the processing of personal data is based on Art. 6 para. 1 lit. f GDPR, our legitimate interest is the performance of our business activities for the benefit of the well-being of all our employees and our shareholders.

Legal or contractual requirements to provide the personal data; necessity for the conclusion of the contract; obligation of the data subject to provide the personal data; possible consequences of non-provision

We would like to inform you that the provision of personal data is sometimes required by law (e.g. tax regulations) or may also result from contractual regulations (e.g. information on the contractual partner). In order to conclude a contract, it may sometimes be necessary for you to provide us with personal data that subsequently has to be processed by us. For example, you are obliged to provide us with personal data if our company concludes a contract with you. Failure to provide the personal data would mean that the contract with you could not be concluded. Before you provide personal data, you can contact our data protection officer. Our data protection officer will inform you on a case-by-case basis whether the provision of personal data is required by law or contract or necessary for the conclusion of the contract, whether there is an obligation to provide the personal data and what the consequences of not providing the personal data would be.

Existence of automated decision making

As a responsible company, we do not use automatic decision-making or profiling.

 

Our collection and use of personal information

Personal data is data that can be used to uniquely identify or contact an individual person. You may choose to provide us with personal data when you use our services. As we change our features from time to time, the options you have to provide us with personal information may also change, but here are some examples of situations where you may choose to provide us with personal information:

If you contact us for any reason, for example by email, including for technical support or customer service;

When you make a payment; and

Use of our services when personal information is required for use or participation.

The information we collect from you varies depending on which of our services you use. However, the information you provide may generally include the following:

Name, email address, address, telephone number, username and payment information (including credit card numbers collected through a secure third party payment processing company).

Information about your activities and interactions with our Services (e.g. your IP address, the type of device or browser you are using, your geographic location and your actions on the Website); and

Messages you send to us (for example, when you ask for support, send us questions or comments, or report a problem).

Because we ask you directly for personal information in these cases, you can often tell from our specific requests what types of information we receive from you.

We collect this information for the following reasons, among others:

To understand your needs and provide you with a better service;

For statistical and analysis purposes for administrative purposes to manage or improve our products and services;

for internal record keeping and administrative purposes and to inform you about our events, services or products or other related information that we think may be of interest to you, as explained above;

to send you marketing messages, newsletters and details about our business or the businesses of carefully selected third parties that we think may be of interest to you, by post or email or similar technology (you can inform us at any time if you no longer wish to receive marketing messages); and

From time to time, we may also use your information to contact you for market research purposes or to customise the website and mobile app to your interests.

a) When visiting the website

You can access the website https://followmetogreece.com without having to disclose any information about your identity. The browser used on your terminal device only automatically sends information to the server of our website (e.g. the operating system of your computer and the browser you are using, the name of your Internet access provider, the name and URL of the file accessed, the date and time of access, the website from which access was made).

This also includes the IP address of your requesting end device. This is temporarily stored in a so-called log file and automatically deleted after 4 weeks:

The IP address is processed for technical and administrative purposes of connection establishment and stability, in order to ensure the security and functionality of our website and to be able to pursue any illegal attacks on it if necessary.

The legal basis for the processing of the IP address is Art. 6 para. 1 p. 1 lit. f) GDPR. Our legitimate interest follows from the aforementioned security interest and the necessity of a trouble-free provision of our website.

We cannot draw any direct conclusions about your identity from the processing of the IP address and other information in the log file.

In addition, we use cookies and analysis services when you visit our website. You can find more detailed explanations on this under sections 4 and 5 of this data protection declaration.

b) When registering on our platform

As a Traveler, you can browse offers of holiday homes and holiday flats on our platform and make corresponding booking enquiries to the respective Owner. A free registration for the mediation of an enquiry or booking for a holiday accommodation as a Traveler to a provider of a holiday accommodation is obligatory. This also allows you to use extended functionalities such as the management of your booking requests and communication with the Owner.

As a Owner, you must register on our platform in order to be able to offer holiday flats and holiday homes on our platform.

In the course of registering on our website as a Traveler or Owner, we collect and store the following data from you as mandatory information:

* First name;

* Last name;

* Username;

* E-mail address.

In your user account, you can later voluntarily provide further information.

The collection and storage of this data takes place,

to know who our contractual partner is;

for the establishment, content, processing and amendment of the contractual relationship with you via the use of our platform as a registered Traveler;

Fulfilment of the contract of use or agency contract between us and the user;

to check the plausibility of the data entered;

to contact you if necessary

The processing within the scope of the registration takes place upon your request and is necessary according to Art. 6 para. 1 p. 1 lit. b) GDPR for the aforementioned purposes for the use of the platform and thus for the fulfilment of the contract and pre-contractual measures.

We also use your email address collected in the course of registration or in the course of contract performance to inform you by email about our own services or goods or generally about https://followmetogreece.com. In this case, the processing of the e-mail address is based on our legitimate interest in advertising our goods and services (Art. 6 para. 1 lit. f GDPR).

Your stored data will be saved for the duration of the contractual relationship with you and then deleted.

c) When sending a request

If you are interested in a holiday flat or a holiday home, you can use our enquiry form to contact the Owner. The following mandatory information must be provided:

* First name;

* Last name;

* E-mail address;

* Telephone number;

* Date of arrival and departure;

* Number of adult Travelers.

You also have the option to voluntarily provide further information and can ask questions to the Owner.

All information you provide will be forwarded to the Owner for the purpose of the contact request. The Owner will use the information to check your request and get back to you.

The processing is carried out upon your request and is necessary for the aforementioned purposes for the fulfilment of the contract and pre-contractual measures in accordance with Art. 6 para. 1 p. 1 lit. b) GDPR.

If you send an enquiry as a registered Traveler, the information you provide will be stored as a booking enquiry in your user account until it is deleted.

d) When using our contact form

You can send us general enquiries via the contact form on our website. Your surname and a valid e-mail address are mandatory. Further data such as a message can be entered voluntarily.

This data is collected in order to know from whom an enquiry originates and to be able to answer it in the best possible way. The data processing is carried out upon your request and only insofar as it is necessary in the context of answering a contact request for the implementation of pre-contractual measures pursuant to Art. 6 para. 1 sentence 1 lit. b) GDPR or for the protection of legitimate interests of us or third parties pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR.

The personal data collected by us for the use of the contact form will be automatically deleted after complete processing of your request.

e) When registering for our newsletter

If you have expressly consented in accordance with Art. 6 para. 1 p. 1 lit. a) GDPR, we will use your e-mail address to send you our newsletter on a regular basis. To receive the newsletter, it is sufficient to provide an e-mail address.

You will then receive a registration notification by e-mail, which you must confirm in order to receive the newsletter (so-called double opt-in). This serves as proof that the registration was actually initiated by you.

You can unsubscribe at any time, e.g. via a link at the end of each newsletter. Alternatively, you can also send your unsubscribe request at any time by e-mail to info@followmetogreece.com.

Information collected by automatic means

We may obtain certain personal and non-personal information through automated means when you use our Services. The type of information we collect through automated means may vary, but generally includes technical information about your devices, such as IP address or other device identifier. The information we collect may also include usage data and statistics about your interaction with our services. This information may include the specific page of our websites or mobile game you visited, page views, time spent on a page, number of clicks, platform type and other information about how you used our service.

When you access our service using a mobile device, we receive information about the location of your device. In some cases, even if you are not using a mobile device, information about your general location may be apparent from the IP address of your device or the URLs you receive.

We use the information we collect in an automated way to understand our users and determine their preferences. This allows us to develop and deliver new or modified offers that are improved taking into account our users' preferences.

The following are some of the types of automatic data collection that may occur when you use our websites:

Web browser

When you visit our website, your browser automatically sends us your Internet Protocol (IP) address so that the web pages you request can be sent to your computer or device. We use your IP address to determine additional information, such as whether the computer or device has been used to visit our website before, which website features have been used most frequently and how much time has been spent on a page.

 

Cookies

Some of the Internet pages use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.

 

The cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your terminal device until you delete them. These cookies enable us to recognise your browser on your next visit.

 

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited.

 

Cookies that are required to carry out the electronic communication process or to provide certain functions that you have requested (e.g. shopping basket function) are stored on the basis of Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in storing cookies for the technically error-free and optimised provision of its services. Insofar as other cookies (e.g. cookies to analyse your surfing behaviour) are stored, these are treated separately in this data protection declaration.

For more information on cookies, please see our Cookie Policy page.

Legal basis for the processing of personal data according to the EU General Data Protection Regulation (GDPR)

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

* Browser type and version

* Operating system used

* Referrer URL

* Host name of the accessing computer

* Time of the server request

* IP address

This data is not merged with other data sources.

The basis for data processing is Art. 6 para. 1 lit. f GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

Data transmission upon conclusion of a contract for services and digital content

We only transmit personal data to third parties if this is necessary for the processing of the contract, for example to the credit institution commissioned with the processing of payments.

No further transmission of data will take place or only if you have expressly consented to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

Facebook

Plug-ins of the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA (Facebook) are used on our pages. If you have activated such plug-ins in your browser and have not installed a blocker, your browser may transmit personal data to Facebook. We do not know what data Facebook links to the data received and for what purposes Facebook uses this data. You can find more information on this in Facebook's privacy policy.

If you do not want Facebook to be able to assign your visit to our pages to your Facebook account, please log out of your Facebook user account and delete any cookies that have been set. For more here https://www.facebook.com/policy.php

Analysis tools and advertising

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called "cookies". These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

Google Analytics cookies are stored on the basis of Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.

Browser plugin

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Objection to data collection

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set, which will prevent the collection of your data during future visits to this website: Deactivate Google Analytics.

You can find more information on how Google Analytics handles user data in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Order data processing

We have concluded an order data processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Demographic characteristics in Google Analytics

This website uses the "demographic characteristics" function of Google Analytics. This allows reports to be generated that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google as well as visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as shown in the item "Objection to data collection".

Google Analytics Remarketing

Our websites use the functions of Google Analytics Remarketing in conjunction with the cross-device functions of Google AdWords and Google DoubleClick. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

This function makes it possible to link the advertising target groups created with Google Analytics Remarketing with the cross-device functions of Google AdWords and Google DoubleClick. In this way, interest-based, personalised advertising messages that have been adapted to you depending on your previous usage and surfing behaviour on one end device (e.g. mobile phone) can also be displayed on another of your end devices (e.g. tablet or PC).

If you have given your consent, Google will link your web and app browsing history to your Google Account for this purpose. In this way, the same personalised advertising messages can be displayed on every device on which you log in with your Google account.

To support this feature, Google Analytics collects Google-authenticated IDs of users, which are temporarily linked to our Google Analytics data to define and create target groups for cross-device ad advertising.

You can permanently object to cross-device remarketing/targeting by deactivating personalised advertising in your Google account; follow this link: https://www.google.com/settings/ads/onweb/.

The aggregation of the collected data in your Google account is based exclusively on your consent, which you can give or revoke at Google (Art. 6 para. 1 lit. a GDPR). In the case of data collection processes that are not merged in your Google Account (e.g. because you do not have a Google Account or have objected to the merging), the collection of data is based on Art. 6 (1) lit. f GDPR. The legitimate interest results from the fact that the website operator has an interest in the anonymised analysis of website visitors for advertising purposes.

Further information and the data protection provisions can be found in Google's data protection declaration at: https://www.google.com/policies/technologies/ads/.

Google AdWords and Google Conversion Tracking

This website uses Google AdWords. AdWords is an online advertising programme of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google").

Within the framework of Google AdWords, we use so-called conversion tracking. When you click on an ad placed by Google, a cookie is set for conversion tracking. Cookies are small text files that the internet browser stores on the user's computer. These cookies lose their validity after 30 days and are not used to personally identify the user. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user clicked on the ad and was redirected to this page.

Each Google AdWords customer receives a different cookie. The cookies cannot be tracked via the websites of AdWords customers. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted in to conversion tracking. The customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you do not wish to participate in the tracking, you can object to this use by easily deactivating the Google conversion tracking cookie via your internet browser under user settings. You will then not be included in the conversion tracking statistics.

The storage of "conversion cookies" is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.

You can find more information about Google AdWords and Google Conversion Tracking in Google's privacy policy: https://www.google.de/policies/privacy/.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited.

Plugins and tools

YouTube

Our website uses plugins from the YouTube site operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.

When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited.

If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.

YouTube is used in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

Further information on the handling of user data can be found in YouTube's privacy policy at: https://www.google.de/intl/de/policies/privacy.

Google Maps

This site uses the map service Google Maps via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission.

The use of Google Maps is in the interest of an appealing presentation of our online offers and an easy location of the places indicated by us on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

More information on the handling of user data can be found in Google's privacy policy: https://www.google.de/intl/de/policies/privacy/.

Social media

Privacy policy for the use of Facebook plugins (Like button)

Plugins of the social network Facebook (Facebook Inc., 1601 Willow Road, Menlo Park, California, 94025, USA) are integrated on our pages. You can recognise the Facebook plugins by the Facebook logo or the "Like" button on our site. You can find an overview of the Facebook plugins here:http://developers.facebook.com/docs/plugins/.

 When you visit our pages, a direct connection is established between your browser and the Facebook server via the plugin. Facebook thereby receives the information that you have visited our site with your IP address. If you click the Facebook "Like" button while you are logged into your Facebook account, you can link the content of our pages on your Facebook profile. This allows Facebook to associate the visit to our pages with your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Facebook. You can find further information on this in the Facebook

 data protection declaration at http://de-de.facebook.com/policy.php.

If you do not want Facebook to be able to assign your visit to our pages to your Facebook user account, please log out of your Facebook user account.

* Privacy policy for the use of Google +1

Collection and sharing of information: You can

use the Google +1 button to publish information worldwide. Via the Google +1 button, you and other users receive personalised content from Google and our partners. Google stores both the information that you have given +1 for a content and information about the page you were viewing when you clicked +1. Your +1s can be displayed as notices together with your profile name and photo in Google services, such as in search results or in your Google profile, or in other places on websites and ads on the internet.

 Google records information about your +1 activities in order to improve Google services for you and others. In order to use the Google +1 button, you need a globally visible, public Google profile, which must contain at least the name chosen for the profile. This name is used in all Google services. In some cases, this name may also replace another name you used when sharing content via your Google Account. The identity of your Google profile may be displayed to users who know your email address or have other identifying information about you.

Use of the information collected:

 In addition to the uses explained above, the information you provide will be used in accordance with the applicable Google privacy policy. Google may publish aggregate statistics about users' +1 activities or share them with users and partners, such as publishers, advertisers or affiliated websites.

* Privacy policy for the use of Twitter

Functions of the Twitter service are integrated on our pages. These functions are offered by Twitter Inc, Twitter, Inc. 1355 Market St, Suite 900, San Francisco, CA 94103, USA. By using Twitter and the "Re-Tweet" function, the websites you visit are linked to your Twitter account and made known to other users. Data is also transferred to Twitter in the process.

We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Twitter. You can find more information on this in Twitter's privacy policy at http://twitter.com/privacy.

You can change your privacy settings on Twitter in the account settings athttp://twitter.com/account/settings.

Dissemination of information

We may share information about you as follows or as otherwise described in this Privacy Policy:

With vendors, customer system managers and other service providers who assist us in operating our website, conducting our business or providing services to you, as long as those third parties agree to keep that information confidential in accordance with the European Union General Data Protection Regulation ("GDPR");

In response to a request for information when we believe that disclosure is in compliance with or required by an applicable law, regulation or legal process;

If we believe that your actions are inconsistent with our terms or to protect the rights, property or safety of Followmetogreece or others;

In connection with or during negotiations for a merger, sale of company assets, financing or acquisition of all or part of our business by another company; and

With your consent or on your instructions.

Please note that Followmetogreece does not store or have direct access to your personal credit card information. All credit card information is processed through a secure third party payment processing company.

Data retention

We will only retain your personal data for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your personal data to the extent necessary to comply with our legal obligations (for example, if we need to retain your data to comply with applicable laws), resolve disputes and enforce our legal agreements and policies.

We will also retain usage data for internal analysis purposes. Usage data is generally retained for a shorter period of time, unless this data is used to improve the security or functionality of our service or we are required by law to retain this data for longer periods of time.

Passing on data

Your information, including personal data, may be transferred to and stored on computers outside your state, province, country or other governmental jurisdiction where data protection laws may differ from those in your jurisdiction.

By agreeing to this Privacy Policy and the subsequent transfer of such data, you consent to such transfer.

We will take all reasonable steps to ensure that your information is treated securely and in accordance with this Privacy Policy and there will be no transfer of your personal information to any organisation or country unless there are adequate controls in place to cover the security of your data and other personal information.

Data disclosure

Business transaction

If Followmetogreece is involved in a merger, acquisition or asset sale, your personal data may be transferred. We will notify you before your personal data is transferred and becomes subject to a different privacy policy.

Legal requirements

Followmetogreece may disclose your personal information if we have a good faith belief that such action is necessary to:

To comply with a legal obligation;

To protect and defend the rights or property of Followmetogreece;

To prevent or investigate possible misconduct in connection with the Service;

To protect the personal safety of users of the service or the public; and

To protect against legal liability.

 Your choices

In certain cases, you have a choice about how we use and share your personal information. For example, we will ask you before we use your personal information for purposes that are incompatible with those stated in this notice.

You may also choose not to provide us with the information we request, as described in the "Our Collection and Use of Personal Information" section of this notice. If you choose not to provide us with information, in some cases we may not be able to provide you with access to some services or provide you with the services, features or information you have requested.

In some cases, you can limit the information we collect automatically. You can also exercise and change your choices by sending an email to us as described in the "How to contact us" section below.

How we protect personal information

We have taken steps to protect your personal information from accidental loss and unauthorised access, use, modification and disclosure. All information you provide to us is stored on secure servers behind firewalls.

Unfortunately, the transmission of information over the Internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to us; any transmission is at your own risk. Once we have received your information, we will implement strict procedures and security measures to prevent unauthorised access.

Links to other websites

Our service provides links to other websites and services. We have no control over, and are not responsible for, the content or practices of any such other websites or services. The provision of such links does not imply our endorsement of those third party services, their content, their owners or their practices. This Privacy Policy does not apply to those third party services, which are subject to their privacy and other policies. You should exercise caution and review the privacy policies of any third-party services you visit through our services or our products to learn more about their information practices, which may differ significantly from ours.

 Data protection for children

Our Service is not directed to anyone under the age of 13 ("Child", "Children"). We do not knowingly collect personally identifiable information from persons under the age of 18. If you are a parent or guardian and know that your child has provided us with personally identifiable information, please contact us. If we discover that we have collected personally identifiable information from children without adult verification or parental consent, we will take the necessary steps to remove that information from our servers.

Updates to our privacy notice

This privacy notice may be updated periodically to reflect changes in our information practices or relevant laws. We will indicate at the beginning of the notice when it has been updated. Please check this notice each time you access or use our websites to ensure that you have read the latest version.

How to contact us

If you have any questions or comments about this privacy notice, or if you would like us to update any information we have about you or your preferences, please contact us at

Followmetogreece

TDS Travel & Data Service GmbH

Registered office: Munich, HRB 79858

Business address: Müllerstr. 47, D-80469 Munich

Managing Director: Jean Arampatsis

Tax no. 143/185/00518

Sales tax ID 129475583

Tel: +49 89 260 94 18 Fax: +49 89 26 93 63

info@followmetogreece.com