INFORMATION OF PERSONAL DATA ON THE WEBSITE hostelry.gr AND SOCIAL MEDIA
The sole proprietorship under the distinctive title "HOSTELRY" which is located in Athens, Kipseli, 1, Idras str, with TAX ID: 052027452, TAX OFFICE: IC’ Athens, P.C. 112 57, tel 210 8252560 e-mail: info@hostelry.gr (hereinafter referred to as the "Enterprise" or/and "HOSTELRY"), hereby informs you, in its capacity as Data Controller, in accordance with Regulation (EU) 2016/679 (hereinafter referred to as "GDPR") and the relevant provisions of the Greek legislation on the protection of personal data, as applicable, on the type of personal data collected, the source of their collection, the reason for their collection and processing, any recipients, the period of their retention, any transfer outside the EU as well as your rights in relation to your data and how you can exercise them.
This information relates to:
-website visitor
-platform user/candidate employee, which is defined as the natural person or legal entity, as well as its representatives, who have created an account/profile and use the HOSTELRY platform, for the purpose of searching for and providing work undertaken through it.
-platform user/interested employer, which is defined as the natural person or legal entity as well as its representatives, who have created an account/profile and use the HOSTELRY platform for the purpose of publishing advertisements and finding Employees/Professionals.
-contact platform user.
-Hostelry’s social media user.
1. Website Visitor
When you enter our website, the following personal data are automatically sent by the terminal browser you use and without your action:
– the date and time of access,
– the IP address of the internet-enabled device that made the request,
– the date and time of access,
– the name and web address (URL) of the file requested,
– the website/application from which the access was made (referrer-URL),
- the browser you are using, the operating system of your computer that can access the Internet, as well as the name of the access provider,
- on our website server and are temporarily stored in a log file for the following purposes:
– guarantee of the correct establishment of a connection,
– guarantee of the comfortable use of our website/application,
– evaluation of the security and stability of the system.
The legal basis for the processing of the IP address is our legitimate interest, which arises from the aforementioned purposes for processing Personal Data.
2. Platform User - Candidate Employee
In order to create an account as a user-candidate employee on the Hostelry online platform, you will need to fill in your e-mail address and password in the predefined field.
Subsequently, the user-candidate employee can fill in the relevant fields on the platform with additional information to create his/her profile, including but not limited to, the following:
Name and Surname, Address of residence and/or work address, Postal code, date of birth, contact details (tel., e-mail).
Gender, level of education, place of employment, currency of payment, expected salary, summary of work experience, sector of employment.
Self-assessment of your skills (work skills and soft skills).
The purpose of processing the above data is to create an account on the platform, to provide job search services by storing data constituting your profile and to ensure their availability, to provide notifications. The legal basis of processing in this case is the performance of the contract (provision of services).
The platform, if you select Smart Match service by clicking on the relevant option, will send you notifications about employer advertisements via your e-mail, based on the specialty you have declared. The purpose of processing is to provide notifications. The legal basis of processing is your prior consent.
In case you wish to purchase a service package from the platform, you will be asked for your identification and billing details, such as your full name, Tax ID and Tax Office, your contact details, postal address, telephone number (landline, mobile), card details (for example name, card number, expiry date and code), payment details, credit cards, payments/debts, transaction details, transaction history etc.
The purpose of processing the above data is to provide services to you in accordance with the service package you purchased. The legal basis for their processing is the execution of the contract (provision of services).
Furthermore, the above data related to your payments, are additionally processed for the purpose of invoicing the Enterprise’s services, where applicable. In this case, the legal basis for the processing is the fulfilment of Enterprise’s legal obligations (such as, for example, tax legislation).
The platform gives you the possibility, to upload a profile picture, if you wish so. In this case, the legal basis for processing is your consent.
3. Platform User - Interested Employer
In order to create an account as a user – interested employer on Hostelry's online platform, you will need to fill in your e-mail address and password in the predefined field.
To purchase a service package from the platform, you will be asked for your identification and billing information, such as your full name, Tax ID and Tax Office, your contact details, postal and email address, telephone number (landline, mobile), payment details, credit cards, payments/debts, transaction details, transaction history, etc.
The purpose of processing the above data is to create an account on the platform for the provision of the services to you according to the service package you have purchased, for the search for an employee. The legal basis for their processing is the execution of the contract (provision of services).
Furthermore, the above data related to your payments, are additionally processed for the purpose of invoicing the Enterprise’s services, where applicable. In this case, the legal basis for the processing is the fulfilment of the Enterprise’s legal obligations (such as, for example, tax legislation).
4. Contact form
The Enterprise enables the visitor/user to communicate by providing personal data by filling in a form in a predefined field of the website, such as for example name, e-mail address and contact subject).
The purpose of processing the above data is to respond to a visitor’s / user’s request. In this case, the legal basis for processing is Enterprise’s legitimate interest.
If there is a contractual relationship with the Enterprise, the purpose of processing is our communication within the framework of this relationship. In this case, the legal basis for processing is the performance of a contract.
5. Social Media
Hostelry has official accounts on the following social media:
https://www.facebook.com/hostelry.gr
https://www.instagram.com/hostelry.gr
https://www.linkedin.com/company/hostelrygr
https://www.youtube.com/@hostelry.hospitality
With the help of each of the above platforms, we collect and process certain of your data (indicatively your name, username, and/or photo, as well as other personal data of your profile that is publicly visible, such as geographical area, gender, address, etc.) and personal data resulting from your interaction with Enterprise’s accounts on Social Media, such as comments, reactions (likes, reaction buttons).
Purpose of processing: For all collected data about you, whether anonymized or not, the purpose of processing is to provide updates about our content or to communicate with you.
Legal basis: Your consent. You provide your consent by liking or following our pages and you can withdraw it just as easily, in the same way (unlike, unfollow).
Please note that we are not responsible for the manner or means by which each of the above platforms processes your data. Please find out about the policy of these means from the respective links:
5.1. Comments on Social Media
On the social media maintained by Hostelry, you can submit comments. Hostelry has no general obligation to monitor the content submitted by users of these social media platforms; however, it makes efforts to ensure a safe online environment.
Hostelry has the right to remove any type of content deemed to be (indicative reference) abusive, vulgar, pornographic, threatening, defamatory, advertising or that violates intellectual property rights or contains a false statement regarding the user's identity, while maintaining the ability to block users who submit it.
6. Use of Cookies
This website, like other websites, uses cookies.
Our website uses absolutely necessary cookies for the operation of the website, as well as the not absolutely necessary cookies, which you can choose by your own positive action - consent.
For more information click on Cookies Policy.
7. Data origin
The Enterprise collects and processes Personal Data directly from the user/visitor.
When:
- he/she uses the online platform as an Candidate Employee (paragraph 2);
-he/she uses the online platform as a Interested Employer (paragraph 3);
- he/she uses the contact form, communication by e-mail (paragraph 4);
– he/she uses Enterprise’s social media platforms (paragraph 5);
– he/she gives his/her consent on using non necessary cookies (paragraph 6);
The Enterprise collects Personal Data by automated means:
- due to the nature and mode of operation of the internet, as soon as the visitor/user visits the website, when our server (intermediary) records his/her IP address and the other data mentioned in paragraph 1 "Upon entering the Website", from the absolutely necessary cookies (paragraph 5)
8. Recipients/Persons who become aware of your Data
Depending on the purpose of processing, the following categories have access to personal data, indicatively and not restrictively:
(a) The Enterprise’s management.
(b)The Enterprise's relevant personnel who operates the electronic platform.
(c) Interested Employers.
(d) Candidate Employees.
(e)Natural persons or legal entities that provide services to our Enterprise, such as for example, information technology (IT) service providers, website hosting and management service providers, e-mails service providers, Enterprise’s legal advisors, bailiffs, Banking Institutions, Payment Platforms.
(f) Technology providers (such as for example third party cookie providers).
(g) Public authorities or agencies, judicial, prosecutorial and investigative authorities, where the transfer or disclosure of data is required by law, by a court decision under national or foreign law or by a decision of any other authority, accredited mediators and mediation service centers, arbitration courts and alternative dispute resolution bodies.
(h) Natural persons or legal entities having and proving a legitimate interest in accordance with the legal procedures.
Where necessary, the Enterprise enters into relevant contracts with natural persons or legal entities who process your data and who act as data processors, i.e. process the personal data on its behalf. We disclose as much data as necessary for the purposes of the processing in question.
In each transfer we take every possible measure to ensure that the data transferred is always the minimum necessary.
Where the transfer is being made to a country outside the European Union (EU) or the European Economic Area (EEA), the transfer will be made on the basis of appropriate guarantees and in accordance with the applicable data protection legislation in order to maintain the required level of protection of your data.
9. Subject Rights
As a data subject, subject to applicable law, you may exercise, the following rights, where applicable:
• right of access (to know which data we process, for what purpose, the categories of your data and the recipients and/or categories of recipients),
• right of rectification (to correct any omissions or inaccuracies in your data)
• right to erasure (right to be forgotten) (to be deleted from our records, but where processing is no longer necessary),
• right to restriction of processing (if the accuracy of the data is contested, etc.),
• right of data portability (to receive your data in a structured and commonly used format, for those data held in an electronic file). ,
• right to object(on grounds relating to your particular situation in the event that your personal data are processed for the purposes of the Enterprise's legitimate interests).
• right of withdrawal (you have the right to withdraw your consent at any time, where required, without affecting the lawfulness of the processing based on it until its withdrawal).
The possible exercise of these rights and/or any clarification regarding your personal data shall be carried out at no cost to you:
- by written letter to privacy@hostelry.gr
- in person or by sending a letter to the Enterprise - Hostelry Athens, Kipseli, 1, Idras Str, P.C 11257, to the attention of the Data Controller.
Exceptionally for not necessary cookies:
- To withdraw consent to the installation of not absolutely necessary cookies, you can select them from the
selection window. This revocation will not have a retroactive effect on the processing carried out until then.
Exceptionally and specifically regarding the use of the platform:
- for the correction of the data of the user of the platform, the user has the possibility to update or modify the data he/she enters.
- in case that the user of platform does not wish to receive notifications to his/her e-mail for employer advertisements by Smart Match service, based on the specialty he/she has declared, he/she may withdraw his/her consent by clicking on the relevant option. This withdrawal will not have a retroactive effect on the processing that has been carried out up to that point.
- for the deletion of the data of the user of the platform, the user himself has the possibility to delete them through an option available on the platform.
We point out that even in the case of correction or successful deletion, there is a possibility that users may have kept in their own files or databases copies of your data to which they had gained access before the correction or deletion and the Enterprise bears no responsibility.
- in the case of a profile photo that has been posted, you have the possibility to withdraw it at any time you wish
any request submitted should be accompanied by appropriate proof of identification.
The Enterprise may request additional information necessary to confirm your identity. In case you have authorized a third person to submit a claim request, such person must carry appropriate legal documents (such as a power of attorney or an authorization certified by a public authority).
If your requests are manifestly unfounded or excessive, in particular because of their repetitive nature, then we may either:
a) charge a reasonable fee, taking into account the administrative costs of providing the information; or
b) refuse to act on the request.
If you exercise any of these rights, we will take all possible steps to comply with your request within one month of receiving it, after informing you either that it has been complied with or of the objective reasons why it cannot be complied with.
The above time limit may be extended by a further two months, if necessary, considering the complexity of the request and the number of requests, after informing you.
The above rights are limited for the reasons provided for by the legislation in force.
Refusal by the Enterprise or unjustified delay in complying with your requests in the exercise of your rights entitles you to take recourse to the Data Protection Authority as the competent supervisory authority for the application of the GDPR and before the competent judicial authorities.
10. Contacting the Personal Data Protection Authority
If you consider that your rights concerning the protection of your personal data are infringed, you have the right to lodge a complaint with Personal Data Protection Authority, at the postal address: 1-3, Kifissias str, P.C. 115 23, Athens, tel: 210 6475628, e-mail: contact@dpa.gr, fax: +30-210 6475628, www.dpa.gr.
11. Processing Security
The Data Controller recognizes the importance of the security of Personal Data. For the purpose of processing, we take all modern and appropriate technical and organizational measures, the compliance of which we check regularly to ensure maximum security.
12. Retention of Personal Data
The Enterprise will retain and process the aforementioned personal data for as long as necessary to serve the aforementioned processing purposes, to comply with its legal obligations (such as tax, commercial law), for the resolution of judicial or extrajudicial disputes, in accordance with the applicable legal framework.
In the case of the deletion of user data entered on the electronic platform, these data are deleted by the Enterprise if the user requests it.
In case of expiry of the retention period, your data will be securely deleted.
13. Amendments-Revisions
The Enterprise reserves the right to amend and update this Information, when deemed necessary on the basis of its current policy on the protection of personal data and in the context of the applicable legal and regulatory framework, which will always be available on the Enterprise's website hostelry.gr, as updated.
Version 2.0: June 2025