The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data means all data with which you can be personally identified. Detailed information on the subject of data protection can be found in our Privacy Policy listed below this text.
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find the operator's contact details in the legal notice of this website.
How do we collect your data?
Some data is collected when you provide it to us. This may, for example, be data that you enter in a contact form.
Other data is collected automatically, or with your consent, by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system, or time the page was accessed). This data is collected automatically as soon as you enter this website.
What do we use your data for?
Some of the data is collected to ensure that the website is provided without errors. Other data may be used to analyze your user behavior.
What rights do you have regarding your data?
You have the right at any time to receive free information about the origin, recipients, and purpose of your stored personal data. You also have the right to request correction or deletion of this data. If you have given consent to data processing, you may withdraw this consent at any time for the future. You also have the right, under certain circumstances, to request restriction of the processing of your personal data. In addition, you have the right to lodge a complaint with the competent supervisory authority.
For this and for any further questions regarding data protection, you may contact us at any time at the address provided in the legal notice.
Analysis Tools and Third-Party Tools
When you visit this website, your browsing behaviour may be statistically analysed. This is done primarily with cookies and so-called analysis programs.
Detailed information about these analysis programs can be found in the following Privacy Policy.
External Hosting
This website is hosted by an external service provider (host). Personal data collected on this website is stored on the host's servers. This may include, in particular, IP addresses, contact requests, metadata and communication data, contract data, contact details, names, website accesses, and other data generated via a website.
The host is used for the purpose of fulfilling contracts with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of a secure, fast, and efficient provision of our online offering by a professional provider (Art. 6(1)(f) GDPR).
Our host will process your data only to the extent necessary to fulfil its service obligations and will follow our instructions regarding this data.
Conclusion of a Contract for Order Processing
To ensure data-protection-compliant processing, we have concluded a contract for order processing with our host.
Data Protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this Privacy Policy.
When you use this website, various personal data is collected. Personal data is data with which you can be personally identified. This Privacy Policy explains which data we collect and what we use it for. It also explains how and for what purpose this is done.
We point out that data transmission on the internet (e.g. communication by email) may have security gaps. Complete protection of data against access by third parties is not possible.
Information on the Responsible Party
The party responsible for data processing on this website is:
KALAMAKI HOLIDAYS S.A.
Post Box -11-
70200 KALAMAKI - FAISTOS
CRETE - GREECE
Telephone: 0030 28920 45470
Email: office@kalamaki.de
The responsible party is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (e.g. names, email addresses, etc.).
Withdrawal of Your Consent to Data Processing
Many data processing operations are possible only with your express consent. You may withdraw consent you have already given at any time. An informal notification by email to us is sufficient. The lawfulness of data processing carried out before withdrawal remains unaffected by the withdrawal.
Right to Object to Data Collection in Special Cases and to Direct Advertising (Art. 21 GDPR)
IF DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED, UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENCE OF LEGAL CLAIMS (OBJECTION UNDER ART. 21(1) GDPR).
IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT ADVERTISING PURPOSES, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS CONNECTED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL THEN NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION UNDER ART. 21(2) GDPR).
Right to Lodge a Complaint with the Competent Supervisory Authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, workplace, or the place of the alleged violation. The right to lodge a complaint exists without prejudice to other administrative or judicial remedies.
Right to Data Portability
You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a commonly used, machine-readable format. If you request direct transfer of the data to another controller, this will take place only insofar as it is technically feasible.
SSL or TLS Encryption
For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser address line changes from "http://" to "https://" and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Information, Deletion, and Correction
Within the framework of applicable legal provisions, you have the right at any time to receive free information about your stored personal data, its origin and recipients, and the purpose of data processing, and, where applicable, a right to correction or deletion of this data. For this and for any further questions regarding personal data, you may contact us at any time at the address provided in the legal notice.
Right to Restriction of Processing
You have the right to request restriction of the processing of your personal data. You may contact us at any time at the address provided in the legal notice. The right to restriction of processing exists in the following cases:
If you dispute the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the verification, you have the right to request restriction of the processing of your personal data.
If the processing of your personal data was/is unlawful, you may request restriction of data processing instead of deletion.
If we no longer need your personal data but you need it to exercise, defend, or assert legal claims, you have the right to request restriction of the processing of your personal data instead of deletion.
If you have lodged an objection under Art. 21(1) GDPR, a balancing of your interests and ours must be carried out. As long as it has not yet been determined whose interests prevail, you have the right to request restriction of the processing of your personal data.
If you have restricted the processing of your personal data, this data - apart from being stored - may be processed only with your consent, for the establishment, exercise, or defence of legal claims, to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a member state.
Cookies
Our websites use so-called "cookies". Cookies are small text files and do not harm your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or your web browser automatically deletes them.
In some cases, cookies from third-party companies may also be stored on your device when you enter our site (third-party cookies). These enable us or you to use certain services of the third-party company (e.g. cookies for processing payment services).
Cookies have various functions. Numerous cookies are technically necessary because certain website functions would not work without them (e.g. the shopping basket function or display of videos). Other cookies are used to evaluate user behaviour or display advertising.
Cookies required for carrying out the electronic communication process (necessary cookies), for providing certain functions you have requested (functional cookies, e.g. for the shopping basket function), or for optimising the website (e.g. cookies for measuring web audiences) are stored on the basis of Art. 6(1)(f) GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing cookies for the technically error-free and optimised provision of its services. If consent to store cookies has been requested, the relevant cookies are stored exclusively on the basis of this consent (Art. 6(1)(a) GDPR); consent can be withdrawn at any time.
You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude acceptance of cookies for certain cases or in general, and activate automatic deletion of cookies when closing the browser. If cookies are disabled, the functionality of this website may be restricted.
Where cookies from third-party companies or for analysis purposes are used, we will inform you separately in this Privacy Policy and, if necessary, request your consent.
Contact Form
If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in case of follow-up questions. We do not pass on this data without your consent.
The processing of this data is carried out on the basis of Art. 6(1)(b) GDPR if your enquiry is related to the fulfilment of a contract or is necessary for carrying out pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively processing enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), if this has been requested.
The data you enter in the contact form remains with us until you request its deletion, withdraw your consent to storage, or the purpose for data storage no longer applies (e.g. after your enquiry has been fully processed). Mandatory statutory provisions - in particular retention periods - remain unaffected.
Enquiry by Email, Telephone, or Fax
If you contact us by email, telephone, or fax, your enquiry, including all personal data arising from it (name, enquiry), will be stored and processed by us for the purpose of handling your request. We do not pass on this data without your consent.
The processing of this data is carried out on the basis of Art. 6(1)(b) GDPR if your enquiry is related to the fulfilment of a contract or is necessary for carrying out pre-contractual measures. In all other cases, processing is based on your consent (Art. 6(1)(a) GDPR) and/or our legitimate interests (Art. 6(1)(f) GDPR), as we have a legitimate interest in effectively processing enquiries addressed to us.
The data you send us through contact enquiries remains with us until you request its deletion, withdraw your consent to storage, or the purpose for data storage no longer applies (e.g. after your request has been fully processed). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.
Facebook Plugins (Like & Share Button)
Plugins from the social network Facebook are integrated on this website. Provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook, however, the collected data is also transferred to the USA and other third countries.
You can recognise the Facebook plugins by the Facebook logo or the "Like" button ("Like") on this website. An overview of Facebook plugins can be found here: https://developers.facebook.com/docs/plugins
When you visit this website, the plugin establishes a direct connection between your browser and the Facebook server. Facebook thereby receives the information that you have visited this website with your IP address. If you click the Facebook "Like" button while logged into your Facebook account, you can link the content of this website to your Facebook profile. This allows Facebook to associate the visit to this website with your user account. We point out that, as provider of the pages, we have no knowledge of the content of the transmitted data or its use by Facebook. Further information can be found in Facebook's privacy policy at: https://de-de.facebook.com/privacy/explanation.
If you do not want Facebook to be able to associate your visit to this website with your Facebook user account, please log out of your Facebook account.
The use of Facebook plugins is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the greatest possible visibility on social media. If corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR; consent can be withdrawn at any time.
Google Tag Manager
We use Google Tag Manager. Provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is a tool that helps us integrate tracking or statistical tools and other technologies on our website. Google Tag Manager itself does not create user profiles, does not store cookies, and does not perform independent analyses. It only serves to manage and deliver the tools integrated via it. However, Google Tag Manager records your IP address, which may also be transferred to Google's parent company in the United States.
The use of Google Tag Manager is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the quick and uncomplicated integration and management of various tools on its website. If corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as consent includes storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be withdrawn at any time.
The company has certification under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information is available from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.
Matomo (formerly Piwik)
This website uses the open-source web analytics service Matomo. Matomo uses so-called "cookies". These are text files that are stored on your computer and enable analysis of your use of the website. The information generated by the cookie about use of this website is stored on our server. The IP address is anonymised before storage.
Matomo cookies remain on your device until you delete them.
The storage of Matomo cookies and the use of this analysis tool are based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in anonymised analysis of user behaviour in order to optimise both its web offering and its advertising. If corresponding consent has been requested (e.g. consent to store cookies), processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR; consent can be withdrawn at any time.
The information generated by the cookie about use of this website is not passed on to third parties. You can prevent the storage of cookies by selecting the appropriate settings in your browser software; however, we point out that in this case you may not be able to use all functions of this website to their full extent.
If you do not agree to the storage and use of your data, you can deactivate storage and use here. In this case, an opt-out cookie will be stored in your browser, preventing Matomo from storing usage data. If you delete your cookies, this will also delete the Matomo opt-out cookie. The opt-out must be reactivated when you visit this website again.
Open Street Map
We use the OpenStreetMap (OSM) map service. Provider is the OpenStreetMap Foundation (OSMF), 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, United Kingdom.
When you visit a website on which OpenStreetMap is embedded, your IP address and further information about your behaviour on this website are forwarded to the OSMF, among other data. OpenStreetMap may store cookies in your browser for this purpose. These are text files that are stored on your computer and enable analysis of your use of the website. You can prevent the storage of cookies by selecting the appropriate settings in your browser software; however, we point out that in this case you may not be able to use all functions of this website to their full extent.
Furthermore, your location may be recorded if you have allowed this in your device settings - for example, on your mobile phone. The provider of this site has no influence on this data transmission. Details can be found in OpenStreetMap's privacy policy at the following link: https://wiki.osmfoundation.org/wiki/Privacy_Policy.
OpenStreetMap is used in the interest of an appealing presentation of our online offerings and easy findability of the places specified by us on the website. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. If corresponding consent has been requested (e.g. consent to store cookies), processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR; consent can be withdrawn at any time.
Handling Applicant Data
We offer you the opportunity to apply to us (e.g. by email, by post, or via an online application form). Below, we inform you about the scope, purpose, and use of your personal data collected as part of the application process. We assure you that the collection, processing, and use of your data is carried out in accordance with applicable data protection law and all other statutory provisions, and that your data will be treated as strictly confidential.
Scope and Purpose of Data Collection
If you submit an application to us, we process the associated personal data (e.g. contact and communication data, application documents, notes in connection with interviews, etc.) insofar as this is necessary to decide on the establishment of an employment relationship. The legal basis for this is Section 26 BDSG-new under German law (initiation of an employment relationship), Art. 6(1)(b) GDPR (general pre-contractual measures), and - if you have given consent - Art. 6(1)(a) GDPR. Consent can be withdrawn at any time. Within our company, your personal data is passed on only to persons involved in processing your application.
If the application is successful, the data submitted by you will be stored in our data processing systems on the basis of Section 26 BDSG-new and Art. 6(1)(b) GDPR for the purpose of carrying out the employment relationship.
Data Retention Period
If we cannot offer you a position, if you reject a job offer, or if you withdraw your application, we reserve the right, on the basis of our legitimate interests (Art. 6(1)(f) GDPR), to retain the data you have submitted for up to 6 months from the end of the application process (rejection or withdrawal of the application). The data will then be deleted and the physical application documents destroyed. Retention serves in particular as evidence in the event of a legal dispute. If it is apparent that the data will be required after the expiry of the 6-month period (e.g. due to a threatened or pending legal dispute), deletion will take place only when the purpose for further retention no longer applies.
Longer retention may also take place if you have given corresponding consent (Art. 6(1)(a) GDPR) or if statutory retention obligations prevent deletion.
Cookie Settings
