- Collection of Personal Data
• We collect your personal data when they are provided by you (e.g. during our personal or/and telephone or/and internet contact).
• We collect your personal data during managing your membership at Manta Ray
• We collect or receive personal data when you visit our website, whereas your device and browser might automatically reveal certain information (like the type of device, operation system, browser type, browsing settings, ip address, language settings, date and time of visit at a website as well as other information). - Records of Personal Data
We keep, according to law, records of your interaction with us, as well as details about your membership. - Type of Personal Data
Personal data: Name, Surname, Gender, Date of Birth, ID Number, Passport Photos, Signature, Identity data (passwords, mother’s name, questions and answers for obtaining a PIN code), photos and other appearance information.
Contact data: address, phone number, mobile phone number, email address
Family data: Names and contact information of family members and dependent family members.
Billing data: Billing address, card numbers, card holder name, account owner name, information on instructions and transactions. - Processing of Personal Data:
– Our reasons for processing personal data are the following:
4.1. Subscription of new members and GDPR compliance
4.2. Maintaining relationships and services, performing duties necessary for providing desired services and contacting you about those services.
4.3. Marketing / Research: Communication with you by any means according to law.
4.4. Managing communication systems, functioning and security control of the informatics department and electronic security.
4.5. Health and security evaluations and file-keeping.
4.6. Market research or member satisfaction survey, improving our services and products.
4.7. Security.
4.8. Compliance with legal obligations.
4.9. Exercising our rights.
– Legal bases for the above types of processing:
a. Processing is necessary for the compliance to a legal obligation.
b. Processing is necessary for fulfilling any contract with you or to take measures prior to making a contract.
c. Having an legal interest to process your data, as long as this does not violate your interests or fundamental rights and freedoms.
d. We have your prior consent about processing (only valid for voluntary processing, not for processing that is necessary or obligatory in any way). - Disclosure of personal data to third parties
We might disclose your personal data to:
• you and, where necessary, your family, partners, representatives
• accountants, auditors, insurers, financial advisors, lawyers or other external consultants of Manta Ray, according to binding contracts of confidentiality
• debt collection companies
• processors of third parties (like payment services or transport companies) anywhere in the world, according to the requirements mentioned below
• any party necessary for exercising our rights according to law
• any party necessary to prevent, inquire or prosecute illegal actions, including protection from threats against public safety
• any buyer, in case that we sell or transfer part or the whole of our business or its property (even in case of restructuring, reorganizing, dissolution or liquidation
Our website might use plugins or third party content. If you chose to interact with any of this content, your personal data might be shared with the provider of a third party. We recommend that you check the privacy policy of this third party before interacting with the above contents. - Data Security and Accuracy
The data collected is relevant to the purposes of processing and is restricted to the data necessary for fulfilling these purposes. The processing of personal data is performed in a way that ensures privacy.
We declare herewith that we apply all necessary and adequate technical and organizational safety measures for the protection of your data from deliberate or accidental destruction, loss, change, unauthorized disclosure, unauthorized access or any other illegal or unauthorized types of processing according to law.
We take all necessary measures to ensure that the personal data we process is precise and up to date. Imprecise data is erased or corrected immediately. - Duration of processing
Our company possesses and processes your personal data for the time necessary to fulfill the purposes of processing.
a. we keep copies of your personal data only for as long as we maintain a contractual relationship with you or for the period that your personal data is necessary to fulfill the purposes mentioned in this Policy and for which there is a legal base.
b. The duration of processing equals the period of limitation for any kind of claim, plus two (2) months. If lawsuits are filed, we might process your personal data for the time necessary to solve the dispute.
c. After the end of the duration of processing, we will either erase, destroy or otherwise render unusable the data concerned. - Your rights
• Right to information, as to which data is collected, so as to clarify the way and purpose of use and processing of your personal data.
• Right to access to your personal data, the purposes of processing, the types of data and the recipients or the types of recipients.
• Right to rectification of incorrect data as well as the right to complete missing data.
• Right to erasure of your personal data, without prejudice to the obligations and rights of the company to maintain this data according to the law.
• Right to restriction of processing of your personal data, when their accuracy is disputed, or their processing is illegal, or the purpose of their processing is no longer valid, under the circumstance that there is no legal reason to maintain them.
• Right to data portability of your personal data to another controller, in a structured, commonly used and machine-readable format (e.g. CD), under the circumstance that the processing is based on your consent or on a contract and it is done automatically. (The above right does not include processing that is necessary according to Art. 20 of the GDPR Regulation.).
• Right to object, on grounds relating to your particular situation, with the exemption of the case of processing for the purpose of fulfilling a duty executed for the public interest or during the exercise of public authority that has been bestowed upon our company or for the pursuing of the interests of the company or a third party (Art. 21 of the GDPR Regulation), including the decision making based on an automated processing and profiling (art 22 of the GDPR Regulation).
• Right to withdrawal of consent to processing (for any processing based on your consent), at anytime, without any influence on the legality of processing that was based on your consent before the withdrawal.
• Right to file a report to the Authority for the Protection of Personal Data, as the competent supervising authority for the upholding of the GDPR Regulation (www.dpa.gr).
Exercising of the above rights will be based solely on written application to our company, 14 str Spefsippou, PC. 106.75.
Our company responds without delay, within a month from receiving your application at the latest. The above deadline can be extended for two months, if necessary, with a written justification of the reason of extension.
If an application does not abide to the above conditions or to the law, our company has the right to reject it.
Our company has the right to amend this personal data policy, according to law.
