Privacy Policy
Last updated: 13/11/2025
At Alternation Travel I.K.E. (“we”, “us”, “our”), we deeply care about your privacy and want you to feel confident when sharing your personal data with us. This Privacy Policy explains how we collect, use, and protect your information when you visit our website, subscribe to our newsletter, or use our travel services. By accessing our website or providing your information, you acknowledge that you have read and understood this Privacy Policy.
1. Data Controller
The data controller responsible for your personal information is:
Alternation Travel I.K.E.
Address: Geraki 6-8, Athens, Greece
Email: info@alternationtravel.com
2. Data We Collect
We may collect and process the following categories of personal data:
- Contact details: name, email address, phone number, country of residence.
- Booking details: travel preferences, itinerary choices, accommodation or activity bookings.
- Technical data: IP address, browser type, device type, usage patterns (via analytics cookies).
- Marketing data: email preferences, newsletter sign-ups, and interactions with our marketing materials.
We do not knowingly collect sensitive data (e.g., political opinions, health data) unless strictly necessary for travel arrangements and only with your explicit consent.
3. Purposes of Processing
We process your personal data for the following purposes:
- To provide and manage travel services you request.
- To process bookings, payments, and related travel documentation.
- To send you service-related updates and pre-departure information.
- To improve our website and services through analytics.
- To send newsletters and promotional content (only if you have opted in).
4. Legal Basis for Processing
- Contract performance: to fulfill our obligations under a travel booking or service agreement.
- Consent: for marketing communications and newsletter subscriptions.
- Legitimate interest: to improve services, maintain security, and personalize content.
- Legal obligations: to comply with tax, accounting, or travel regulation requirements.
5. Cookies and Analytics
We use cookies and similar technologies to improve your browsing experience. These include:
- Essential cookies: Required for the website to function properly.
- Analytical cookies: Used to measure traffic, usage patterns, and improve site performance.
- Marketing cookies: Used to deliver personalized offers and newsletters (only with consent).
We use Google Analytics with IP anonymization enabled. Data collected may be processed on Google’s servers, including those outside the EU, under Standard Contractual Clauses (SCCs) to ensure GDPR compliance.
You can manage or withdraw your cookie consent at any time through your browser settings or our cookie banner.
6. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes described above:
- Booking and transaction data: 5 years, in accordance with Greek tax regulations.
- Marketing and newsletter data: up to 24 months of inactivity, unless you unsubscribe earlier.
- Analytics data: retained for 14 months by default.
After these periods, your data will be securely deleted or anonymized.
7. Data Sharing and Third Parties
We only share your data with trusted partners who help us deliver our services, including:
- Local travel service providers (hotels, guides, transportation companies).
- IT and hosting providers.
- Marketing and analytics platforms (e.g., Google, Mailchimp).
All third parties are bound by data processing agreements to protect your information and process it only on our instructions. Some partners may process data outside the European Economic Area (EEA). In such cases, we ensure that adequate safeguards (such as SCCs) are in place.
8. International Transfers
As part of our operations, your data may be transferred outside the EEA, particularly when using services like Google Analytics or email marketing tools. Such transfers are carried out in compliance with GDPR using appropriate legal safeguards, including Standard Contractual Clauses.
9. Children’s Data
Our services are not intended for children under the age of 16.
We do not knowingly collect personal data from minors. If we become aware that we have collected data from a child without parental consent, we will promptly delete it.
10. Your Rights
Under the GDPR, you have the following rights:
- Access: Request a copy of the data we hold about you.
- Rectification: Correct any inaccurate or incomplete information.
- Erasure: Request deletion of your personal data (“right to be forgotten”).
- Restriction: Limit the processing of your data in certain circumstances.
- Portability: Receive your data in a structured, machine-readable format.
- Objection: Object to data processing for direct marketing or legitimate interest purposes.
- Withdrawal of consent: Withdraw your consent for marketing communications at any time.
To exercise your rights, please contact us at info@alternationtravel.com. We aim to respond to all requests within 30 days.
11. Security of Your Data
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption, secure servers, and restricted access to personal data.
12. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Any updates will be posted on this page with a new “last updated” date.
13. Contact Us
If you have any questions, concerns, or complaints regarding this Privacy Policy or our data practices, please contact us at:
Alternation Travel I.K.E.
📍 Geraki 6-8, Athens, Greece
📧 info@alternationtravel.com
You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA) if you believe your rights have been violated.
14. Amendments
Alternation Travel reserves the right to amend or update these Terms & Conditions at any time without prior notice. Any such changes will become effective upon posting on our website.
It is the traveler’s responsibility to review the Terms regularly.