{"id":1662,"date":"2025-04-14T11:42:25","date_gmt":"2025-04-14T08:42:25","guid":{"rendered":"https:\/\/camping-methoni.gr\/politiki-prostasias-ton-prosopikon-dedomenon\/"},"modified":"2025-05-09T12:29:56","modified_gmt":"2025-05-09T09:29:56","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/camping-methoni.gr\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

The Company MARKOPOULOS IL. NIKOLAOS, CAMPING \u201cMETHONI\u201d, (hereinafter called The \u00abCompany\u00bb), which is located at Methoni, Messinias, 24006, in order to carry out effectively, everyday business functions and activities collects and processes personal data of the following data subjects: A) personnel\u2019s, personal data B.) clients personal data and C.) external associates \u201cthird parties\u201d (hereinafter categories A,B,C, referred to as \u201cdata subject\/s\u201d) in compliance with the applicable legislation as amended and\/or replaced from time to time, the provisions of Regulation (EU) 2016\/679 (hereinafter the \u201cGeneral Data Protection Regulation\u201d or \u201cGDPR\u201d), in force from 25 May 2018, and other legal and\/or regulatory requirements.<\/p>

It is the Company\u2019s Policy to provide data subject, with information about the processing of its personal data and to inform data subject about the data protection rights under the current legislative and regulatory framework.<\/p>

The \u201cCompany\u2019s\u201d Data Protection Officer contact details are<\/p>

Name: Nikolaos
Surname: Markopoulos
Telephone:\u00a027230 31188
Email address:\u00a0info@camping-methoni.gr
Address: Camping Methoni, 24006 Methoni, Messinia<\/p>

If you, as data subject, have any questions, or want more details about how the \u00abCompany\u00bb uses your personal information, you may contact at the above contact details in the manner set forth in this privacy policy.<\/p>

A. BRIEF INTRODUCTION TO GDPR
GDPR applies mandatorily to the \u00abCompany\u00bb and therefore the related activities of the \u00abCompany\u00bb need to comply with the GDPR requirements.<\/p>

A.1. DEFINITIONS
a) \u2018Personal data\u2019 means any information relating to an identified or identifiable natural person (\u2018data subject\u2019); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person (\u2018data subject\u2019);
b) \u2018Processing\u2019 means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
c) \u2018Controller\u2019 means the natural or legal person, which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law. An entity that decides on the \u2018why\u2019 and the \u2018how\u2019 of data processing is considered a \u201ccontroller\u201d.
(the person that decides on the \u2018why\u2019 and the \u2018how\u2019 of data processing)
Where in text the word \u201ccontroller\u201d is referred, it means the person that process data (either \u201ccontroller\u201d, either \u201ccontroller\u2019s representative\u201d (employees).
e) \u2018Processor\u2019 means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the \u201ccontroller\u201d. If a \u201ccontroller\u201d engages a third party (e.g., service provider) to process personal data on the controller\u2019s behalf, that third party will qualify as a \u201cprocessor\u201d.
There can be several \u201ccontrollers\u201d and \u201cprocessors\u201d that are involved in the same data processing activity.
(f) \u201cData subject\u201d according to this privacy policy is the personnel of the \u00abCompany\u00bb(hereinafter referred to as \u201cthe personnel\u201d or \u201cdata subject\u201d), the clients of the \u00abCompany\u00bb(hereinafter referred to as \u201cclient\u201d or \u201cdata subject\u201d) and the external associates of the \u00abCompany\u00bb(hereinafter called \u201cthird parties\u201d or \u201cdata subject\u201d).
Where in text the words are referred in singular form, it is considered that they also apply in plural form.<\/p>

A.2. ) DATA PROTECTION PRINCIPLES
The Personal Data of each \u201cdata subject\u201d are processed according to the below principals:
(1) Processed lawfully, fairly and in a transparent manner in relation to the data subject (\u2018lawfulness, fairness and transparency\u2019);
(1.1.) Data Subjects must be aware
\u2022 that their data is being lawfully processed
\u2022 for what purpose it is being processed
\u2022 how to exercise their rights in relation to its data
There is no obligation to inform data subject of anything that is obvious from the context or from general knowledge: a typical example might be business contact lists.
(2) Personal data shall be collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, shall not be considered to be incompatible with the initial purposes (\u2018purpose limitation\u2019);
(3) Personal data shall be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (\u2018data minimisation\u2019);
(4) Personal data shall be accurate and, where necessary, kept up to date; every reasonable step shall be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay (\u2018accuracy\u2019);
(5) Personal data shall be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, subject to implementation of the appropriate technical and organisational measures required by this Regulation in order to safeguard the rights and freedoms of the data subject (\u2018storage limitation\u2019);
(6) Shall be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures (\u2018integrity and confidentiality\u2019).
It is the Company\u2019s Policy to provide data subject, with information about the processing of its personal data from the Company and to inform data subject about the data protection rights under the current legislative and regulatory framework.
The Company has developed policies, procedures, controls and measures to ensure maximum and continued compliance with the data protection laws and principles, including staff training, procedure documents, audit measures and assessments. Ensuring and maintaining the security and confidentiality of personal and\/or special category data is one of the Company\u2019s top priorities. The Company operates a \u2018Privacy by Design\u2019 approach, assessing changes and their impact from the start and designing systems and processes to protect personal information at the core of its business.<\/p>

B.) PERSONAL DATA WHICH THE \u00abCompany\u00bb MAINTAINS FOR THE \u201cPERSONNEL\u201d
The Personal Data that the \u00abCompany\u00bb maintains for the \u201cPersonnel\u201d include not only those that the law requires for the conclusion of agreements, but also a number of other which are required and are used in the sector in order to achieve high-level services.
For the above reason the type of data that are held and the scope of data processing, depends on the requirements that requested, each time from the legislation and the legislation concerning the activities of this specific sector.
Without data processing the \u201cCompany\u201d, cannot enter into or perform the terms of a contract with the \u201cdata subject\u201d.
Indicatively and not limited to, the personal data that the \u00abCompany\u00bb processes for the personnel are:
name, e-mail, address, phone number, expertise, marital status, professional history, bank accounts, social security number, tax identification number, educational background, parents\u2019 name, authentication data (e.g. signature), age, number of children, CVs, data from CCTV data \u03b9n certain places where specific signs are installed.
Special categories of personal data are also included in the data which the \u00abCompany\u00bb collects and maintains. Indicatively and not limited to, these are: health data, medical certificates, cultural, religion, photos, nationality, gender.
Where data collection is optional, this is made clear at the point of collection.<\/p>

B.1.) PROCESSING PURPOSE
The \u00abCompany\u00bb processes the \u201cpersonnel\u2019s\u201d personal data for one or more of the following reasons:
-Contract of Employment.
Indicatively and not limited to, for:
\u2013 Assessment of candidate\u2019s skills
\u2013 Preparation \/ signing of the contract
-Preparation for future staffing needs.
-Identification of employee.
-Company\u2019s respect in different cultural and religious backgrounds.
-Facilitating of communication
\u2013 Compliance with the requirements of current legislative and regulatory framework.
For compliance with a legal obligation.
Indicatively and not limited to, for:
\u2013 Greek legislation
\u2013 European legislation.
\u2013 Support legal proceedings
For the performance of a task carried out in the public interest.
When are legally requested from public authorities.
For the purposes of safeguarding legitimate interests. Indicatively and not limited to, for:
Indicatively and without limitation, for:
-Safety and Security of the \u00abCompany\u00bb
-Safety and Security of the facilities
-Safety and Security of all the personnel
Based on the consent of the personnel
Any such consent granted may be revoked at any time by contacting the \u201cCompany\u201d.<\/p>


B.2. HOW LONG THE \u00abCompany\u00bb RETAINS THE DATA OF THE \u201cPERSONNEL\u201d
Hard copies and electronic files are retained for 5 years after signing off of \u201cthe personnel\u201d.
If a candidate is not acceptable his\/her personal data shall be disposed of immediately.
The Company may keep data for longer than the said period for legal and\/or regulatory and\/or technical reasons. In such cases, the Company shall ensure that privacy is protected, and the data is used only for the purposes stated in the previous paragraph (processing purpose).
In cases where the Company wishes to retain the data with a view to a further job opportunity, the data subject shall be informed accordingly and be given the possibility to object to such further processing. In such cases a notice shall be provided to the data subject, and the data subject\u2019s consent to keep their personal data for assessing suitability for future employment possibilities shall be obtained. Such consent shall be renewed every three (3) years.
Data no longer required shall be deleted and disposed of.

B.3. WHO THE \u00abCompany\u00bbSHARES THE DATA OF THE \u201cPERSONNEL\u201d WITH
No information relating to data subject personal data is disclosed to anyone, other than in the cases permitted by the legal and regulatory framework in force from time to time and when it is needed for the fulfilment of the purposes of the employment. These are:
a.) When the \u00abCompany\u00bb (or any third party acting on \u201cCompany\u2019s\u201d behalf) is legally compelled to do so or where disclosure is required for purposes of compliance with the legal and regulatory framework governing the operation of the \u00abCompany\u00bb (public authorities etc.)
b.) Where the \u00abCompany\u00bb has contractual obligation to do so (with accountant companies, IT companies, travel agents etc.)
b) Where it is in \u201cCompany\u2019s\u201d legitimate interests to disclose information (lawyers, legal advisors etc.).
c). Where disclosure is made at data subject\u2019s request or with data subject\u2019s consent or to satisfy the Company\u2019s contractual obligations towards the data subject.
d.) Companies or individuals that data subject asks the Company to share its data with.

C.) PERSONAL DATA WHICH THE \u201cCOMPANY\u201d RETAINS FOR \u201cCLIENTS\u201d
The Personal Data retained by the \u201cCompany\u201d for \u201cClients\u201d include those required by the law for the provision of hotel services but also all the personal data required to achieve a high level of services.
For the above reason the type of data that are held and the scope of data processing, depends on the requirements that requested, each time from the legislation and the legislation concerning the activities of this specific sector.
Without data processing the \u201cCompany\u201d, cannot enter into or perform the terms of a contract with the \u201cdata subject\u201d.
Indicatively and not limited to, the personal data that the \u00abCompany\u00bb processes are:
name, e-mail address, address, telephone number, ID card number or passport number, number of children, car \/motorcycle \/ self-propelled vehicle\/ caravan \/trailer number, CCTV data of them and of their children in certain places where specific signs are installed.
Special categories of personal data are also included in the data which the \u00abCompany\u00bb collects and maintains. Indicatively and not limited to, these are: health data, religion, nationality, gender.
Where data collection is optional, this is made clear at the point of collection.

C.1. PROCESSING PURPOSE
The \u00abCompany\u00bb processes the \u201cclient\u2019s\u201d personal data for one or more of the following reasons:
For the provision of hotel services
\u2013 \u03a4o meet and satisfy customer requirements hotel services.
\u2013 Preparation to provide the client with hotel services
\u2013 Preparation for covering clients future needs.
-Recognition and identification of clients.
-Company\u2019s Respect\u201d to different clients cultural and religious background.
-Facilitating communication
To comply with legal obligations according to:
\u2013 Greek legislation
-European legislation.
-To support legal procedures
For the performance of a duty performed in the public interest.
If data are lawfully requested from public authorities
For protecting legitimate interests. Indicatively and not exclusively, for:
-Safety and Protection of the \u201cCompany\u201d.
-Security and protection of the facilities.
-Safety and protection of the client.
Based on client\u2019s consent
Any such consent granted may be revoked at any time by contacting us.<\/p>

C.2. FOR HOW LONG THE \u00abCompany\u00bbRETAINS THE DATA OF THE \u201cCLIENT\u201d
Hard copies and electronic records are kept for one year.
In case that a client is not acceptable, their personal data is immediately destroyed without leaving traces.
The \u00abCompany\u00bb may maintain personal data for a longer period than the above- mentioned period for the purpose of securing its legal and financial interests.
In the above case, the \u00abCompany\u00bb has ensured that the appropriate technical and organizational measures have been taken to maintain the client\u2019s personal data safely.
In any case, where there is no longer any reason to retain the data, the data shall be deleted \u2013 to the extent in which it is technologically feasible \u2013 and the data kept in paper shall be destroyed in such a way as not to leave any remnants which could lead to the identification of the \u2018data subject\u201d<\/p>

C.3.) WITH WHOM SHARES THE \u00abCOMPANY\u00bbTHE PERSONAL DATA OF THE \u201cCLIENTS\u201d
No information regarding client\u2019s personal data is revealed to anyone except in the cases permitted by the applicable legal framework and when required for the fulfilment of the purposes of the employment.
These cases are:
a.) When the \u00abCompany\u00bb (or any third party acting on \u201cCompany\u2019s\u201d behalf) is legally compelled to do so or where disclosure is required for purposes of compliance with the legal and regulatory framework governing the operation of the \u00abCompany\u00bb (public authorities etc.)
b.) Where the \u00abCompany\u00bb has contractual obligation to do so (with accountant companies, IT companies, travel agents etc.)
b) Where it is in \u201cCompany\u2019s\u201d legitimate interests to disclose information (lawyers, legal advisors etc.).
c). Where disclosure is made at data subject\u2019s request or with data subject\u2019s consent or to satisfy the Company\u2019s contractual obligations towards the data subject.
d.) Companies or individuals that data subject asks the Company to share its data with.<\/p>

D. PERSONAL DATA WHICH THE \u00abCOMPANY\u00bb RETAINS FOR \u201cTHIRD PARTIES\u201d
Personal data of third parties may include: Name, Surname, Parents Name, offices, address, TIN number.
Without data processing, the Company cannot enter into or perform the terms of a contract with data subject.
Where data collection is optional, this shall be made clear at the point of collection.<\/p>

D.1.) PURPOSE OF PROCESSING
The \u00abCompany\u00bb processes the personal data of \u201cthird parties\u201d for one or more of the following reasons:
For the performance of a contract in which \u201cthe data subject\u201d represents another legal entity or is itself the contracting party.
To comply with a legal obligation.
For the performance of a duty performed in the public interest
Based on the \u201cthird party\u2019s\u201d consent
Any such consent granted may be revoked at any time by contacting us.<\/p>

D.2) HOW LONG THE \u00abCompany\u00bb RETAINS DATA FOR \u201cTHIRD PARTIES\u201d
Hard copies and electronic files are retained for 5 years after the termination of the contracts\/cooperation.
Company may keep data for longer than the said period for legal and\/or regulatory and\/or technical reasons.
If the Company do so, will ensure that privacy is protected and the data is used only for the purposes stated in the previous paragraph (processing purpose).
In cases where the Company wishes to retain the data with a view to a further cooperation, the data subject shall be informed accordingly and be given the possibility to object to such further processing. In such cases a notice shall be provided to the data subject, and the data subject\u2019s consent to keep their personal data for assessing suitability for future employment possibilities shall be obtained. Such consent shall be periodically renewed.
Data no longer required shall be deleted and disposed of.<\/p>

D.3.) WITH WHOM SHARES THE \u00abCOMPANY\u00bbTHE PERSONAL DATA OF THE \u201cTHIRD PARTIES\u201d
Nothing relating to data subject\u2019s personal data is disclosed to anyone, other than in the cases permitted by the legal and regulatory framework in force from time to time. These are:
Where the Company (or any third party acting on Company\u2019s behalf) is legally compelled to do so or where disclosure is required for purposes of compliance with the legal and regulatory framework governing shipping industry
Where the Company has contractual obligation to do so
Where it is in Company\u2019s legitimate interests to disclose information (e.g. to protect the Company\u2019s interest (in claims etc.).
Where disclosure is made at data subject\/(your) request or with your consent or to satisfy Company\u2019s contractual obligations towards data subject. (Third parties as agents, Travel agents etc.)
Where data subject asks our Company to share its data with other Companies or Individual.<\/p>

E. PERSONAL DATA RECORDING \u0399\u039d ACTIVITY FILES
The Controller in each department maintain in hard copies as well as electronically the records of processing activities under its responsibility.
In these records must be documented what personal data is held, where it came from and whom it is shared with, where is held, in what format is held, where it is obtained from, basis for holding it (consent\/legal basis).
From the records, conclusion can be drawn if personal data are processed fairly, lawfully, in transparent manner, for limited purposes (collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes), if they are minimized (adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed), if they are accurate (and, where necessary, kept up to date), not kept for longer period than is necessary, in line with the data subjects\u2019 rights, secured, and in case of transfer to other countries if there is adequate protection.
The controller shall ensure compliance of the processing with the above principles.<\/p>

F. DATA TRANSFER
The Company may transfer data subject personal data in and outside of European Union in the following cases:
Where the data subject has explicitly consented to the proposed transfer
Where the transfer is necessary for the execution of a contract,
Where such transfer is necessary to establish, exercise, support legal claims or defend Company\u2019s rights.
Where there is an obligation under a legal provision or a transnational or international convention.
Where the European Committee has issued delegated acts for the adequate protection of the personal data in the specific country or to an international organization.
Where the transfer is necessary for the conclusion or performance of a contract concluded in the interest of the data subject between the controller and another natural or legal person;
Where the transfer is necessary for important reasons of public interest,
Where the transfer is necessary in order to protect the vital interests of the data subject or of other persons, where the data subject is physically or legally incapable of giving consent.<\/p>

G. MAIN RIGHTS OF \u201cDATA SUBJECT\u201d
The following are the rights that data subject has pursuant to the provisions of the GDPR as well as any other legislation in relation to data protection:
Information and access right to personal data
Data subject has the right to request access to its personal data.
This enables data subject to have incomplete or inaccurate data held by the Company corrected, though the Company may request to verify the accuracy of the new data that the data subject provides.
Data subject\u2019s access requests must be in writing.
A standard request form will be available through the Company\u2019s website.
Where the person managing the access (DPO) does not know the individual personally, the identity of this individual shall be checked and verified before handing over any information.
Right to rectification
Data subject has the right to request correction of the personal data that are hold from the \u201cCompany\u201d. With this right, the data subject may request any incomplete or inaccurate data be corrected and the Company may need to verify the accuracy of the new data provided.
Right to erasure
Data subject has the right to request erasure of the personal data that are hold from the Company where there is no valid reason for the Company to continue processing it.
In such cases the Company may be entitled to keep the data if it still has legitimate grounds to process the personal data.
Right to restrict processing of personal data
Data subjects shall have the right to obtain from the controller restriction of processing where one of the following applies:
the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims;
the data subject has objected to processing pursuant to Article 21(1) GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject.
Right to data portability
Data subjects can demand that their personal data be ported to them or to a new provider (transmitted directly to another organization where technically feasible) in a structured, commonly used, and machine-readable format, and to the extent this will not undermine the rights of others. The request must be made within one month (with extensions for some cases) and any intention not to comply must be explained to the individual.
The case that data relates to more than one data subject and how to address the difficulties this creates must be considered.
The Controller, in coordination with the external IT consultant, shall ensure that formatting capabilities are developed to meet access requests for providing portable data.
Right to object and automated individual decision making
The Company does not make decisions on the basis of automated processing.
Right to withdraw consent
Data Subjects may, at any time and free of charge, withdraw any consent they previously provided regarding the processing of their Personal Data.
This will not affect the lawfulness of the Processing before the consent withdrawal.
Right to lodge a complaint
Data subject has the right to lodge a complaint to the Company on how its personal information has been used or to the Data Protection Authority in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes this Regulation.<\/p>

H. OBLIGATIONS RELATING TO THE PROCESSING OF PERSONAL DATA
H.1.) LIMITING PHYSICAL ACCESS TO THE \u201cCOMPANY\u2019S\u201d PERSONNEL TO VIEW\/ EDIT SUBJECT\u2019S DATA. INTEGRITY\/CONFIDENTIALITY
According to the principle of integrity\/confidentiality, data are processed in a manner that ensure appropriate security, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures.
Therefore, data information is accessed only by the departmental personnel that will use them for the completion of their duties. Access in this case means not just by staff, but also by people outside the Company.
Data are not shared with the other departments informally.
Personal data transferred to the Company are transmitted only to the competent employees and not to an uncontrolled group of personnel or any other recipients.
Personal data are not disclosed to unauthorized people either within the company or externally.
Staff members who have access to personal data are subject to a confidentiality obligation (e.g. via a clause in the employment agreement) and also a Confidential Disclosure Agreement (CDA) shall be signed with third parties to protect private or confidential information from becoming public or more widely known.
For each confidentiality level it may be worth setting out the broad security measures to be followed, such as password protection, clear desk policy, entry control.
This principle may be relaxed in the case of information which poses a low risk: for example, a list of business contacts may be made generally available, even if this means people having access who don\u2019t strictly need it.
The Company\u2019s personnel are periodically trained in order to understand the responsibilities when handling data.<\/p>

H.2 STORAGE SAFETY\/SECURITY GUIDELINES FOR HARD COPIES AND ELECTRONIC FILES
COMMUNICATION OF DATA AND SENSITIVE DATA
Hard files are secured in locked cupboards.
Keys\/ access to the cupboards are provided only to personnel whose duties are directly involved with the respective documents\/ records.
Appropriate digital security\/ organizational measures are established for controlling the access to the electronic filing system, including backup procedures and emergency planning.
Strong passwords are used for accessing electronic files\/ user accounts.
These passwords shall never be shared with other persons either within the Company or externally.
The access to the server room is prohibited. The door is always locked, and digital security measures are established by the Company
All employees implement the \u201cClear and lock\u201d policy which means to \u201ckeep the desk clear\u201d and \u201cthe computer screen locked\u201d practice when the controller is away from his desk.
Employees keep all data secured, by taking sensible precautions and following the guidelines below:
Encryption tools are used when the controller communicates sensitive data via email.
Implementation of technical and organizational measures to ensure that data compliance measures are considered and integrated in the data processing activities (privacy by design) (i.e. email accounts: To use official email addresses \u2013 not unofficial, private, or any other non-secured email accounts or non-licensed programs).
For online services, it must be ensured that there is an automated way for privacy notices and policies to ensure that individuals are told about their right to object, clearly and separately, at the point of \u2018first communication\u2019.
The controller respects and treats everyone\u2019s personal data with the same respect he\/she would wish for his\/her own. For that reasons the following are considered:
Minimizing the generation of personal data by email and on paper \u2013 the less personal data are being created and circulated, the easier it is to protect. Only send information which is necessary for the handling of the case.
Cybersecurity \u2013 Ensure that computer systems are secured and make use of security measures such as password protection and secured email servers when transferring attachments containing passports, medical reports, contracts of employment etc.
Anonymization \u2013 Aim to use identifiers for individuals, instead of names.
Start afresh \u2013 if the controller cannot avoid identifying an individual, do so once and then start a new email so that the same personal data is not repeated in the email chain.
Before using \u201creply all\u201d, check that it is appropriate that everyone in the circulation list should actually receive the e-mail you are about to send.
It may be worth setting out special precautions to be taken when information is in particularly risky situations, such as being worked from home, from personal mobile phones etc.
Common situations which may be worth mentioning include whether staff contact details may be given over the phone This principal may be relaxed in the case of information which poses a low risk: for example, a list of business contacts may be made generally available, even if this means people having access who don\u2019t strictly need it.
When access to data or sensitive data is required between Company\u2019s personnel department a request must be send to DPO of the Company. In that case there will always be cases where the organisation feels it is right to break confidentiality, and the DPO will decide on a case-by-case basis whether this is appropriate.<\/p>

I. Communication with Data Subjects
The Company\u2019s \u201d Privacy Policy is available on the \u201cCompany\u2019s \u201d website.
Any modification will be posted on it.
Company\u2019s recommendation that data subject review Companies website periodically so as to be always informed as to how Company protect and process its personal information<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

The Company MARKOPOULOS IL. NIKOLAOS, CAMPING \u201cMETHONI\u201d, (hereinafter called The \u00abCompany\u00bb), which is located at Methoni, Messinias, 24006, in order to carry out effectively, everyday business functions and activities collects and processes personal data of the following data subjects: A) personnel\u2019s, personal data B.) clients personal data and C.) external associates \u201cthird parties\u201d (hereinafter categories […]<\/p>\n","protected":false},"author":3,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"footnotes":""},"class_list":["post-1662","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/camping-methoni.gr\/en\/wp-json\/wp\/v2\/pages\/1662","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/camping-methoni.gr\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/camping-methoni.gr\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/camping-methoni.gr\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/camping-methoni.gr\/en\/wp-json\/wp\/v2\/comments?post=1662"}],"version-history":[{"count":4,"href":"https:\/\/camping-methoni.gr\/en\/wp-json\/wp\/v2\/pages\/1662\/revisions"}],"predecessor-version":[{"id":1906,"href":"https:\/\/camping-methoni.gr\/en\/wp-json\/wp\/v2\/pages\/1662\/revisions\/1906"}],"wp:attachment":[{"href":"https:\/\/camping-methoni.gr\/en\/wp-json\/wp\/v2\/media?parent=1662"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}