PRIVACY POLICY

PERSONAL DATA PROTECTION

Privacy and the Protection of Personal Data is a top priority for our company «MID EAST International Travel Ltd.» The management and protection of the personal data of individuals visiting the MID EAST International Travel Ltd. website or using its services are subject to the following terms as well as the provisions of national, European, and international law concerning the protection of individuals, the processing of personal data, as applicable. Please read them carefully.

By using our website, you unreservedly accept the practices described in this Privacy Policy.

1. General Information

The company MID EAST International Travel Single Member Limited Liability Company collects and processes «personal data» of visitors/users of the website only when they voluntarily provide it during their visit to the website or when they use its services. «Personal data,» meaning information that can be used to identify or contact an individual, as well as other information concerning that individual, collected by the company includes: full name and email address.

In this contractual relationship, where you are the (Subject) of the Personal Data, our Company operates as the Data Controller of your Personal Data (Article 4 of Regulation (EU) 2016/679).

2. Type and Method of Collection of Personal Data

A visitor to our website can visit many pages without needing to provide any information about their personal data. However, the company may request the visitor/user of the website’s services to provide their personal data in the following cases:

• For issuing a ferry ticket: You will be redirected to a secure third-party provider website where you provide your full name, mobile number, and email address. In some cases, passport details or ID number may be required to travel to certain destinations.
• For purchasing a gift card from our website: You provide your full name, mobile number, and email address. Additionally, you provide the complete Billing Address. The information will be sent to us in the form of an email, and we may use your details to contact you regarding the purchase or processing of your reservation. If a purchase is made from our website using a debit or credit card, you are always redirected to a secure bank environment for your purchase. We never collect your bank card information, nor will we ever ask for card details such as card number, CCV, or your card’s PIN while you remain on our website.
• When participating in competitions, surveys, and research: You fill out forms where you are required to provide only your email address. Optionally, you may provide your full name, mailing address, and other requested information.
• When redirected to third-party websites: The privacy policy changes according to the policy of the respective provider.

3. Communication via email or contact form:

When you communicate via email or contact form, you provide data (your email address, possibly your full name, and your phone number), which we will store to process your request.

4. Newsletter:

By subscribing to our newsletter, you give your consent in accordance with Article 6, paragraph 1a of the GDPR, to receive our newsletter, which will inform you about our current offers. When subscribing to the newsletter, we store the time of registration and confirmation. The only mandatory information required for subscribing to the newsletter is your email address. Providing additional data is optional and will be used for personal communication with you. In every email we send, you have the option to withdraw your consent to receive the newsletter.

5. Sharing your personal information:

MID EAST International Travel Ltd. does not disclose, share, or make available personal data of website visitors to third parties and respects the confidentiality of your personal data and information. Personal data may become accessible and processed by third parties, such as ferry companies, only when a service purchase is made through our website. Data sharing with third parties occurs only when necessary for the purchase of a service. The data shared is minimal and relevant to the service purchase you selected unless disclosure is permitted by law or court order. The privacy policy followed by these companies aligns with the one presented here. Your personal data may be transferred to third countries if you travel to those destinations. Data processors in third countries are required to comply with European data protection regulations and are contractually obligated to provide appropriate safeguards concerning your data transfer.

6. Cookies and Other Technical Information

When you visit www.mideast.gr, we will send a «cookie» to your computer. Cookies are small files stored in your browser that save information about your use of the website on your hard drive. This allows us to recognize your computer the next time you use our website or make a reservation. Please note that all information included in cookies is encrypted for security reasons. You can always choose to receive only the necessary cookies for the website’s operation and not receive any advertising cookies from www.mideast.gr.

7. Protection and Security of Personal Data

The Company will not transfer or disclose the personal data of the Data Subject without their consent to third parties not related to it, except in compliance with court orders and the implementation of relevant legal provisions and only to the competent authorities. The Company takes all necessary security measures to protect the personal data of the Data Subject from unauthorized access, alteration, disclosure, and destruction. Only authorized employees of the Company are permitted to access the personal data of the Data Subject.

For any questions, clarifications, or comments regarding this personal data protection policy, or to submit objections and exercise their legal rights, website visitors/users can contact the Company by sending an email to dpo@mideast.gr.

8. Policy on Transactions with minors

MID EAST International Travel Ltd. does not engage in transactions with children. If we become aware that a user is under 16 years old, the personal information sent to us will be used to inform them that parental consent is required to complete the purchase.

9. Right of Access, Processing, and Deletion of Your Data

You have the right to access your personal data processed by our Company and the right to request the correction of any inaccurate data concerning you (Article 15 of Regulation (EU) 2016/679). Considering the purposes of processing carried out by our Company within the framework of our contractual relationship, you may also request the completion of incomplete personal data, including by providing a supplementary statement to our Company (Article 16 of Regulation (EU) 2016/679).

Right to Erasure («Right to be Forgotten»): At any time and at your absolute discretion, you have the right to request from our Company, which acts as the Data Controller in our contractual relationship, the deletion of your personal data.

**Any request related to the modification, change, or cancellation of your personal data processed by our company can be sent via email to dpo@mideast.gr**

10. Storage and Retention Period of Personal Data

Personal data sent via the contact form will be retained for as long as needed until your service request is completed and will be stored on a computer within our company.

Upon completing a service purchase through our website, your data will be stored on a computer within our company for as long as necessary to ensure our company is in full compliance with Public Tax Authorities. In any case, this data will be deleted after a decade.

Our server, which stores and protects your information, is located within Greece.

11. Changes to the Privacy Policy

We may update our privacy policy from time to time. We will post any new version of the privacy policy on our website and inform you of significant changes via email.