Welcome to the Privacy Policy at Rock and Rest.

At Rock and Rest, we believe in being transparent about how we conduct our activities, as it is one of our core values. Therefore, we strive to be completely transparent about how we collect and use your personal data. To this end, we have developed our Privacy Policy so that you can understand how we collect, use, communicate, protect, and disclose personal information in connection with our website (the Site), our blog (the Blog), our mobile application (the App), or other services (collectively, the Services and each individually as a Service). This Policy also informs you of your rights and choices regarding your personal information and how you can get in touch if you have any questions or concerns. We encourage you to read the Privacy Policy carefully before using any of our Services. This Policy applies to all Services linked to it.


Your continued use of our Services constitutes your consent to the Policy.

What is GDPR ?

 The General Data Protection Regulation (GDPR) 2016/679 is the new regulatory framework of the European Union (EU) in this field. The law's objective is to establish conditions for the processing of personal data to protect the rights and freedoms of individuals, especially the right to personal data protection.

Data Controller

The company Rock And Rest, based in Athens, 5 Ergotimou Street, Athens 116 34, with contact details email: info@rockandrest.com , tel: (+30) 694 443 9604, website: www.rockandrest.com, as legally represented, informs that for the purpose of exercising its business activities, it processes the personal data of its clients in accordance with the applicable national legislation and the European Regulation 2016/679 for the protection of natural persons against the processing of personal data and for the free movement of such data (General Data Protection Regulation, hereinafter "Regulation") as in force.

For any matter related to the processing of personal data, you may contact Rock And Rest at the following contact details:

email: info@rockandrest.com
Telephone: +30 694 443 9604

What categories of personal data do we process?

The personal data you provide us, including your Name, Postal Address, Zip Code, Prefecture, City, Area, Country, Landline Phone, and Email Address, as well as your Tax Identification Number (TIN), Tax Office, and Profession, are processed only when we have a lawful reason to do so. 

What are the lawful reasons for processing your personal data?

Lawful reasons for processing your personal data include: (a) providing the services you entrust us with and wish to receive from us, such as property assessment, and therefore fulfilling our contractual obligations in this context.
(b) safeguarding and protecting the legitimate interests, both yours and ours.
(c) compliance with obligations imposed by law, such as regulatory compliance for tax purposes.
(d) the consent you provide under the specific conditions set by the legal framework, in order to receive updates about products, services, offers, etc. from Rock And Rest or third-party partner companies, which process personal data in accordance with the applicable legal framework. 

DECLARATION

By providing your consent, you declare that you are over 16 years old. If you are under 16 years old, you may use our website only with the participation and approval of a parent or guardian.

What information do we collect?

We collect two types of information about our visitors and users.

  • Unidentified and unrecognizable information concerning a visitor or unrecognized user may be available to us or automatically collected through the use of our services (non-personal information). Such non-personal information does not allow us to identify the visitor or user from whom it was collected. The non-personal information collected by us consists mainly of technical and aggregated usage information, such as visitors' and users' browsing and “click flow” activity within the services, session heatmaps and scrolls, non-identifiable information regarding the visitor's or user's device content, operating system, internet browser, screen resolution, language and keyboard settings, internet service provider, referring/exit pages, date/time stamps, etc.
  • Individually identifiable information, meaning information that identifies an individual or can, with reasonable effort, lead to the recognition of an individual or is of a private or sensitive nature (Personal Information). The personal information collected by us mainly consists of contact details (e.g. email address or phone number), billing details (name, physical billing address, payment method, and transaction details) collected only from users with paid services (such as an email address or username for a linked PayPal, Google, or Facebook account), scanned identification documents (IP address, geographic location, or unique device identifier), details regarding connected third-party accounts (such as records made through or uploaded to our services), and any other personal information provided to us by visitors or users through their access to and/or use of the services. For the avoidance of doubt, any non-personal information connected with personal information (e.g. for improving the services we offer) is treated and handled by us as personal information, as long as there is such a connection or link.
How do we collect information ?

We mainly collect information using 3 ways:

  • We collect information through the use of our Services. - When you visit or use our Services, even when you browse the website or any User Website, set up a User Account, conduct a survey or reserve a property, when you download our App, we collect and often compile, gather, and record such uses, sessions, and related information either independently or with the help of third-party services, including through the use of cookies and other tracking technologies.
  • We collect information that you voluntarily provide to us. * For example, we collect the personal information you provide us when you register for our services, connect to our services through third-party services such as Facebook or Google, ask questions about specific apartments, submit or upload such personal information while using any of our services, and even when you communicate with us directly through any communication channel (e.g. phone, email).
  • We also collect information through third-party sources.
How do we use this information?

We use the collected information for:

  • We provide our Services to you as an unregistered or registered user of the Website, process transactions, and send related information such as confirmations and invoices.
  • We send you technical notices, updates, security alerts, and support and administrative messages.
  • We respond to your comments, questions, and requests, and we provide customer support services.
  • We manage and improve the performance of our products and services.
  • We communicate with you about products, services, offers, promotions, rewards, and events offered by Rock And Rest and provide you with news, updates, and information that we believe will interest you.
  • For auditing and reporting purposes.
  • We detect, investigate, and prevent fraudulent transactions and other illegal activities, protecting the rights and value of Rock And Rest, as well as those of our employees, representatives, or others, and we operate under applicable legislative and governmental requirements.
  • We provide and deliver the Services, process transactions, and send related information, such as agreements and invoices.
  • We monitor and analyze trends, usage, and activities related to our Services.
  • We review, modify, and update existing Services and proceed with the development of new ones.
  • We carry out any different purpose that is described to you during the collection of information.

We collect only the personal data required for the purpose of our legal obligations or necessary for the completion of our Services.

What are your rights concerning your personal data ?

It is important for you to be able to manage your personal data. This is why we take steps to ensure that you can access, obtain copies of, update, modify, delete, or restrict the use of your personal data. Individuals located in certain countries, including within the European Union, have legal rights regarding the use of their personal data. Specifically, they have the following rights:

    • Right to access: You have the right to obtain confirmation that your personal data is being processed and, in the case of processing, information about the purposes of processing your data, the retention period (and the criteria used to determine this period) of the evidence, the recipients to whom your personal data has been transferred or disclosed, and a copy of the personal data we hold.
    • Right to data portability: You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format.
    • Right to rectification: You have the right to obtain rectification of any inaccurate or incomplete personal data we hold about you.
    • Right to erasure (right to be forgotten): You have the right, in certain circumstances, to request the erasure of personal data we hold about you. The right to be forgotten is not unconditionally guaranteed. It is particularly limited when it conflicts with the right to freedom of expression and information. Other exceptions include when the processing of the data subject to an erasure request is necessary for compliance with legal obligations, for archiving purposes in the public interest, for scientific or historical research, or for statistical purposes, or for the defense of legal claims.
    • Right to restriction of processing: You have the right, in certain circumstances, to obtain restriction of the processing of personal data we hold about you.
    • Right to object: You have the right to object to any processing of your personal data that we hold, but there may be compelling reasons for us to continue with this processing. In any case, we will evaluate your request and respond accordingly. Marketing activities are not included in the compelling reasons.

Before we disclose the required files of Personal Data we hold for you, we may ask you for additional information to verify your identity and for security reasons. We reserve the right to charge a fee where permitted by law (e.g., if your request is unfounded or excessive).
You have the right to file a complaint with your local data protection supervisory authority (but we recommend contacting us first).
If you wish to exercise one of these rights, please contact us at info@rockandrest.com. We will make all reasonable efforts to promptly fulfill your request (unless further information is required from you to fulfill your request), subject to legal and other permissible factors.

Update on Privacy Protection Security

We take all reasonable organizational and technical measures to protect your personal data from accidental or unlawful destruction, loss, alteration, or damage. Based on this, we should inform you that no security program is 100% foolproof, and therefore we cannot guarantee the absolute safety of your personal or other information.
In order to handle any potential personal data protection incident and minimize its consequences, we have implemented a relevant procedure. In the event of a personal data protection incident (breach), you will be notified as soon as the incident comes to our attention.

Personalized Ads based on personal interests through the internet.

We participate in personalized advertising based on personal interests through the internet. This means that when you use the Services, we or third parties or advertisers may use cookies (that they collect or that we provide to them) or other similar technologies to collect information about your use of our Services (including mobile apps) or your online activities over time and across different websites and devices. The information collected may include the content you view, the date and time you view this content, and the website that referred you to the Services, and these pieces of information may be associated with your own unique device identifier or internet address and your browser. These practices help customize ads that are relevant and useful for you. These customized ads may appear on the Services or on other websites, apps, or properties.
Additionally, if you have provided us with your email address, we may use an encoded, unreadable form (email address) of your email address to offer you personalized ads on the Services or other websites. We do not have access to or collect any of the contents of your email messages when providing personalized ads. The use of information obtained from Gmail APIs will comply with Google's Required Terms of Use.

Communication Usage by Rock And Rest

We may use your Personal Information to send you promotional content and collective or personalized messages via email, calls, marketing messages, and any other kind of such communication. If you do not wish to receive such promotional messages or calls, you can notify us at any time or otherwise follow the "unsubscribe" link and request removal. It's important to know that we take measures to limit the promotional content we send you within a reasonable and proportional timeframe and strive to send information we believe may actually interest you or relate to you, based on your interests and needs.

We may also communicate with you regarding important information about our Services or their use. For example, we may send you billing details, responses or instructions related to various services, reminders or alerts regarding your subscriptions, or notify you about various changes to our Services.
It is important that you are always able to receive such messages. For this reason, you cannot opt out of receiving these service and billing messages unless you are no longer a visitor or user of Rock And Rest.