Datenschutzerklärung

1. Controller

The controller responsible for data processing on this website and on our social media profiles is:

2. Hosting

We host this website with a hosting provider whose servers are located in Germany and which processes personal data on our behalf (processor). This includes, among other things, the data recorded in the server log files (see section 5). The basis for this is a data processing agreement pursuant to Art. 28 GDPR. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in providing our website securely and efficiently).

3. General information

We treat your personal data confidentially and in accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). For security reasons the website uses SSL/TLS encryption. Personal data is deleted as soon as the purpose of processing no longer applies and no statutory retention periods prevent deletion.

4. Your rights

At any time you have the right to:

• access to your stored data (Art. 15 GDPR),
• rectification (Art. 16 GDPR),
• erasure (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• object to the processing (Art. 21 GDPR),
• withdraw a given consent with effect for the future.

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2-4, 40213 Düsseldorf, Germany.

5. Data collection on this website

Server log files

When you access the website, the provider automatically collects information in server log files that your browser transmits: browser type and version, operating system, referrer URL, hostname of the accessing computer, time of the server request and IP address. This data is not merged with other data sources. The legal basis is Art. 6 (1) (f) GDPR; the legitimate interest lies in the technically error-free presentation and the security of the website.

Contact by email

If you contact us by email, your details will be stored in order to handle your request and for any follow-up questions. The legal basis is Art. 6 (1) (b) GDPR (initiation or performance of a contract) or (f) GDPR (handling your request).

6. Social media (Instagram, TikTok)

We maintain profiles on Instagram and TikTok in order to provide information about our offering “I Love Crete” and to communicate with users. When you visit one of our profiles, the respective platform operators process personal data (e.g. IP address, interactions, device information), including outside the European Union. For the processing that concerns our profiles, we are jointly responsible together with the platform operator (Art. 26 GDPR); we have no influence over the platforms’ further data processing. The legal basis is our legitimate interest in information and communication (Art. 6 (1) (f) GDPR).

Instagram is operated by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Privacy information: privacycenter.instagram.com/policy.

TikTok is operated in the European Economic Area by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin 2, D02 T380, Ireland. Privacy information: tiktok.com/legal/page/eea/privacy-policy/en.

You can exercise your data subject rights both against us and against the respective platform operator.

7. Cookies and tracking

This website does not use cookies or any analytics or tracking services. Fonts are served locally from our own server; external font services (e.g. Google Fonts) are not used.