We're committed to the confidentiality and security of the personal data you give us and we will only ever collect,
use and share your information in ways that are described in this policy.
1.Who we are
This Site is operated by Seacret Beach Club, a company registered in Zakynthos trading as “Seacret” (“we” “us” and “our” being interpreted accordingly).
2.About this policy
3.What personal data we collect
4. Why and how do we use your personal data?
5.Sharing of information with third parties
We share your information only where you ask us to, where it's a necessary part of doing business with you and providing you with the services, or where we need to for legal reasons. Also, companies that help us deliver our services will collect and use your data on our behalf. We share your personal data with third parties in the following situations: Service Providers: Seacret Beach Club, like many businesses, hires selected third parties who act on our behalf to support our operations, such as (i) card processing or payment services (see the section below headed “Payment Information”), (ii) credit reference agencies to protect against possible fraud, (iii) IT suppliers and contractors (e.g. data hosting providers or delivery partners) as necessary to provide IT support and enable us to provide membership services and other goods/services available on this Site or to guests, (iv) web analytics providers, (v) providers of digital advertising services and (vi) providers of CRM, marketing and sales software solutions. Pursuant to our instructions, these parties may access, process or store your personal data in the course of performing their duties to us and solely in order to perform the services we have hired them to provide. We require any Third Party Processor which handles information on our behalf to do so pursuant to contractual terms which require that the information is kept secure, is processed in accordance with applicable data protection laws, and used only as we have instructed and not for that Third Party Processor's own purposes (unless you have explicitly consented to them doing so). Third Party Processors may be located in, or process your information, outside of the country in which you are based. Where appropriate we will take steps to ensure that recipients outside your country comply with your country's privacy laws. Administrative and Legal Reasons: if we need to disclose your personal data (i) to comply with a legal obligation and/or judicial or regulatory proceedings, a court order or other legal process and to prevent, detect or prosecute illegal or suspected illegal activities, including fraud, or to prevent other damage or where necessary in response to legally binding requests, legal action against us, or to enforce our rights and claims. (ii) to enforce our Terms & Conditions or other applicable contract terms that you are subject to or (iii) to protect us, our guests, or contractors against loss or damage. This may include (without limit) exchanging information with the police, courts or law enforcement organizations.
6.How do we keep your personal data secure?
Keeping your personal data secure is our highest priority. We limit access to only those Seacret Beach Club employees who have to come into contact with your information to do their jobs and deliver our services. Unfortunately, no website or app can guarantee complete security but We will take appropriate technical and organizational security measures to protect the personal data that you submit to us against unauthorized/unlawful access or loss, destruction or damage, although we cannot 100% guarantee the security of personal data that you provide to us online.
7. Your legal rights
Certain applicable data protection laws give you specific rights in relation to your personal data. In particular, if the processing of your personal data is subject to the GDPR, you have the following rights in relation to your personal data: You have the right to ask us for a copy of your personal data; to correct, delete or restrict processing of your personal data; and to obtain the personal data you have provided to us in a structured, machine readable format. In addition, you can object to the processing of your personal data in some circumstances (in particular, where we don't have to process the data to meet a contractual or other legal requirement, or where we are using your personal data for the purposes of direct marketing). You may ask us to restrict or ‘block’ the processing of your personal data in certain circumstances, such as where you contest the accuracy of the personal data or object to us processing it. We will tell you before we lift any restriction on processing. If we shared your personal data with others, we will tell them about the restriction where possible. If you ask us, and where possible and lawful to do so, we will also tell you with whom we shared your personal data so you can contact them directly. Where we have asked for your consent, you may withdraw consent at any time. If you ask to withdraw your consent to Seacret Beach Club processing your data, this will not affect any processing which has already taken place at that time. These rights may be limited, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which we are required by law or have compelling legitimate interests to keep. If you have unresolved concerns, you have the right to complain to a data protection authority. If you wish to exercise any of these rights please contact us as described in the “Contact” section below. We may also need to ask you for further information to verify your identity before we can respond to any request.
If you have any questions or complaints regarding the Site or these Terms, you can contact us by emailing firstname.lastname@example.org.