Welcome to KD Tours Santorini (“we,” “us,” or “our”). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website at https://kdsantorinitours.com/ (the “Website”), in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Greek data protection legislation.
For the purposes of the GDPR, the Data Controller responsible for your personal data is:
Business Name: KD Tours Santorini
Website: https://kdsantorinitours.com/
Contact Email: kdtourssantorini@gmail.com
We collect and process the following types of personal data depending on how you interact with our Website:
Information You Provide to Us: When you use our Contact Form, we collect your Name, Email Address, and the contents of the Message you send us.
Information Collected Automatically (Cookies & Tracking): When you visit our Website, we automatically collect certain technical information about your device and browsing activity using cookies and similar tracking technologies. This may include your IP address, browser type, operating system, pages visited, and time spent on the Website.
We only process your personal data when we have a valid legal basis to do so under the GDPR:
To Respond to Your Inquiries: We use the name and email provided in the contact form to answer your questions and provide customer support.
Legal Basis: Legitimate interest in conducting our business and responding to customer queries, or taking steps prior to entering into a contract with you.
To Analyze Website Traffic and Improve User Experience: We use Google Analytics to understand how visitors interact with our site.
Legal Basis: Your explicit consent (gathered via our Cookie Banner).
For Marketing and Advertising: We use Google Ads and Meta (Facebook/Instagram) tools, such as the Meta Pixel, to deliver targeted advertising and measure the effectiveness of our campaigns.
Legal Basis: Your explicit consent (gathered via our Cookie Banner).
Our Website uses cookies to function effectively and to provide our analytics and marketing features. We use the following third-party services:
Google Analytics & Google Ads: Used for tracking website performance and serving relevant advertisements. Google may collect your IP address and browsing data. You can learn more about how Google uses data here.
Meta (Facebook) Pixel: Used to track conversions from Facebook ads, optimize ads, and build targeted audiences. Meta may connect this data to your Facebook or Instagram account. You can manage your Meta ad preferences within your Facebook account settings.
Note: Non-essential cookies (like those used for Google and Meta) are only activated if you provide your consent through our cookie consent pop-up when you first visit our Website.
We do not sell your personal data. We may share your data with trusted third parties solely for the purposes outlined in this policy:
Service Providers: Hosting providers and IT support who help us run our Website securely.
Marketing and Analytics Partners: Google and Meta, as described in Section 4.
Legal Obligations: We may disclose your data to Greek authorities if required by law or to protect our legal rights.
Data Transfers outside the EEA: Some of our partners (like Google and Meta) are based in the United States. Data transferred outside the European Economic Area (EEA) is protected by standard contractual clauses or other appropriate safeguards compliant with the GDPR.
We retain your personal data only for as long as necessary to fulfill the purposes for which we collected it:
Contact Form Inquiries: Retained until your query is fully resolved, and for a reasonable period afterward for our records, unless you request its deletion.
Analytics and Marketing Data: Retained according to the expiration periods of the specific cookies (which you can manage/delete at any time via your browser).
Under the GDPR and Greek Law 4624/2019, you have the following rights regarding your personal data:
Right of Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can ask us to correct any inaccurate or incomplete data.
Right to Erasure (“Right to be Forgotten”): You can request that we delete your data, under certain conditions.
Right to Restrict Processing: You can ask us to temporarily halt the processing of your data.
Right to Data Portability: You can request your data in a structured, commonly used format.
Right to Object & Withdraw Consent: You can object to data processing for marketing purposes at any time. If you have given consent for cookies, you can withdraw it at any time by adjusting your cookie preferences.
To exercise any of these rights, please contact us at kdtourssantorini@gmail.com.
If you believe that our processing of your personal data violates data protection laws, you have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA):
Website: www.dpa.gr
Address: Kifissias 1-3, PC 115 23, Athens, Greece
Telephone: +30 210 6475600
Email: contact@dpa.gr
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.
