Privacy Policy for CreteLocals

Data privacy is a matter of trust, and your trust matters to CreteLocals. It is therefore important to us that your personal data is protected and that its collection, processing and use in relation to CreteLocals’ services in our app and on our website Cretelocals.com complies with the law. In this Policy, we want to tell you about how we collect and use data, in order to give you an overview of how your personal data will be used.

1. Overview

The following Privacy Policy contains information about the way and extent to which personal data is processed by CreteLocals. Personal data is information that can be directly or indirectly attributed to or associated with you personally, such as your name or your email address.

2. The purposes for which data is processed

2.1 Accessing our website/application

When you access our website/application, the browser used on your device automatically sends information to the server of our website/application and temporarily stores it in what is known as a log file. We have no control over this. The following information will also be collected without any action on your part and be stored until it is automatically deleted:

• the IP address of the requesting internet-enabled device
• the date and time of access
• the name and URL of the retrieved file
• the website/application from which access took place (the Referrer URL)
• the browser you are using, and potentially the operating system of your internet-enabled computer, as well as the name of your access provider
• the device used (e.g., a desktop computer or a smartphone)
• the language of the browser you are using

The legal basis for processing your IP address is Article 6 (1) (f) of the General Data Processing Regulation (GDPR). Our legitimate interest is based on the purposes of data collection listed below.

We use the IP address and the other data for the following purposes:

• ensuring that a trouble-free connection is established
• ensuring the comfortable use of our website/application
• the evaluation of system security and stability

The data is stored for up to 7 days and then automatically deleted. We also use cookies, tracking tools, targeting methods and social media plug-ins, described in the following sections.

2.2 Cookies – general information

We use cookies on our website based on Article 6 (1) (f) GDPR. Cookies are small files stored on your device when you visit our website. They do not harm your device or contain malware. Cookies help to:

• Detect if you have previously visited our website
• Store temporary settings and user input
• Improve usability and performance
• Optimize services and personalize content

You can configure your browser to reject cookies. However, this may affect your ability to use all features of our website.

2.3 Third-Party Services

We use third-party tools to analyze and improve our services, based on Article 6 (1) (f) GDPR:

2.3.1 Hotjar

Hotjar helps us understand user interactions via heatmaps, recordings, and surveys. Data is pseudonymized. More info: Hotjar Privacy Policy.

2.3.2 Microsoft Clarity

Clarity records user interactions without identifying individuals. More info: Clarity’s Privacy Page.

2.3.3 Bing

We use Bing cookies to track ads and optimize campaigns. See Microsoft’s Privacy Statement.

2.3.4 Get Your Guide

Used for tracking referrals and user engagement. More info: Get Your Guide Privacy Policy.

2.3.5 Booking.com

Tracks affiliate interactions for accommodations. More info: Booking.com Privacy Policy.

2.3.6 Google Analytics

Google collects data about usage. Opt-out available: Google Analytics Opt-out.

2.3.7 Google AdSense

Used to display ads. Uses cookies and beacons. More info in Google’s policies.

2.3.8 Google Maps

Used for location info. More info: Google Maps Terms.

2.3.9 Mapbox

Used for interactive maps. More info: Mapbox Privacy Policy.

2.4 Managing Cookie Preferences

You can manage cookie preferences in your browser settings.

4. User Profile Data

4.1 Account Creation and Management

We store your email and password when you create an account, and may send you updates about our services.

4.1 Profile Customization

You can add a username, display name, and location to personalize your profile. This is visible to others on the platform.

4.2 User Generated Content

Activities like posting reviews or uploading photos are saved to your profile and may be visible to other users.

4.3 Data Deletion

You can delete your account anytime. Data is removed within 14 days.

5. Newsletter

5.1 General information

With your consent (Article 6(1)(a) GDPR), we send newsletters. We use the double opt-in method and store IP and time logs.

You may unsubscribe anytime via the link in each newsletter.

5.2 Newsletter-Tracking

We use tracking technologies to personalize newsletters. You can object to this at any time via the unsubscribe link.

6. Contact

If you have any questions, please contact us through the Contact Us page.

7. Your rights

7.1 Overview

Under GDPR, you have rights including:

• Right of access (Art. 15)
• Right of rectification (Art. 16)
• Right of erasure (Art. 17)
• Right to restrict processing (Art. 18)
• Right to data portability (Art. 20)

7.2 Right to object

You may object to data processing under Article 21 (1) GDPR if reasons of overriding importance exist (e.g., health or safety).

8. Updates

We may update this policy periodically. Please check back for the latest version.