Privacy Policy

Last updated

This policy explains how we handle personal data when you use thegreekoutdoor.com, send us a message or book a trip through it. We collect only what we need to answer you and to handle your booking.

Who we are

The Greek Outdoor is a brand of The Greek Outdoor LLC, which presents and sells the experiences on this website as an intermediary and is responsible for your personal data (the "controller" under the EU General Data Protection Regulation, GDPR). We work online and have no establishment in Greece or elsewhere in the EU. The trips take place in Greece and are carried out by licensed Greek providers, who have the boats and crews; you meet our representative at Porto Carras marina, Halkidiki, Greece.

  • Controller: The Greek Outdoor LLC, 16192 Coastal HWY, Lewes, Delaware 19958, United States
  • Representative in the EU (Article 27 GDPR): Symeon Ziogou, Porto Carras marina, Halkidiki, Greece, +30 6934 854 854
  • Email: hello@thegreekoutdoor.com
  • Phone: +30 6934 854 854

What we collect and why

When you send us a message

Through the contact form we receive your name, email address, phone number (if you give it), the trip you are interested in, your dates, the number of guests and your message. The same applies to the details you share when you email, call or message us on WhatsApp.

We use them to answer you and to prepare an offer. The legal basis is taking steps at your request before a contract (Article 6(1)(b) GDPR) and our legitimate interest in replying to people who contact us (Article 6(1)(f)).

When you book

Bookings are made through the Kleesto booking calendar on our pages. Kleesto processes your booking details (such as your name, contact details, date and number of guests) and your payment through its payment provider. We receive the booking details we need to handle your booking and pass it on to the provider, and we do not store card details.

We use booking details to handle your booking, to give the provider who carries out your trip what it needs, to stay in touch with you about it, and to issue invoices. The legal bases are the contract with you (Article 6(1)(b)) and our legal obligations, such as tax and accounting rules (Article 6(1)(c)).

When you visit the website

The site is hosted by Cloudflare. To deliver pages and protect the site against attacks, Cloudflare processes technical data such as your IP address, browser type and the pages you request. The contact form uses Cloudflare Turnstile, which checks technical signals from your browser to tell people from automated spam. The legal basis is our legitimate interest in a secure, working website (Article 6(1)(f)).

Visitor statistics (Google Analytics)

If you accept cookies in the banner, we use Google Analytics 4, a service of Google Ireland Limited, to count visits and see which pages and trips people look at, so we can improve the website. It records the pages you view, how you reached the site, your device and browser type and your approximate location (country or city). Google Analytics does not store your IP address. The legal basis is your consent (Article 6(1)(a) GDPR). Until you accept, Google Analytics is not loaded at all.

We do not use advertising or social media tracking on this website.

Cookies

Cookies are small files a website stores in your browser. This website sets cookies only if you accept them in the cookie banner, and only for Google Analytics:

  • _ga: tells visits from the same browser apart with a random identifier. Kept for 2 years from your last visit.
  • _ga_RH9MHJXET3: keeps track of your current visit. Kept for 2 years from your last visit.

Your answer itself is saved in your browser's local storage (not a cookie) as tgo-consent, so the banner does not ask again on every page. It holds only your choice and its date, and after 12 months we ask again.

Changing your mind

Use Cookie settings at the bottom of every page to accept or decline at any time. If you decline after accepting, Google Analytics stops at once and its cookies are deleted from your browser. You can also delete cookies and site data in your browser's settings, and the banner will ask again.

The booking calendar (Kleesto) and the spam check on the contact form (Cloudflare Turnstile) are loaded from their providers and may store technical information in your browser that they need to work. Their own privacy policies describe this.

Who we share it with

We never sell your data. We share it only with the people and services that help us answer you and handle your booking:

  • Kleesto, our booking system, and its payment provider.
  • Cloudflare, which hosts the website, protects it, runs the spam check and delivers contact form messages to our inbox (privacy policy).
  • Google, whose Workspace service hosts our email and, if you accept cookies, whose Google Analytics service counts visits (privacy policy).
  • Our internal customer relationship system, where we keep track of enquiries and bookings.
  • The licensed Greek provider that carries out your trip with its own boat and crew, which receives the details it needs to welcome you on board.
  • Public authorities, when the law requires it.

Where your data is processed

Because The Greek Outdoor LLC is based in the United States, your personal data is processed in the United States as well as in Greece, where your trip takes place. Some of our providers, such as Cloudflare and Google, may also process it in other countries outside the European Economic Area. Where the GDPR requires it, these transfers rely on recognised safeguards, such as the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework.

How long we keep it

  • Messages that do not lead to a booking: up to 24 months after our last contact, then deleted.
  • Bookings and invoices: for as long as the tax and accounting laws that apply to us require.
  • Technical website logs: for the short period Cloudflare keeps them for security and delivery.
  • Google Analytics statistics: up to 14 months, after which Google deletes them.

Your rights

You can ask to access your personal data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time.

Write to hello@thegreekoutdoor.com and we will reply within one month. If you believe we have not handled your data properly, you can complain to the data protection authority of the EU country where you live or where your trip took place. In Greece this is the Hellenic Data Protection Authority (www.dpa.gr).

Children

Families with children are welcome on board, but messages and bookings must come from an adult. We do not knowingly collect personal data from children through this website.

Changes to this policy

We will update this policy when the way we handle personal data changes. The date at the top of the page shows when it last changed.