Privacy Statement: How the House Handles Your Data

In this Policy the following terms shall have the following meanings:

• "Account" means an account required to access and/or use certain areas and features of Our Site;
• "Cookie" means a small text file placed on your computer or device by Our Site when you visit certain parts of Our Site and/or when you use certain features of Our Site;
• "Our Site" means this website, https://greekconcierge.com;
• "UK and EU Cookie Law" means the relevant parts of the Privacy and Electronic Communications Regulations 2003;
• "We/Us/Our" means Greek Concierge, the business name controlling and maintaining Our Site

Depending upon your use of Our Site, we may collect and hold some or all of the personal data set out below, using the methods also set out below. Please also see section 14 for more information about our use of Cookies and similar technologies.

• Identity Information: We collect identity information such as your name, title, date of birth, and gender directly from you when you register on our site, attend our events, or via third parties.
• Contact Information: Your contact information, including address, email, social media profiles, and phone number, is collected directly from you as well as from third-party sources.
• Payment Information: When you purchase tickets or services from us, we collect your payment information, such as card details and bank account information, directly from you.
• Transaction Information: Details about your payments and purchases made with our company are collected directly from you during the transaction process.
• Marketing Preferences: If you opt-in to receive marketing communications from us, we collect your preferences for email, SMS, and postal marketing directly from you.
• Newsletter Subscription: When you subscribe to Letters from Greece, our occasional newsletter, we collect your email address and, as a record that you consented, the date and time of your subscription, your IP address, the page you subscribed from, and basic technical details of the browser you used. Submitting the subscription form is itself the consent — no confirmation step is required — and each letter carries a link by which you may withdraw it.
• Recruitment Information: When you apply for a position through Our Site, we collect what you enter on the application form: the position you are applying for; your title, first and last name, email address, telephone number and country; any LinkedIn or Instagram profile you choose to give us; the languages you speak; your written answers to the questions the form asks; where you heard about us; and, where the position is an internship, whether you are taking it as a credit-bearing placement required by your course. We also record the date and time of your application, your IP address, the page you applied from, how you reached Our Site, and basic technical details of the browser you used. We do not ask you to send a CV or any other document, and Our Site provides no means of attaching one. Should we need anything further, we will ask you for it directly.

We will only keep your personal data for as long as necessary for the purposes for which it was collected, including to meet any legal, regulatory, accounting or reporting requirements.

In general, we keep:

• Identity & Contact Data: While you have an active Account/relationship with us
• Payment & Transaction Data: For 6 years after transaction for tax/legal purposes
• Marketing Preferences: Until you withdraw consent/opt-out
• Newsletter Subscription: Until you unsubscribe. We then retain a minimal record that you unsubscribed, so that we do not write to you again.
• Recruitment Data: For 12 months after we reach a decision on your application, so that we may consider you for a position that opens in the meantime and answer any question about how your application was handled. Where we go on to engage you, your application is kept for as long as that engagement lasts instead. You may ask us to erase it at any point, using the details in Part 15, and we will.

We share your personal data with the service providers that operate our business. Each acts on our instructions, under a written agreement, and may use your data only as necessary to provide its service to us. They fall into the following categories: website hosting and infrastructure; hosted database and authentication; transactional email delivery; secure storage of documents; and, where we are required to carry out screening checks, sanctions and politically-exposed-persons screening.

We will tell you which providers we use in any of those categories if you ask us, using the details in Part 15.

We may also share your data with other companies in our corporate group, or disclose data to legal/regulatory authorities if required.

In the event we sell or reorganise our business, your data may be transferred to the successor organisation.

Where we share data with third parties, we put contractual and security measures in place to protect your data and ensure compliance with data protection law.

If you want to know what personal data we have about you, you can ask us for details by making a "subject access request". All such requests should be made in writing and sent to the email or postal addresses shown in Part 15.

There is normally no charge for a subject access request. However, if your request is 'manifestly unfounded or excessive' (for example, if you make repetitive requests) a fee may be charged to cover our administrative costs.

We aim to respond to subject access requests within one month of receiving them, although in some cases we may need more time depending on the complexity of the request.

We take a privacy-first approach to cookies. Our Site only uses essential cookies that are strictly necessary for the website to function properly. We do not use any tracking cookies, analytics cookies, or advertising cookies.

Because we only use essential cookies, there is no cookie consent banner on Our Site. Essential cookies are required for the website to function and do not require consent under privacy regulations like GDPR.

You can control and disable cookies through your browser settings. Most browsers allow you to reject cookies, although this may impact your ability to access certain features of Our Site. For more information, refer to your browser's help menu.

You can find out more information about cookies on Our Site by referring to our Cookies Policy.

For any enquiries related to your personal data and data protection, including making a subject access request, please write to us exclusively via email. To ensure that we can address your request efficiently and comply with data protection laws, kindly provide the following information in your correspondence:

• Your Full Name: So we can verify your identity and locate your data in our system.
• Contact Information: Including your email address and phone number, if applicable, for any follow-up communication.
• Details of Your Request: Clearly state whether you're seeking access to your data, wish to correct or delete your data, or have other data protection concerns. The more specific you are, the better we can assist you.
• Any Relevant Dates: If your request relates to specific interactions or time periods, please include this information to help us narrow down our search.

Please submit your detailed request through our contact form, selecting "Other" as the occasion and including "Data Protection Request" in your message.

We take your privacy seriously and will endeavour to respond to your inquiry as promptly as possible, and in accordance with applicable data protection laws.