Privacy Policy
Personal Data
Personal data are processed exclusively for the performance of the contract and for compliance with legal obligations. The protection of your personal data is of utmost importance to the Business. We are committed to safeguarding your privacy and fully complying with the General Data Protection Regulation (GDPR) and applicable Greek legislation.
a. Data Controller:
Emmanouil Vasileiadis, residing at 19 Salaminos Street, Nearchou Avenue, Heraklion, is the Data Controller. For any inquiries regarding the processing of your data, you may contact us at info@cardinalcruises.gr.
b. Collection and Processing of Personal Data:
We collect and process personal data voluntarily provided by you when you contact us or make a booking through our website. This may include: Full name, nationality, age, passport or ID number, email address, phone number, payment details (e.g. credit card information), preferences regarding our cruises.
c. Purpose of Processing:
Your personal data are used for: Processing bookings and providing our services; Communicating with you regarding bookings or inquiries; Improving our services based on your preferences; Compliance with legal obligations (passenger lists, charter agreements, issuance of receipts or invoices)
d. Legal Basis for Processing:
Processing is based on: Performance of a contract; Legal obligation; Legitimate interests, including service improvement and communication.
e. Disclosure to Third Parties:
We do not share personal data with third parties unless necessary for contract performance (e.g. service providers) or required by law. In all cases, we ensure that third parties comply with data protection standards.
f. Data Security:
We implement all appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or destruction. However, data transmission over the Internet is not entirely secure, and absolute security cannot be guaranteed.
g. Data Subject Rights:
According to the GDPR, you have the following rights:
Right of access: To know what data we process about you and for what purpose.
Right to rectification: To request the correction of inaccurate or incomplete data.
Right to erasure: To request the deletion of your data under certain conditions.
Right to restriction of processing: To request the restriction of the processing of your data.
Right to data portability: To receive your data in a structured, commonly used, and machine-readable format.
Right to object: To object to the processing of your data for specific purposes.
To exercise your rights, you may contact us at info@cardinalcruises.gr.
h. Data Retention Period:
Personal data are retained only for as long as necessary to fulfill the purposes for which they were collected or as required by law, after which they are securely deleted.
i. Cookies:
Our website uses cookies to enhance your browsing experience and collect anonymous statistical information. You may manage cookie preferences through your browser settings. For more information, please refer to our Cookie Policy.
j. Changes to the Privacy Policy:
The Business reserves the right to amend these Terms of Use at any time. Any changes will be published on our website, and shall enter into force upon publication. Passengers are encouraged to regularly review the page for updates.