Round Travel
privacy policy.

1. Introduction

Round Travel states that it treats privacy and confidentiality as a priority when providing online travel services. In its published policy, personal data means any information relating to an identified or identifiable natural person, and the policy is presented in the context of the GDPR and related data-protection obligations.

The original Round Travel text explains that use of its website indicates acceptance of the practices described there, while visitors who do not agree are encouraged to contact the company directly through its offices instead of using the website.

2. Scope

According to the published Round Travel policy, the document applies to website users and to the collection and use of personal information by Round Travel, including information such as full name and email address when supplied through website forms or booking-related interactions.

3. Cookies and technical information

Round Travel explains that its website sends cookies to the visitor’s browser in order to support website use and future visits, and that those cookies are encrypted for security reasons. The original text also says visitors may choose not to receive cookies through the relevant controls on the website.

On the original Round Travel site, the cookie notice also refers to categories such as necessary, functional, performance, analytics and advertising cookies. Those details belong to Round Travel’s own implementation and should not be confused with the separate cookie settings used on this website.

4. Transactions involving children

Round Travel’s published policy says the company does not enter into transactions with children. If it becomes aware that a user is under 18, the information provided may be used only to explain that parental consent is required before a purchase can be completed.

5. Information collected

The Round Travel policy lists technical and usage information that may be collected during a website visit, such as search history, IP address, screen resolution, browser type, operating system, settings, access times, referring URL and, where mobile devices are used, device-related settings and location data.

It also states that, where a visitor asks to be contacted through a form, Round Travel collects the person’s name and email address, and that newsletter registration and other booking or contact forms may also involve collection of email and related contact information.

6. How data is collected

Round Travel says personal data is collected directly from the user when forms are completed on the website, including contact and booking forms made available online.

7. Who receives information

The published policy says personal information is treated as confidential and is not rented, sold, publicly posted or disclosed to unrelated companies, organisations or websites, subject to the specific cases described in the policy.

It also says Round Travel may use contact details such as name, telephone number and email address to communicate with visitors about its products, while offering a right to unsubscribe from future newsletters or similar updates.

For travel organisation, Round Travel may share data with suppliers and external partners such as hotels, airlines, ferry operators and car-rental agencies where this is necessary to complete a booking or notify the traveller of a problem. The original text notes that visitors should also review the privacy policies of those third parties.

8. Storage and retention

Round Travel’s policy says personal data is stored in Greece, including at the business headquarters. It also sets out specific retention examples in the original text:

• Contact-form data may be kept for 2 months.
• Newsletter data may be kept until the person unsubscribes.
• Data relating to purchased services may be retained for 10 years where required for tax and legal obligations.

The original policy adds that, after the relevant legal or fiscal period has expired, the data should be deleted.

9. International transfers

Round Travel explains that, depending on the destination and the travel services being arranged, personal data may need to be processed in countries outside Greece and outside the EU or EEA. The original policy refers to adequacy decisions where available and to other protective measures, while also stating that some destinations may involve different legal standards.

The published text further notes that if a traveller does not wish such a transfer to take place, the requested trip may not be able to proceed.

10. Security measures

Round Travel says it applies administrative, technical and physical safeguards to help protect personal information. The policy specifically refers to restricted staff access, encryption during transmission, firewalls and intrusion-detection measures.

11. Your rights

The Round Travel policy refers to the GDPR rights of access, correction, deletion, restriction, objection and portability, together with the ability to request information about stored personal data without charge, subject to lawful limits and identity verification where needed.

The published contact details for privacy-related requests in the original policy are tours@roundtravel.gr and Round Travel, Zografou 12, Heraklion 71201, Crete, Greece, marked for the attention of the personal data controller. The policy also states that complaints may be made to the Hellenic Data Protection Authority.

12. Policy changes

Round Travel states that it may revise or update its privacy policy at any time, without prior notice, in order to support safer and better website operation. Users are asked to review the published terms periodically for changes.