TYPE OF DATA PROCESSED | PURPOSE OF THE PROCESSING | LEGAL BASIS FOR THE PROCESSING |
Browsing data (language settings, IP address, device settings, mobile operating system, login information, usage time, URL request, status information, user agent (browser version information), operating system, ID of the user booking and types of data displayed. The website may also collect data automatically via cookies, see the relevant information). | To manage browsing on the website and technical management of the services provided as well as to allow analysis, verify the number of visitors and ensure security and optimal functionality of the website browsing/services for users. | The legal basis for the processing is the legitimate interest of the data controller to ensure the security and optimal functionality of the website as well as to protect their rights. |
Identification and contact data provided voluntarily by the data subject when using the services offered by the website, third-party data provided by the data subject under his/her own responsibility dependent on the booking, data relating to any payment methods provided by the data subject for booking services. | To respond to any requests for information from data subjects and/or provide the services requested by the latter, in particular the management of the travel package/tourist service, booking of services, etc. | The legal basis for the processing is the implementation of the measures adopted on request of the data subject, the execution of a contract of which the data subject is a part or the pre-contractual measures adopted by request of the latter. |
Identification and contact data provided voluntarily by the data subject when using the services offered by the website. | To send communications on initiatives and services to the data subject, offered by the Data Controller through the contact details provided on the website, as well as to send newsletters via email following the registration for the service by the data subject and only after providing specific consent, which will be requested when registering for the service; | The legal basis for the processing is the consent of the data subject, in addition to the legitimate interest of the data controller (in this regard see Recital 47 of Reg. EU 679/2016) to publicise and develop its business, provided that the interests or fundamental rights and freedoms of the data subject do not prevail, taking into account the reasonable expectations of the data subject based on his/her relationship with the data controller. |
Identification and contact data provided voluntarily by the data subject in the use of the services offered by the website, third-party data provided by the data subject under hi/her own responsibility dependent on the booking, data relating to any payment methods provided by the data subject for booking services. | Fulfilment of obligations deriving from laws, regulations, community legislation. | The legal basis for the processing is the fulfilment of a legal obligation to which the data controller is subject; |
Necessary (3) |
|
|
|
NAME | SUPPLIER | PURPOSE | EXPIRY DATE |
ASPSESSIONID | technical | session | |
Lang | technical | 1 year | |
okPrivacy | technical | 1 day | |
|
|
|
|
|
|
|
|
Statistical (9) |
|
|
|
NAME | SUPPLIER | PURPOSE | EXPIRY DATE |
_hjid | www.hotjar.com | statistical | 1 year |
_hjIncludedInPageviewSample | www.hotjar.com | statistical | 30 min |
_hjFirstSeen | www.hotjar.com | statistical | session |
_hjAbsoluteSessionInProgress | www.hotjar.com | statistical | 30 min |
_hjTLDTest | www.hotjar.com | statistical | session |
_ga | statistical | 2 years | |
_gat | statistical | 1 day | |
_gid | statistical | 1 day | |
_gat_ | statistical | session | |
_ga_ | statistical | 2 years | |
_gac_ | statistical | 90 days | |
|
|
|
|
|
|
|
|
|
|
|
|
Marketing (1) |
|
|
|
NAME | SUPPLIER | PURPOSE | EXPIRY DATE |
outbrain_cid_fetch | Outbrain.com | Marketing | 1 day |