This policy conforms with the General Data Protection Regulation (GDPR) of the EU.
Who we are
staori is a tour operator that is registered as a social cooperative in Greece and is based on the island of Crete.
For detailed information, please see our about page.
What information we collect and why?
When you contact us via email or our contact-forms, your following personal data is requested (Name, Phone, Email, Country of origin, Holiday dates etc.). Photos, as well as your personal opinions may also be collected, if provided by you.
In any case, no personal data is forwarded without your explicit consent.
As part of our processes, internal processing of this personal data may be done only for the following purposes:
- General-purpose communication with you, such as booking or after-sales support, newsletters, invitations to events or trainings etc.
- Long-term data storage and maintenance to analyse issues and evolve / improve our services
- Periodic re-analysis of existing data in light of new findings or demands
What is the applicable legal basis that allows us to process personal data?
We need to process data for the purposes described above to pursue our legitimate interest, namely to:
- be able to contact you
- be able to conduct related longitudinal research
How long we retain your data
Your personal data will be treated confidentially and processed for as long as you do not withdraw your consent.
Objecting or withdrawing your concent
You may contact us (the “Data Controller“) to withdraw your consent to process your personal data at any time, to obtain a copy of any personal data we hold on you at any time, or to correct any errors in any personal data we hold on you. If you have any complaints about how we handle your data, you have the right to make a complaint to competent supervisory authority.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.