Privacy Policy

Emerald Travel Services

Last updated: 11 November 2026

1. Introduction

Emerald Travel Services ("Emerald Travel", "we", "us" or "our") respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact us, request travel services, or interact with us as an individual traveller, business partner or travel agency.

We process personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), Greek Law 4624/2019 and other applicable data protection legislation.

2. Data Controller

The data controller responsible for the processing of personal data is:

Legal name: ΡΟΖΑΝΑ ΝΤΑΤΟ ΜΟΝΟΠΡΟΣΩΠΗ ΕΤΑΙΡΕΙΑ ΠΕΡΙΟΡΙΣΜΕΝΗΣ ΕΥΘΥΝΗΣ [verify exact registered name]

Trading name: Emerald Travel Services

Registered address: 48 Ioannou Liosi Street, Acharnes, 13679, Attica, Greece

VAT Number: EL800383278

Tax Authority: KEFODE Attikis

Email: rosanna@emeraldtravel.gr

Telephone: +30 210 7244 471

Website: https://www.emeraldtravel.gr

For questions concerning this Privacy Policy or your personal data, please contact us using the details above.

3. Personal Data We Collect

Depending on your interaction with Emerald Travel, we may collect the following categories of personal information:

Contact information

• Full name

• Email address

• Telephone number

• Company or travel agency name

• Information included in your correspondence

Travel-related information

• Travel dates and destinations

• Accommodation and transportation preferences

• Number of travellers

• Travel itinerary requirements

• Other information necessary to arrange requested travel services

Booking and service information

Where necessary for the provision of travel services, we may process reservation details and additional information provided by travellers or business partners.

Identification details or information concerning special assistance requirements will only be processed where necessary and subject to an appropriate lawful basis and applicable safeguards.

Technical and website information

• IP address

• Browser and device information

• Website usage information

• Cookies and similar technologies

• Cookie consent preferences

We do not collect payment card details through this website, as online payment processing is not provided.

4. How We Collect Personal Data

We may collect personal information:

• When you complete our website contact form.

• When you contact us by email or telephone.

• When you request information about travel services.

• When you make or enquire about a reservation.

• When a partner travel agency provides information necessary to arrange services for travellers.

• Through website technologies, subject to applicable consent requirements.

When we receive information from a business partner, we process it only for legitimate and specified purposes relating to the requested services or another applicable lawful purpose.

5. Purposes and Legal Bases of Processing

We process personal data for the following purposes:

Responding to enquiries

To answer questions and communicate with potential customers or partners.

Legal basis: our legitimate interests in responding to business enquiries or taking steps at your request before entering into a contract, as applicable.

Providing travel services

To organise or arrange accommodation, transfers, excursions, itineraries and other requested travel services.

Legal basis: performance of a contract or steps taken before entering into a contract, where the data subject is a party to that contract. Where information is received under a business-to-business agreement, processing may also be based on applicable legitimate interests or another appropriate legal basis.

Business administration and legal compliance

To maintain necessary business records, manage professional relationships and comply with applicable legal obligations.

Legal basis: compliance with legal obligations and, where applicable, legitimate interests.

Website security and operation

To maintain website functionality, prevent misuse and protect our information systems.

Legal basis: legitimate interests or compliance with applicable legal obligations, depending on the processing activity.

Optional analytics, functional services and marketing

Where required by law, we obtain your prior consent before using non-essential cookies or similar tracking technologies.

Legal basis: consent where applicable. Other processing associated with these services is assessed separately under the GDPR.

You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Sharing Personal Data

We may share personal information with third parties where necessary for the requested services, including:

• Hotels and accommodation providers

• Transportation companies and transfer providers

• Tour guides and excursion providers

• Partner travel agencies and destination management companies

• Website hosting and technology providers

• Professional advisers and competent public authorities where legally required

We share only the information reasonably necessary for the relevant purpose.

Where required, we enter into appropriate data processing agreements with service providers acting on our behalf.

7. Website Hosting and Third-Party Services

Our website is operated using the Wix platform.

Depending on the services enabled on our website, personal data or technical information may be processed through the following technologies:

Wix

Website hosting, content management and associated website functionality.

Usercentrics for Wix

Management of cookie consent and visitor privacy preferences.

UserWay Accessibility

Accessibility functionality intended to help visitors use the website.

Inffuse Testimonials

Display and management of customer reviews and testimonials.

Google Fonts

Certain fonts may be delivered through Wix infrastructure rather than directly from Google's servers.

Additional Wix components may be used to support the operation and presentation of the website.

The privacy practices of these providers are governed by their respective policies. Their use on our website is subject to applicable data protection requirements.

8. Cookies and Similar Technologies

Our website uses cookies and similar technologies for website security, functionality, consent management and, where enabled, optional services.

Strictly necessary cookies may be used without consent where permitted by applicable legislation.

Other cookies or similar technologies requiring consent are used only where the necessary consent has been obtained.

Visitors may accept, reject or manage optional categories through the cookie consent banner.

Further information is available in our separate Cookie Policy.

Cookie preferences can be changed or withdrawn through the privacy settings control available on our website.

9. International Data Transfers

In providing our services, personal data may be transferred to recipients outside the European Economic Area, particularly where travel arrangements involve international partners or technology providers.

Where an international transfer is subject to Chapter V GDPR, we apply an appropriate transfer mechanism, such as an adequacy decision, the European Commission's Standard Contractual Clauses, or another legally permitted safeguard.

You may contact us for information about applicable safeguards.

10. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected.

Retention periods depend on the nature of the information, applicable contractual requirements, statutory obligations and legitimate business needs.

For example:

• Enquiry information is retained for the period reasonably necessary to respond and manage related correspondence.

• Booking-related records are retained for the duration necessary to provide services and comply with applicable legal obligations.

• Accounting and statutory records are retained for legally required periods.

• Cookie consent records are retained according to the applicable consent-management configuration and legal requirements.

When personal data is no longer required, it is deleted, anonymised or securely archived where continued retention is legally necessary.

11. Data Security

We implement appropriate technical and organisational measures intended to protect personal data against unauthorised access, unlawful processing, accidental loss, alteration or disclosure.

Access to personal information is limited to persons and service providers who require it for legitimate business purposes.

Although reasonable safeguards are applied, no method of internet transmission or electronic storage can be guaranteed to be completely secure.

12. Your Rights Under GDPR

Subject to applicable conditions and exceptions, you have the right to:

• Request access to your personal data.

• Request correction of inaccurate or incomplete information.

• Request deletion of personal data.

• Request restriction of processing.

• Object to processing based on legitimate interests.

• Request data portability where applicable.

• Withdraw consent at any time.

• Lodge a complaint with a competent supervisory authority.

To exercise your rights, please contact:

rosanna@emeraldtravel.gr

We will handle requests within the time limits prescribed by applicable data protection legislation.

13. Complaints and Supervisory Authority

If you believe that your personal data has been processed unlawfully, you may lodge a complaint with the Hellenic Data Protection Authority.

Hellenic Data Protection Authority (HDPA)

Website: https://www.dpa.gr

You may also contact us first so that we can investigate and address your concern.

14. Children's Personal Data

Our website is not specifically directed at children.

Where information relating to minors is required for travel arrangements, it will be processed only where necessary and under an appropriate legal basis and applicable safeguards.

15. Third-Party Websites

Our website may contain links to websites or services operated by third parties.

We are not responsible for the privacy practices of independent third-party websites. We encourage visitors to review their privacy policies before providing personal information.

16. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our business activities, website technologies or applicable legislation.

Any revised version will be published on this page with an updated revision date.

17. Contact

For any questions about this Privacy Policy or the processing of your personal data, please contact:

Emerald Travel Services

48 Ioannou Liosi Street
Acharnes, 13679
Attica, Greece

Email: rosanna@emeraldtravel.gr

Telephone: +30 210 7244 471

Website: https://www.emeraldtravel.gr