Privacy and cookies policy
This policy explains what personal data Athens Extreme Sports collects when you visit our website or book an activity, why we use it, who we share it with and what rights you have under the EU General Data Protection Regulation (GDPR) and Greek Law 4624/2019.
Who we are
The data controller is Athens Extreme Sports, 44 Andreadou str, Athens, Greece, G.E.M.I. 148808903000. For any privacy question, email contact@athensextremesports.com or call +30 694 405 6356.
What data we collect
- Booking details: your name, email, phone number, the activity, date, number of people, pick-up address if you ask for a transfer, and any comments you add (for example about experience or dietary needs).
- Information you send us: messages by email, phone, WhatsApp or our contact pages.
- Payment status: the amount paid, the payment provider and a transaction reference. We do not receive or store card numbers.
- Technical data: basic data your browser sends, such as IP address and device type, which our server and security systems use to keep the website running and safe.
Why we use it and on what legal basis
- To take and run your booking (contract): confirming the activity, sending the meeting point, and passing the details your guide needs.
- To keep accounts and invoices (legal obligation under Greek tax law).
- To keep the website secure and working (legitimate interest).
- To send offers or news (consent only). You can withdraw consent at any time with one email.
Who we share it with
- Our partner guides and instructors who run your activity. They receive your name, phone number, number of people, pick-up details and comments, only for that booking.
- Payment providers: Viva, PayPal and Revolut process your payment on their own secure pages and handle your card data. We never see your card number.
- Our booking system, which runs on this website, and the company that hosts the website and sends our booking emails, acting as processors on our instructions.
- Public authorities, only when the law requires it.
We do not sell your data and we do not use it for profiling.
How long we keep it
We keep booking and payment records for as long as Greek tax law requires, normally five years after the end of the year of the booking. Messages that did not lead to a booking are deleted within two years. Marketing consent is kept until you withdraw it.
Your rights
You can ask to access, correct or delete your data, to restrict or object to its use, to receive it in a portable format, and to withdraw any consent you gave. Email contact@athensextremesports.com and we will reply within one month. You also have the right to complain to the Hellenic Data Protection Authority (www.dpa.gr).
Cookies
Cookies are small files your browser stores when you visit a website.
- Necessary cookies keep the website working, for example the booking form, the payment step and security checks. They do not need consent.
- Analytics and marketing cookies help us understand how the website is used and measure our advertising. They are set only if you accept them in the cookie banner.
You can change your choice at any time from the cookie settings link on the website, or delete cookies in your browser settings. Payment pages of Viva, PayPal and Revolut set their own cookies under their own policies.
Changes to this policy
We may update this policy when our services or the law change. The current version is always on this page.