Our company, Hellenic Battlefield & Heritage Tours (Tax Identification Number 803100786, 9 Dervenakion Street, Rafina 19009, hereinafter referred to as the Company, we) takes the appropriate measures to comply with applicable national and European legislation regarding the protection of your personal data. We have established this Personal Data Protection Policy (Policy) with the aim of informing visitors to our Website (Website or Company) about the processing of your personal data.
The Policy is addressed to those who visit our Website to obtain information about our Company's services and Programmes in the field of themed excursions/walks, seminars and related experiential activities of historical and cultural interest, as well as those who wish to make a reservation and register for them, contact us and take part in our promotional activities (hereinafter referred to as Users, you, your).
This Policy should be read in conjunction with the Cookies Policy and the Terms & Terms & Conditions of our Website, as these texts form an integral part of this Policy and govern the operation of the Website and the conduct of transactions (purchases) through it in a uniform and comprehensive manner.
By continuing to browse our Website and/or making reservations/purchases or contacting us, you automatically and unreservedly accept the terms of this Policy as amended from time to time. We invite you to refer to this Policy from time to time in order to be informed of any changes we may make. If you do not agree with the amendments, you must not take any action (use of the Website and/or booking/purchase).
Data Controller & Contact Details
The Data Controller of your personal data is the company named Hellenic Battlefield & Heritage Tours SA, with the details listed above.
Contact details: For any matter relating to this Privacy Policy and the processing of your personal data, you can contact us in the following ways:
- By telephone: 0030 6970500580
- By sending an email to: hello@hellenicbattlefieldtours.com
- Through the "Contact" section.
We invite you to contact us for any information or clarification you may need regarding the Policy. Any relevant information or clarification provided by the Company does not constitute a replacement, substitution or modification thereof and will be provided solely for the purpose of serving the User and providing assistance regarding the Website. and the Policy is the only binding text and information provided by the Company regarding the processing of Users' personal data, in relation to the points it concerns, unless otherwise expressly stated.
What is personal data?
Your personal data includes any information that allows, either alone or in combination with other information, your unique identification, in accordance with the provisions of the General Data Protection Regulation (GDPR 2016/679/EU – GDPR), the applicable Greek legislation and the decisions of the Hellenic Data Protection Authority (HDPA), as well as the directives and decisions of the competent European bodies.
The processing of personal data is carried out in accordance with the provisions of the GDPR, any specific national and European legislation for certain sectors, the applicable Greek legislation on the protection of personal data, as well as for the protection of personal data and privacy in the electronic communications sector (Law 3471/2006, as applicable) and the decisions of the Hellenic Data Protection Authority.
This is information collected about you either following specific interaction with us or the Website, or following its submission by a third party or by automated means during your visit, such as when you register/book a place on one of our Programmes, when you subscribe to our Newsletter mailing list, when you participate in one of our Programmes or when you contact us voluntarily.
What data do we collect about you?
For example, we collect the following personal data about you:
- Identity & contact details: full name, email address, telephone number, tax identification number
- Demographic data: age, gender, marital status
- Your data contained in photos and videos: image, voice
- Financial and tax data: payment method, card type, transaction value, refunds, receipt/invoice details
- Minor & accompanying person data (where applicable): minor's name/age, parent/guardian and/or accompanying person contact details, as well as declarations/authorisations required for the minor's participation.
- Transaction/purchase data: type of services you have purchased from us, transaction value, billing address, time of purchase
- Technical data: Internet Protocol (IP) address, operating system
- Analytics/statistics/marketing data: statistical/pseudonymous data collected through cookies. For more details, please refer to our Cookies Policy.
We would like to clarify that during the payment process, we do not record or store payment information for this transaction, e.g. credit card numbers, etc. You provide this information directly to the relevant payment service provider exclusively.
Our services are intended exclusively for persons over the age of ten (10). Reservations for Programmes are made exclusively by the parent/guardian/person exercising parental care or custody, who declares and guarantees that they have the legal capacity to consent to the participation of the minor, either jointly with the other parent/guardian/person exercising parental care or custody, or alone, and has been informed of the application of this Policy for the processing of their data.
The participation of minors in the respective Programme is permitted exclusively with the mandatory accompaniment of an adult throughout its duration. The adult accompanying person may be the parent/guardian or another adult designated in writing by the parent/guardian.
If you are under 18 years of age, please do not use the Website and do not provide us with any information without the consent of your parent/guardian/carer (i.e. do not provide your e-mail address to subscribe to our newsletter, do not make any purchases and do not provide us with any personal information, including your name, address or contact details – e.g. telephone number, e-mail address).
Collection & Processing of personal data (purpose & legal basis for processing)
| Purpose | Data | Legal basis |
|---|---|---|
| Managing your booking and providing you with services related to your participation in the Programme | Identity Data; Contact Data; Financial Data; Demographic Data; additional data/documents as applicable (e.g., details of parent/ guardian and/or accompanying person, as well as any accompanying declarations/ authorisations). | Performance of our Contractual Relationship; legal obligations (e.g. insurance coverage, tax obligations). |
| Customer and visitor service through communication with the company | Identity data; Contact details; Transaction data; information you provide regarding your request. | Contract performance (where applicable); legal obligations; your consent (where you are not our customer). |
| Commercial Communication | Contact Data | Your consent; our legitimate interest (when you are already our customer). |
| Taking and publishing photos | Identity Data; data contained in photographs/videos | Legitimate interest; or your consent where required. |
| Operation of the Website | Technical Data; cookie-related data where you consent | Legitimate interest; your consent for non-necessary cookies. |
How long is your data retained?
We will retain your personal data for as long as you continue to interact with us and it is necessary for the fulfilment of the processing purposes described above. The data is retained by us until you request its deletion, unless its retention is required by law (e.g. for tax purposes) or to support a legitimate right of our Company.
| Purpose of Processing | Data Retention Periods |
|---|---|
| Management of your reservation and service related to your participation in a Programme | Until the end of our transactional relationship and for an additional two (2) years from the last time you participated in a Programme. |
| Customer and visitor service through communication with the Company | If you are a visitor: one (1) year from resolution of your issue or last communication, whichever comes first. |
| Commercial Communication | Two (2) years from your last interaction, or until opt-out/unsubscribe/withdrawal of consent, whichever comes first. |
| Taking and Publishing Photos | At least five (5) years from participation (with opt-out options such as blurring where deletion is not feasible). |
| Website Functionality | Generally anonymised for research/statistical purposes; some data retained as-is if necessary for security/operation. |
What are your rights and how can you exercise them?
You can exercise your rights by contacting our Company at the above contact details.
- Right of Access: You can ask us to confirm that our Company processes your personal data and receive relevant information about its processing.
- Right to Rectification: You may request that our Company correct false or inaccurate data or update it.
- Right to Erasure: You may request that your data be erased under the conditions described in the Policy.
- Right to Restriction: You may ask us to restrict the processing of your data under the conditions described in the Policy.
- Submitting a complaint to the Data Protection Authority: You have the right to submit your complaints or reports to the local supervisory authority regarding the processing of our personal data.
Third-party recipients of your data
In order to ensure the proper functioning of the Website and to fulfil its contractual obligations, our Company cooperates with third-party companies that only have access to data that is absolutely necessary for the completion of your purchases, your participation in the Programme, payments/refunds, accounting/legal services, technical support/hosting, marketing and communication activities and compliance with legal obligations.
Data security
The Company takes all necessary technical and organisational security measures to protect and ensure the confidentiality of your personal data, including careful selection of partners and confidentiality commitments.
Changes to this Policy
We reserve the right to amend this Policy, for example to comply with new requirements imposed by applicable laws, directives, or technical requirements, or in the event of a review of our procedures or practices. We will notify you of any revisions to our Privacy Policy by posting them on our Website. We encourage you to periodically review this page.
Last updated: …/01/2026