Privacy Policy Regarding the Use of Data on

Data privacy is a matter of trust, and your trust matters to Crete Locals. It is therefore important to us that your personal data is protected and that its collection, processing and use in relation to Crete Locals’ services in our app and on our website complies with the law. In this Policy, we want to tell you about how we collect and use data, in order to give you an overview of how your personal data will be used.

1. Overview

The following Privacy Policy contains information about the way and extent to which personal data is processed by Crete Locals. Personal data is information that can be directly or indirectly attributed to or associated with you personally, such as your name or your email address.

2. Name and contact details of the controller responsible for processing and the company’s Data Protection Officer

This Privacy Policy applies to the data processing performed by Crete Locals (the “controller”, hereinafter “Crete Locals”), to be contacted at [email protected], and for the following website or application:

3. The purposes for which data is processed, the legal basis and legitimate interests pursued by Crete Localsor a third party, as well as categories of recipients

3.1. Accessing our website/application

When you access our website/application, the browser used on your device automatically sends information to the server of our website/application and temporarily stores it in what is known as a log file. We have no control over this. The following information will also be collected without any action on your part and be stored until it is automatically deleted:

  • the IP address of the requesting internet-enabled device
  • the date and time of access
  • the name and URL of the retrieved file
  • the website/application from which access took place (the Referrer URL)
  • the browser you are using, and potentially the operating system of your internet-enabled computer, as well as the name of your access provider
  • the device used (e.g., a desktop computer or a smartphone)
  • the language of the browser you are using

The legal basis for processing your IP address is Article 6 (1) (f) of the General Data Processing Regulation (GDPR). Our legitimate interest is based on the purposes of data collection listed below. We would like to point out that we are unable to draw any direct conclusions regarding your identity from the data that is collected, and that we refrain from doing so.

We use the IP address of your device and the other data listed above for the following purposes:

  • ensuring that a trouble-free connection is established
  • ensuring the comfortable use of our website/application
  • the evaluation of system security and stability

The data is stored for a period of up to 7 days and is then deleted automatically. We also use what are known as cookies for our website/application, as well as tracking tools, targeting methods and social media plug-ins. The exact procedures used and how your data are used for this purpose are explained in more detail below.

3.2. Cookies – general information

We use cookies on our website on the basis of Article 6 (1) (f) GDPR. Our interest in optimizing our website is deemed to be legitimate within the meaning of the aforementioned provision.

Cookies are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website or use our app. Cookies do not harm your device and do not contain viruses, Trojans or other malicious software. The information stored in the cookie is tied to the specific device used. However, this does not mean that we are immediately aware of your identity. In part, cookies are used to make the use of our service more pleasant for you. For example, we use what are known as session cookies to detect that you have already visited individual pages on our website or that you have already logged in to your user account. These are automatically deleted after you leave our website. In addition, to ensure user-friendliness we also use temporary cookies, which are stored on your device for a specific period of time. If you visit our website again to use our services, it is automatically detected that you have already visited us, as well as what information you entered and the settings you used, so that you do not have to reenter them.

On the other hand, we use cookies to statistically record the use of our website, optimize our services, and display information tailored to your specific needs. These cookies enable us to automatically detect that you have previously visited us when you return to our website. These cookies are automatically deleted after a defined period of time. Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or make sure that a message always appears before a new cookie is created. However, disabling cookies completely may mean that you will not be able to use all the features of our website. The storage period of cookies depends on their purpose and therefore varies.

3.3. Analytical tools: Google Analytics

In order to customize and continuously optimize our websites in line with users’ needs, we deploy tools on the basis of Article 6 (1) (f) GDPR which permits us to analyze the use of our website.

We use Google Analytics, a web analytics service provided by Google. In doing so, pseudonymized usage profiles are created and cookies are used. The information generated by the cookie about your use of this website, e.g.

  • browser type/version
  • operating system used
  • Referrer URL (the previously visited page)
  • the hostname of the accessing computer (IP address)
  • time of server request

is transmitted to a Google server in the US and stored there. Google complies with the Privacy Policy of the US Privacy Shield and is registered with the U.S. Department of Commerce’s US Privacy Shield Program. In addition, we have entered into a data processing agreement for the use of Google Analytics. Under this agreement, Google assures that Google processes data in accordance with the General Data Protection Regulation and ensures the protection of the data subject’s rights.

The information is used to evaluate the use of the website, to compile reports on the activity on the website, and to provide other services related to the use of the website and internet usage for the purposes of market research and to customize the design of these websites in line with the needs of users. This information may also be transferred to third parties if required by law or if third parties are contracted to process this data. Under no circumstances will your IP address be combined with any other data from Google. The IP addresses are anonymized, which means that it is not possible to identify specific individuals (“IP masking”).

You can prevent the installation of cookies by setting your browser software accordingly. However, disabling cookies completely may mean that you will not be able to use all the features of our website. You may also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing this browser add-on ( As an alternative to the browser add-on, especially for browsers on mobile devices, you can prevent the collection by Google Analytics by clicking on this link. An opt-out cookie will be set which prevents the future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again. For more information regarding data privacy related to Google Analytics, visit the Google Analytics website:

3.4. Targeting

The targeting measures listed below and used by us are implemented on the basis of Article 6 (1) (f) GDPR. Targeting is used to perform targeted advertising. Through the targeting measures we use, we want to make sure that advertisements which are geared to your interests are displayed on your devices.

3.4.1. Google AdSense

On our website, we use Google AdSense for displaying advertisements. In this way, we can show you advertisements that may be of interest to you. These advertisements can be recognized by the reference “Google Ads”. To do this, Google uses web beacons and cookies (see section 3.6.). The information generated by cookies and web beacons about the use of the website (including your IP address) and delivery of advertising formats is transmitted to a Google server in the US and stored there. Google may share this information with third parties.

We have enabled third-party Google AdSense ads. The data may be transferred to third parties (named at

You can prevent Google AdSense from installing cookies by disabling interest-based ads on Google via the link

For more information, as well as the provisions regarding data privacy, please see the Google Privacy Policy at

4. Newsletter

4.1. General information

With your consent under Article 6(1)(a) GDPR, you can subscribe to our newsletter which will inform you about offers on our Services and from third parties. To sign up for our newsletter, we use the “double opt-in” method. This means that after you have signed up, we will send you an e-mail to the e-mail address specified, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your sign-up within 24 hours, your information will be locked and automatically deleted after one month.

In addition, we save the IP addresses you used and the times of sign-up and confirmation. The purpose of the procedure is to verify your sign-up and, if necessary, to inform you about possible misuse of your personal data.

The only requirement for sending the newsletter is your email address. Providing additional data is voluntary and will be used to address you personally. After your confirmation, we will save your e-mail address for the purpose of sending you the newsletter. The legal basis is Article 6(1)(a) GDPR.

You may revoke your consent to receiving the newsletter at any time by clicking the link provided in each newsletter e-mail or by contacting our data protection officer.

4.2. Newsletter-Tracking

We use web beacons, tracking pixels and other technologies to track and analyze your interactions with the newsletter. This data is allocated to your e-mail address and a pseudonymized ID. We use this data to generate a user profile to personalise the newsletter for you. Your user profile will be based on the interactions you have with the newsletter, our Services and third-party websites and apps.

You can object to this at any time by using the unsubscribe link provided in each e-mail or by contacting our data protection officer.

Newsletter tracking is not possible if you’ve deactivated image viewing by default in your e-mail application. In this case, the newsletter will not be displayed in full and you won’t be able to use all the features. If you display images manually, tracking will occur.

5. Mapbox 

Our essential map service provider stores this anonymous browser user identifier and sends it to Mapbox servers when you load a map on our website. Our own web application code clears any remaining identifiers of this type when you load our website, which essentially makes it a session cookie. We have inquired about Mapbox for the purpose of this identifier.

Please see the Terms of Service for Mapbox here:

6. Contact

If you have any questions, please contact our customer service directly at [email protected]

7. Your rights

7.1. Overview

In addition to the right to revoke the consent you have granted to us, you are entitled to the following further rights if the relevant legal requirements apply:

  • Right of access to information about your personal data stored with us pursuant to Article 15 GDPR
  • Right of rectification of inaccurate personal data and right to have incomplete personal data completed pursuant to Article 16 GDPR
  • Right to erasure of your personal data stored by us pursuant to Article 17 GDPR
  • Right to restriction of processing of your data pursuant to Article 18 GDPR
  • Right to data portability pursuant to Article 20 GDPR

7.2. Right to object

Under the conditions of Article 21 (1) GDPR, data processing can be objected to on grounds relating to the particular situation of the data subject.

The above general right of objection applies to all processing purposes described in this Privacy Policy which are based on Article 6 (1) (f) GDPR. Unlike the special right of objection to data processing for advertising purposes, under the GDPR we are only obliged to implement such a general objection if you give us reasons of overriding importance for this (for example, possible danger to life or health).


© All rights reserved. Crete Locals