Forest Suites Boutique Hotel  is committed to protecting and respecting your privacy. We are fully complied with GDPR policies.

Please read this policy as it contains important information about the way we are collecting information about you on this site through written or verbal communications with us, when you visit our property, through other offline interactions, or from other sources and how we collect, use and disclose this kind of data.

​

By using any of our products or services and/or by agreeing to this Policy, you understand and acknowledge that we will collect and use personal information as described in this Policy.

​

Personal Data We Collect –Sensitive Data- Minors under 16

​

Personal data means any information relating to an identified or identifiable natural person.

We collect personal data in accordance with law at every touchpoint and in conducting every aspect of our business such as name, mailing address, billing address, email address, phone number, social media profiles; information related to your reservation, nights of stay; information related to the purchase and receipt of products or services; personal characteristics, nationality, passport number and date and place of issue, date of birth, food preferences related with religion, lifestyle or health state; payment information, such as your payment card number and other card information, as well as authentication information and other billing and account details associated with mobile billing; information about vehicles you may bring onto our properties; reviews and opinions about our property; hotel, airline and rental car packages booked; groups with which you are associated for stays at hotels;

Unless specifically requested, we ask that you not send us, and you not disclose, by any means any sensitive personal data (e.g., data related to racial or ethnic origin, political opinions, religion, ideological or other beliefs, health, biometrics, or genetic characteristics, criminal background, trade union membership, or administrative or criminal proceedings and sanctions).

All our services are not directed nor meant to be offered to individuals under the age of sixteen unless they are attended by parents or other legal custodians, and we request that they not provide Personal Data through the Services.

We also collect details and personal data on joint travelers, including their names and age. We may also collect information related to conversations, including recording or monitoring customer service calls for quality assurance and training purposes, and other communications such as in-app messages and SMS.

We may also use closed-circuit television and other security measures, where permitted by law, at our properties that may capture or record images of guests and visitors within our properties in common areas, as well as information related to your location while on our properties (via keycards and other technologies). In addition, we may collect personal data in connection with on-property services, such as concierge services, health clubs, spas, activities, child care services.

If you connect with us through social media or apps, we may collect certain information from your social media account consistent with your settings within the social media service, such as location, check-ins, activities, interests, photos, status updates, and friend lists. We may also allow you to enter into contests to provide photos, such as of your stay with us, which you may share with your connections on social media for votes, shared offers, or other promotions.

There may be other data that do not reveal your specific identity or do not directly relate to an individual such as the browser and device data, app usage data, data collected through cookies, pixel tags and other technologies, IP Addresses, other demographic data, and other data provided by you.

Forest Suites Boutique Hotel has a limited number of Internet providers to offer Internet access to our guests. Your use of on-property Internet service is subject to the third-party Internet provider’s terms of use and privacy policy.

​

How We Collect Personal Data

We generally collect this information directly from you, but in some cases, we may collect your information from other sources. We collect data through:

• Online Services. We collect Personal Data when you make a reservation, purchase goods and services from our Website, communicate with us, or otherwise connect with us or post to social media pages, or sign up for a newsletter or participate in a survey, contest, or promotional offer.

• Property Visits and Offline Interactions. We collect Personal Data when you visit our properties or use on-property services, such as restaurants, concierge services, health clubs, child care services. We also collect Personal Data when you attend promotional events that we host or in which we participate, or when you provide your Personal Data to facilitate an event.

• Customer Care Center. We collect Personal Data when you make a reservation over the phone, communicate with us by email, fax, or via online chat services, or contact customer service. These communications may be recorded for purposes of quality assurance and training.

• Business Partners. We collect Personal Data from companies with whom we partner to provide you with goods, services, or offers based upon your experiences at our properties or that we believe will be of interest to you, such as travel and tour partners and travel booking platforms. Please note that this Policy applies to our processing of personal data on behalf of and subject to the instructions of third parties such as business partners.

• Internet-Connected Devices. We collect Personal Data from internet-connected devices available in our properties.

In any and all of the cases above you do not have to provide us with your personal data. However in certain cases, for security reasons or for the purposes provided by laws, if you do not wish to provide us with your personal data, it may mean that you are unable to use our services. For example, we may be unable to complete any booking you may wish to make.

Processing and retaining your data

We process your personal information exclusively for the purposes of providing our services to you according to the applicable laws. The purposes of processing your data are to authenticate you when checking in to our property when logging in to our website and/or wi-fi; to fulfill your reservations requests and/or pre-arrival; to process a payment; to customize your stay and your experience in our property according to your personal preferences; to allow you to participate in contests, offers and/or to our reward/loyalty program;  to measure and obtain data for administrative and other communication purposes and in order to operate and improve the effectiveness of our services, our web sites and the programs and applications related the operations of our business to your benefit; for data analysis, audits, security and fraud monitoring and prevention (including with the use of card keys, and other security systems); to comply with applicable law.

We only keep your personal data for as long as is required for the reasons explained in this privacy policy. In some cases, we keep transactional records (which may include your information) for longer periods if necessary to meet legal, regulatory, tax, or accounting needs. We will also retain information if we reasonably believe there is a prospect of litigation. The criteria used to determine our retention periods include:

-The length of time we have an ongoing relationship with you and provide the Services to you.

– Whether there is a legal obligation to which we are subject.

– Whether retention is advisable considering our legal position (such as, for statutes of limitations, litigation, or regulatory investigations).

Disclosure of your personal data

We share your personal data with third parties only in exceptional cases.

Third parties who may share with or received personal data from us may be business partners who process a specific part of our business on our behalf, such as the booking management when booking through our website, or internet provider when access our wi fi. They are engaged to us by contracts and they all provide sufficient guarantees to implement appropriate technical and organizational measures in such a manner that processing will meet the requirements of law and ensure the protection of the rights of the data subject.

We share your personal data with third parties upon your request in which case you will be considered to have given your consent (visits arrangements, car rentals, payments by third parties, etc) and/or after having your explicit consent for promoting our business, for having your reviews for example review express through TripAdvisor. All services provided by third parties are not related to our own services.

We may share personal information when it is required or authorized by law.

Our site may contain links to third-party websites operated by parties other than our business. These linked sites are not under our control, and therefore we are not responsible for the operation, content, privacy practices, or security of any such linked site. If you provide any of your personal data to third parties you will be treated in accordance with the privacy policy of that third party and therefore we encourage you to be aware and read the privacy policy of each and every website that collects personal information.

​

​

Your rights

According to applicable laws, you have the right to information, access, rectification, blocking, and/or requesting deletion and objection to process, to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal, to lodge a complaint with the supervisory authority (Hellenic Personal Data Protection Authority) and to data portability, in relation to the processing of your personal data.

If you have any questions or requests regarding your privacy while using our websites and/or services, or in case you want to exercise your rights, please contact us :

………

Security Measures

We process your data at all times in an absolutely confidential way. We use reasonable physical, electronic, and administrative safeguards to protect your Personal Data from loss, misuse, and unauthorized access, disclosure, alteration, and destruction, taking into account the nature of the Personal Data and the risks involved in processing that information. We maintain the mandatory duty to secrecy with regard to said data, in accordance with the provisions set out in applicable regulations, and to this end, we use measures of a technical and organizational nature required to guarantee the security of data and prevent them from being altered, lost, processed or accessed illegally, depending on the state of the technology, the nature of the stored data and the risks to which they are exposed.

​

Additional privacy information

The options provided below allow you to express your preferences: what and how much you share with us and when and how you hear from us.

​

Cookies policy

A “cookie” is a small text file that is placed onto an Internet user’s web browser or device and is used to remember as well as obtain information about that party. You might be assigned a cookie when visiting our websites or when using our mobile applications.

​

We may have to change, modify or amend this Privacy Policy in order to comply with the evolving regulatory environment or the needs of our business. You are responsible for checking this Privacy Policy when you visit the Site to review the current policy. All amended terms shall automatically be effective 30 days after they are initially posted on the Site.