1. Data Controller
South Crete Tours acts as the data controller for personal data submitted through our website, booking flows, and partner contact forms. For privacy requests, contact us at info@southcrete.com.
2. Data We Collect
- Contact information such as name, email, and phone number.
- Travel and booking details including dates, locations, and selected services.
- Transaction and communication records needed for customer support and compliance.
- Technical and analytics data used to improve website performance and user experience.
3. Purpose and Legal Basis
We process personal data for the following purposes:
- To deliver requested services, quotes, and confirmed bookings.
- To communicate service updates and assist with support requests.
- To meet legal and accounting obligations.
- To analyze website usage and improve service quality, where permitted by law.
4. Data Sharing
We may share necessary booking information with hotels, transport providers, excursion operators, and payment or technical service partners strictly for service delivery, legal obligations, or secure platform operations.
5. Retention
Data is retained for as long as needed to provide services, resolve disputes, comply with legal obligations, and maintain required financial records.
6. Your Rights
Subject to applicable law, you may request access, correction, deletion, restriction, portability, or objection to processing of your personal data. You may also withdraw consent where processing is based on consent.
7. Security
We use appropriate technical and organizational safeguards to protect personal data against unauthorized access, alteration, disclosure, or destruction.