Privacy Policy
The protection of your personal data is important to us. This Privacy Policy describes how Events Out of The Box collects, uses and protects the personal data of visitors and users of the website eventsoutofthebox.com.
Personal data is processed in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the applicable data protection legislation.
1. Data Controller
The Data Controller responsible for the processing of personal data collected through the website is Events Out of The Box.
Website: eventsoutofthebox.com
Contact email: hello@eventsoutofthebox.com
For any matter concerning the processing of your personal data or the exercise of your rights, you may contact us using the email address above.
2. Personal Data We Collect
Depending on how you use the website and the features or services it provides, we may collect personal data that you provide directly to us, such as:
- full name,
- email address,
- telephone number,
- information submitted through contact or request forms,
- information required to submit and process a booking or order,
- billing information, where required,
- information relating to the service, product or booking you are interested in,
- information or messages you provide when communicating with us.
In the case of online payments, card details or other payment information may be submitted directly to the relevant payment service provider and are subject to that provider’s terms and privacy policy. Events Out of The Box does not store full payment card details where the payment is processed through an external certified payment service provider.
In addition, when you visit the website, certain technical information may be collected automatically, such as your IP address, browser and device type, operating system, as well as information about your use of and interaction with the website.
The information collected depends on the features and services enabled on the relevant website.
3. Purposes of Processing
Your personal data may be used, depending on the services and features of the website:
- to respond to enquiries, contact requests or expressions of interest,
- to process and respond to requests submitted through the relevant forms,
- to make, manage and fulfil bookings or orders,
- to communicate with you regarding a request, booking, order or service,
- to process transactions and payments, where this functionality is available,
- to issue the necessary invoices or other relevant documents, where required,
- to perform a contract or take steps at your request prior to entering into a contract,
- to provide and support our services,
- to operate, secure and technically support the website,
- to improve the functionality, content and user experience of the website,
- to analyse website usage for statistical purposes, where permitted,
- to send informational or promotional communications where you have provided the relevant consent or where otherwise permitted by applicable law,
- to comply with our legal or regulatory obligations.
4. Legal Basis for Processing
Depending on the circumstances, the processing of your personal data may be based on:
- your consent,
- the necessity to perform a contract or to take steps at your request before entering into a contract,
- compliance with a legal obligation,
- our legitimate interests in ensuring the secure, effective and proper operation of the website and our services, provided that such interests are not overridden by your rights and freedoms.
Where processing is based on your consent, you may withdraw your consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.
5. Cookies and Similar Technologies
The website may use cookies and similar technologies to ensure its proper and secure operation, store preferences and, depending on the services used, for statistical analysis and/or marketing purposes.
Strictly necessary cookies may be used without prior consent where they are required for the operation of the website or for the provision of a service explicitly requested by the user.
Cookies or other technologies that require consent are activated only after the user has made the relevant selection through the website’s consent management mechanism, where such a mechanism is provided.
You can also manage or delete cookies through your browser settings. Disabling certain cookies may affect the functionality of specific features of the website.
Where a separate Cookie Policy is available, you may refer to it for detailed information about the cookies and similar technologies used, their purposes, duration and the available consent options.
6. Recipients and Third-Party Service Providers
For the operation of the website and the provision of our services, we may work with third-party service providers, including providers of:
- website hosting and technical support,
- email and communication services,
- online booking or e-commerce services,
- electronic payment services,
- analytics services,
- marketing and advertising services,
- other technology services necessary for the operation of the website.
These providers may have access to personal data only to the extent necessary to provide their services and in accordance with their obligations under applicable data protection legislation.
Your personal data is not sold to third parties.
We may also disclose personal data where required by law or in response to a lawful request from a competent public, administrative or judicial authority.
7. Transfers of Data Outside the European Economic Area
Certain technology service providers used by the website may process data outside the European Economic Area (EEA).
Where such a transfer takes place, appropriate measures are taken and the safeguards required under applicable data protection legislation are applied to protect your personal data.
8. Data Retention
Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected.
The retention period may vary depending on the type of data, the purpose of processing, our contractual obligations and any retention requirements imposed by applicable law.
When personal data is no longer necessary for the purpose for which it was collected and there is no other lawful basis for retaining it, it is securely deleted or anonymised.
9. Personal Data Security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure or destruction.
Although we make reasonable efforts to protect your data, no method of transmission or storage of data over the Internet can be considered completely secure.
10. Your Rights
Under applicable data protection legislation and subject to the conditions provided therein, you have the right to:
- be informed about the processing of your personal data,
- access the personal data concerning you,
- request the rectification of inaccurate or incomplete data,
- request the deletion of your personal data,
- request the restriction of processing,
- object to the processing of your personal data,
- data portability, where applicable,
- withdraw your consent at any time where processing is based on consent.
To exercise any of the above rights, you may contact us at hello@eventsoutofthebox.com.
We may need to request additional information to verify your identity before responding to a request.
11. Right to Lodge a Complaint
If you believe that the processing of your personal data violates applicable data protection legislation, you have the right to lodge a complaint with the competent supervisory authority.
In Greece, the competent supervisory authority is the Hellenic Data Protection Authority.
12. Links to Third-Party Websites
The website may contain links to third-party websites or services.
Events Out of The Box does not control these websites and is not responsible for their privacy practices. We recommend that you review the privacy policy of each third-party website you visit.
13. Changes to this Privacy Policy
This Privacy Policy may be updated from time to time to reflect changes to the website’s services, the technologies used or the applicable legal and regulatory framework.
The current version of this Privacy Policy will be published on this page.
14. Contact Us
For any questions regarding this Privacy Policy or the processing of your personal data, you may contact:
Events Out of The Box
Email: hello@eventsoutofthebox.com
Website: eventsoutofthebox.com