PERSONAL DATA PROTECTION

PERSONAL DATA PROTECTION

The company under the name "AIR INTERSALONIKA HELLENIC AIR TRANSPORT AND TOURISM SINGLE MEMBER S.A." (hereinafter: AIR INTERSALONIKA) respects and protects the personal data of visitors to its website, as well as every person transacting with it. For this reason, it is committed to making every possible effort to ensure the respect and protection of the rights of data subjects. This commitment is implemented through the establishment and application of the Data Protection Policy and a set of policies and procedures that form a comprehensive data protection system, with the aim of complying with the General Data Protection Regulation and Law 4624/2019.

The data controller for the provision of air transport services and for this website  https://airintersalonica.gr/ is the COMPANY:

NAME: AIR INTERSALONIKA HELLENIC AIR TRANSPORT AND TOURISM SINGLE MEMBER S.A.
VAT NUMBER: 997994258
TAX OFFICE: F.A.E. THESSALONIKI
Tel: 2310492100
ADDRESS: 15th km THESSALONIKI-PERAIA, P.C. 55102
Email : air@airintersalonica.gr

For AIR INTERSALONIKA's compliance with the requirements of the personal data protection system, a Data Protection Officer has been appointed with the following contact details: Email: dpo@intersalonica.gr, Phone: 2310492306.

1. WHY DOES AIR INTERSALONIKA COLLECT AND PROCESS PERSONAL DATA:

At AIR INTERSALONIKA, the collection and processing of personal data is carried out within the framework of its commercial operation, namely the provision of air transport services. Exceptionally, it may be deemed necessary to request special category personal data (SCPD) in order to safely complete an emergency patient transfer for health reasons. Personal data only may be transmitted to all companies of the INTERSALONIKA Group with the sole processing purpose of promoting related products and services they offer, customer privileges, cross-selling and discounts. AIR INTERSALONIKA does not make decisions that produce legal effects exclusively through automated processing or profiling.

2. WHAT KIND OF DATA IS COLLECTED BY AIR INTERSALONIKA?

The data collected by AIR INTERSALONIKA is, as a rule, necessary for the provision of air transport and ground transport services..

In particular, regarding the website https://airintersalonica.gr/:

• During visits and navigation on it, the user's network protocol address is automatically recorded, through which, however, no identifiable elements of the user's physical identity are revealed. This information is used exclusively for statistical purposes regarding visits to AIR INTERSALONIKA's web presence. Specifically, IP addresses (in non-identifiable/statistical form), technical browsing data (browser, device, etc.) and Cookies are collected (see Cookie Policy).
• The flight request form collects information necessary for the assessment and processing of the flight request (full name, email address, phone number, etc.).
• In cases of emergency medical evacuation, medical data may be collected, exclusively for the purpose of saving life/health, in accordance with Article 9 GDPR.

3. WHAT KIND OF PROCESSING IS YOUR PERSONAL DATA SUBJECT TO?

AIR INTERSALONIKA processes your personal data exclusively for clear and lawful purposes related to the operation of the website and the provision of air transport services. First, data collected during website browsing, such as technical connection data and cookies, are used for the proper operation, security improvement and performance evaluation of the website. This processing is necessary to ensure technical stability, protection against malicious actions and the ability to optimize our content.

Furthermore, when you contact us and send us a flight request, we use the details you provide (such as full name, contact details and request content) exclusively to manage your request and provide you with the appropriate information. This processing is necessary to enable us to respond to your requests accurately and effectively.

In the context of providing air transport services, we process the personal data required for the organization, execution and payment of the flight, such as identity, contact and transaction details. This data is necessary for the execution of the contract between AIR INTERSALONIKA and the client. In cases of emergency medical evacuation, the collection and processing of health data may be required; this is done exclusively for the protection of the vital interests of the data subject, to ensure safe transport and the handling of emergency situations.

Additionally, AIR INTERSALONIKA processes data where required by legal obligations, such as tax regulations, civil aviation regulations and obligations to inform or cooperate with competent public authorities. This processing is necessary for the fulfillment of obligations arising from the applicable regulatory framework.

Finally, AIR INTERSALONIKA does not carry out promotional activities or send newsletters, nor does it use personal data for marketing purposes.

4. LEGAL BASIS FOR PROCESSING

AIR INTERSALONIKA collects and processes personal data for the above purposes and only where this is strictly necessary for the effective fulfillment of these purposes. The legal basis for processing personal data when visiting our website is the legitimate interest of the data controller in the effective operation (security) of the website, in accordance with the provision of Article 6(1)(f) of Regulation 2016/679. 

The legal basis for processing personal data of AIR INTERSALONIKA customers contracting for the execution of air transport services is the contract, in accordance with the provision of Article 6(1)(b) of Regulation 2016/679. If the data subject does not provide their personal data, except in the case of emergency medical evacuation where – due to their health condition – the data subject is unable to provide their personal data, then it may not be possible to complete the provision of the requested service. 

5. FOR HOW LONG WILL PROCESSING TAKE PLACE AND HOW LONG IS PERSONAL DATA RETAINED?

The data of visitors to our website is collected and retained for the absolutely necessary period of time and then deleted. Specifically, the retention period is defined as follows, per data category:

• Contact details: up to 12 months from the completion of the request.
• Contract/flight data: until the completion of the service and in accordance with tax legislation (usually 10 years).
• Cookies: in accordance with the lifetime of each cookie (see cookie policy for details).
• Health data: only for as long as required for the purpose of the transfer and in accordance with applicable medical obligations.

6. WHERE IS DATA TRANSFERRED?

Data remains and is transferred for processing to every competent department of AIR INTERSALONIKA and possibly to a department or departments of the INTERSALONIKA Group Companies, in relation to the request to AIR INTERSALONIKA for the provision of air transport services and for a purpose that is either necessary for the execution of the service/transaction, or for which the required consent has been given. Furthermore, data may be transferred to natural or legal persons who, as Data Processors, may process it on behalf of AIR INTERSALONIKA, based on a relevant contract. Recipients of the data may include the other companies of the INTERSALONIKA Group (INTERSALONIKA A.A.E. LIFE, INTERSALONIKA A.E.G.A., INTERSALONIKA COMMERCIAL TECHNICAL SINGLE MEMBER S.A.), travel and aviation services companies, advertising companies and public authorities (e.g. CAA or equivalent foreign services), following the consent of the data subject. In cases of patient transfer, in addition to the above, recipients may also include healthcare institutions, doctors, public authorities, third-party insurance companies and intermediaries. Transfer of data by AIR INTERSALONIKA abroad may only take place on the basis of an explicit legal obligation or with appropriate safeguards (SCCs, Adequacy Decisions).

7. MINORS' DATA

The AIR INTERSALONIKA website is not directed at minors. In the event of a flight request for a minor, the details are provided exclusively by the person with parental responsibility.

8. WHAT ARE THE RIGHTS OF THE DATA SUBJECT?

The data subject may at any time exercise the rights provided by the Regulation, namely: a) the right to receive from the data controller confirmation as to whether or not personal data concerning them is being processed and, if so, the right of access to their personal data, b) the right to request from the data controller without undue delay the rectification of inaccurate personal data concerning them, c) the right to request from the data controller the erasure of personal data concerning them, d) the right to request the restriction of processing, e) the right to receive the personal data concerning them, which they have provided to a data controller, in a structured, commonly used and machine-readable format, as well as the right to transmit said data to another data controller, f) the right to object, at any time and on grounds relating to their particular situation, to the processing of personal data concerning them, g) the right not to be subject to a decision taken solely on the basis of automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them. 

9. HOW ARE THE RIGHTS OF DATA SUBJECTS EXERCISED?

All rights of the data subject are exercised free of charge, by sending a letter to the address: INTERSALONIKA GROUP, 15th km Thessaloniki-Peraia, P.C. 55102, for the attention of the Data Protection Officer, or by electronic message to the address: dpo@intersalonica.gr. 

Once one of the above rights is exercised, a response will be given within thirty (30) days of receipt of the relevant letter or email, with relevant notification to the data subject either of the satisfaction of the request or of the reasons that may prevent its satisfaction. You have the right to appeal to the Personal Data Protection Authority for matters concerning the processing of your personal data. For the Authority's jurisdiction and the method of submitting a complaint, you may visit its website (www.dpa.gr > CITIZENS > Submit a complaint to the Authority), where detailed information is available.

10. POLICY REVISION

This policy may be updated periodically. The latest version is always available on the AIR INTERSALONIKA website.