PRIVACY POLICY
Information on the Processing of Personal Data
Introduction
ALPHA LINES acknowledges the importance of confidentiality and confidence of the information provided to it and complies with the applicable legislation on the Protection of Personal Data.
For this reason we take the appropriate measures not only to protect but also to ensure that the processing of personal data is always carried out in accordance with the obligations set by the legal framework, both by the company itself, and by third parties who process personal data on behalf of the company.
Please study this Privacy and Protection of Personal Data Statement (hereinafter “the Statement”) in order to learn more about the type of information we collect about you through this website and how we use the information we collect either online or through our professional services, or through communication/cooperation with any third party.
In general, you can visit the ALPHA LINES website without telling us who you are and without providing any personal information. Other times, you may provide us with your personal data voluntarily so that we can provide you with information and/or specific services.
Data Controller – Data Protection Officer (DPO)
ALPHA LINES, based in Piraeus, 7-9 Akti Miaoulis street and ZIP 185 35, email: admin@alphalines.gr, Tel.: 210 4295020, website: www.alphalines.gr kindly informs that, for the purpose of carrying out its business activities, it processes personal data of its customers in accordance with applicable national legislation and European Regulation 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation, hereinafter referred to as ‘the Regulation’) as applicable.
ALPHA LINES has appointed a personal data protection Officer (”DPO”) who takes responsibility for overseeing any questions raised regarding this Privacy Statement. For any clarification regarding this privacy statement, including any request to exercise your legal rights, please contact the DPO at the following contact details.
Categories of information we collect
We reserve the right to collect, process, store and transfer different kinds of personal data about your person, which are as follows:
Identity data include first name, maiden name, surname, user-name or similar identifier, marital status, title, date of birth and gender.
Contact data include billing address, delivery address, email address and phone numbers.
Financial data includes bank account and payment card details.
Transaction data includes details about payments to and from you.
Technical data include Internet Protocol (IP) address, input data, browser type and version, time zone and location, types and versions of browser add-ons, operating system and platform, and other technology on the devices you use to access this website.
Profile data include your user-name and password, ticket purchases made by you, your interests, preferences, comments and responses to surveys.
Usage data includes information about how you use our website, products and services.
Marketing and communications data include your preferences regarding receiving promotional materials from us and third parties and your preferences for communicating with us.
Health data provided by you to better serve you and fulfill your special needs (for example, providing access to people with disabilities).
What are the legitimate reasons for processing your personal data?
The personal data you provide us such as your full name, your contact details, information about the itinerary of your trip, such as your reservation code, details of the transaction with which you made the issuance of your ticket, health information related to the issuance of tickets, or the report of passenger accidents, as well as the transportation of patients on board the ship, are processed by our side only where there is a legitimate reason.
Legitimate reasons for processing your personal data:
The provision of the services you assign to us and wish to receive from us and thus the fulfillment of our contractual obligations in this context.
The preservation and protection of legitimate interests, both yours and ours. For this purpose, we use on-board Closed-Circuit Television (CCTV) and security cameras in order to be able to monitor and protect the safety of individuals, materials, facilities, including the ship.
Compliance with an obligation imposed by law, such as the return of fares, the management of your claims for compensation, the discount of fares to specific categories of passengers, etc.
The consent you provide under the specific conditions set by the legal framework, in order to receive updates for services, occasional personalized offers according to your personal preferences either from ALPHA LINES, or from third partner companies, which process your personal data in accordance with the applicable framework each time.
It is noted that the provision of certain personal data is a requirement for the conclusion of the contract (ticket issuance / transfer).
How and why do we use your personal data?
To manage your travel bookings and provide our services.
When you travel with us, we use the information required to provide our services, such as ticketing, check – in, ticket replacement or refund, managing your reservations and serving you as a customer individually or as a group.
For our communication with you and managing our relationship with you.
we may need to contact you by email or by phone for administrative reasons such as confirming your reservations and payments, informing you about your itinerary, managing requests you submit for services not received, any property damage and generally managing your complaints.
For the proper observance of our contractual commitments and the smooth maintenance of our cooperation.
To inform you about our news and offers.
If you have consented to this, we will send you promotional messages for our travel services, updates and offers of ALPHA LINES, sometimes personalized to your preferences and interests if you have chosen so, in order to improve your customer experience.
To improve our services and protect our business interests.
Our business purposes for which we will use your information help us to improve the services provided to you, to meet your expectations, to control transactions from our sales, so as to respond to any requests for questioning your card charges, but also to manage our sales clearances.
To comply with legal obligations.
When, for example, we collect information about passenger accidents, when we manage ticket replacement or refund requests, passenger compensation requests, the keeping of a record of passenger complaints and suggestions. Also, when we process financial data of partners (agents, suppliers, etc.) to meet our tax obligations.
For the protection of our legitimate interests and the protection of persons and goods.
When using Closed-Circuit Television (CCTV) and security cameras in order to be able to monitor and protect the safety of individuals, materials, facilities, including the ship.
Where is your data communicated?
ALPHA LINES kindly informs that it communicates your personal data to the following categories of recipients:
State authorities, law Enforcement bodies where this is necessary for the execution of a service and in accordance with the prescribed procedures, and where it is required, on a case-by-case basis, to provide more information in relation to the passenger list of specific services.
Partners of our company (agencies, call centers, advertising etc.).
ALPHA LINES maintains partners to whom it assigns the processing of personal data on its behalf (e.g. ticketing agencies). In such cases ALPHA LINES remains responsible for the processing of your personal data and defines the individual elements of the processing, and signs a special contract with the partners to whom it assigns execution of processing activities, in order to ensure that the processing is carried out in accordance with the applicable legal framework and that any individual can freely and unhindered to exercise their rights as conferred by the legal framework.
Furthermore, ALPHA LINES may also transmit to cooperating third parties for the purpose of sending promotional materials and information on services and offers, provided that consent has been given by each individual, as mentioned above and that the above applies with regard to the written processing assignment.
Regarding the booking of tickets, the use of the reservation system.
Storage Time
The period of storage of the data is decided on the basis of the following specific criteria:
When processing is imposed as an obligation by provisions of the applicable legal framework, your personal data will be stored for as long as the relevant provisions require.
When processing is performed on a contract basis, your personal data is stored for as long as is necessary for the performance of the contract and for the establishment, exercise, and/or support of legal claims based on the contract.
For the purposes of promoting products and services (marketing activities), your personal data is kept until the withdrawal of your consent. This can be carried out by you at any time. Withdrawal of consent shall not affect the legality of processing based on consent in the period prior to its withdrawal.
What your rights are in relation to your personal data
Every individual whose data is processed by ALPHA LINES enjoys the following rights:
Right of access:
You have the right to be aware of and verify the legality of the processing. Thus, you have the right to access the data and receive additional information about their processing.
Right of correction:
You have the right to study, correct, update or modify your personal data by sending an email to the e-mail address dpo@…. or letter to the postal address of ALPHA LINES.
Right to deletion:
You have the right to request the deletion of your personal data when we process it based on your consent or in order to protect our legitimate interests. In all other cases (such as, indicatively, when there is a contract, obligation to process personal data imposed by law, public interest), this right is subject to specific restrictions or does not exist as the case may be.
Right to restrict processing:
You have the right to request restriction of the processing of your personal data in the following cases: (a) when you contest the accuracy of personal data and verification, (b) when you object to the deletion of the personal data and request the restriction of their use, instead of their deletion, (c) when the personal data is not needed for purposes of processing, but are however necessary for the foundation, exercise, support of legal claims, and (d) when you are opposed to the processing and until it is verified that there are legitimate grounds that concern us and supersede the reasons for which you opposed to the processing.
Right to object to processing:
You have the right to object to the processing of your personal data at any time in cases where, as described above, this is necessary for the purposes of legitimate interests pursued by us as controllers, as well as processing for the purposes of direct marketing and consumer profile training.
Right to portability:
You have the right to receive your personal data free of charge in a format that allows you to access, use and edit it with the commonly used processing methods. You also have the right to request for us to transmit the data directly to another controller, if technically possible. This right exists for the data you have provided to us and its processing is carried out by automated means based on your consent or in execution of a relevant contract.
Right to withdraw consent:
Wherein processing is based on your consent, you have the right to revoke it freely, without prejudice to the lawfulness of the processing based on your consent before you revoke it.
To exercise any of the above rights you can send an email to the e-mail address dpo@alphalines.gr or letter to the above postal address of ALPHA LINES.
Right to complain to the Hellenic Data Protection Authority (HPDA)
You have the right to lodge a complaint with the Personal Data Protection Authority (www.dpa.gr): Call Center: +30 210 6475600, Fax: +30 210 6475628, Email: contact@dpa.gr
Security Of Personal Data
ALPHA LINES implements appropriate technical and organizational measures aimed at the secure processing of personal data and the prevention of accidental loss or destruction and unauthorized and/or illegal access to them use, modification or disclosure. In any case, the way the internet works and the fact that it is free for anyone to access does not allow us to provide any guarantee that unauthorized third parties will never gain the opportunity to violate the applied technical and organizational measures, gaining access and possibly using personal data for unauthorized or unfair purposes.
Profiling
Profiling means any form of automated processing of personal data consisting in the use of personal data to assess certain personal aspects of an individual, in particular to analyse or anticipate aspects relating to their personal preferences and interests or their transportation.
We inform you that profiling for marketing purposes is taking place when you consent to receive updates about our services and offers, personalized to your personal preferences and interests. Finally, profiles may be drawn from social media, the services of which ALPHA LINES uses for the purpose of marketing its services.