Introduction

This document describes how Apeiron Retreats uses the personal data that they receive from you. This document is in accordance with the General Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), under which you have the right to be informed of the data that are being processed by the Controller.

We shall never sell your email address to 3rd parties – period. We will only share your details with 3rd parties that you expressly consent to be shared with. We take your right to privacy seriously and want you to feel comfortable using our platform (website, apps and other digital services). This Privacy Policy deals with personally identifiable information (referred to as “Data” below) that may be collected by us on our site. This Policy does not apply to other entities that we do not own or control or persons that are not our employees, agents or within our control. Please take time to read our Terms and Conditions.

1. Collection of Data

Please take note that your user name, e-mail address, or other submissions that you make on this site may contain your real name or other personally identifiable information and, as a result, may appear on this site. Like many platforms, we may also automatically receive general information that is contained in our server log files such as your IP address and cookie information. Information about how advertising may be served on this site (if at all) is set forth below. Apeiron Retreats uses two (2) 3rd party payment gateways called PayPal and Stripe to ensure your personal and sensitive credit card information is securely stored. Your credit card details are NOT stored on Apeiron Retreats, instead, your information is securely stored and encrypted with PayPal and/or Stripe. In terms, this means when you save or update your credit card details on Apeiron Retreats, these details are being securely stored within PayPal’s and/or Stripe’s fully secure vaults to ensure your information cannot be used by malicious 3rd parties. Apeiron Retreats and its employees are unable to view your cardholder information as PayPal and/or Stripe truncate your credit card details. You may add, update or delete your credit card information whenever you like; you should visit your Settings page.

2. TO WHOM THE CONSENT TO PROCESS YOUR PERSONAL DATA IS GRANTED?

2.1    Your consent is granted to Apeiron Retreats (the Controller). A Controller is a person who determines the purposes and means of the processing of personal data.
2.2    Data Protection Officer

Data Protection Officer (DPO) is appointed by the Controller. The DPO may be reached via email at or via phone at the number: +30 6944 748 040. DPO is a person qualified in data protection area and her/his main responsibilities are:

(i)    informing and advising the Controller and its employees in fulfilment of their obligations pursuant to the GDPR;
(ii)    monitoring compliance with the processing of personal data with the GDPR;
(iii)    providing advice when requested as regards the data protection impact assessment and monitoring its performance; and
(iv)    cooperation with the supervisory authority.

3. WHAT PERSONAL DATA BEING PROCESSED?

(i)    The personal data that are being processed are the following:
(ii)    Identification information (name, surname);
(iii)    Business affiliation related to your person (company name, e-mail address, business postal address, phone number), 
(iv)    Physical features and voice recordings captured during the events organised by the Controller (photography, video and voice recordings). These materials will be used anywhere in the world for promotional, marketing and other purposes of the Controller.
(v)    Information on your utilization of our services, including information in your requests for services; 
(vi)    Information from our personal, telephone and electronic communication with you;
(vii)    Information from the internet browser that you use or mobile applications; 
(viii)  as well as any information which the Controller processes in relation to the contract fulfilment, legal obligation and for the purposes of the Controller’s legitimate interest.

4. SOURCES OF PERSONAL DATA

The Personal Data are being obtained directly from you or from a person that you appointed to provide us with such data, from social networks and internet where you have personally posted them for receiving marketing information, from surveys regarding the market situation, from automatized processing analysing the Personal Data to target the advertisement, from own Controller’s activity.

5. Use of Data

We may use Data to customize and improve your user experience on this site and to contact you. We will make efforts so that your Data will not be provided to third parties unless (i) provided for otherwise in this Privacy Policy; (ii) we obtain your consent, such as when you choose to opt-in or opt-out to the sharing of Data; (iii) a service provided on our site requires the interaction with or is provided by a third party, by way of example an Application Service Provider; (iv) pursuant to legal process or law enforcement; (v) we find that your use of this site violates our this Policy, Terms and Conditions, other usage guidelines or as deemed reasonably necessary by us to protect our legal rights and/or property; (vi) or (vi) this site is purchased by a third party whereby that third party will be able to use the Data in the same manner as we can as set forth in this Policy. In the event you choose to use links that appear on our site to visit other platforms, you are advised to read the privacy policies that appear on those sites.

The Controller processes the Personal Data for the purpose of offering the services of the Controller. The activities that fall within this purpose include, in particular, the processing for marketing purposes, sending the newsletters, marketing analysis and profiling with the aim to accommodate our offer to your needs and improve the provided services. The Controller processes your personal data for purpose of registering you as a participant in the event organised by the Controller, to offer, contract and execute the sponsorship services, etc.

6. HOW ARE THE PERSONAL DATA PROCESSED?

The processing of your Personal Data may be manual but also automated. Some of the collected Personal Data are used for automated decision-making.  Your Personal Data is being processed mainly by the designated employees of the Controller.

6. WHAT ARE THE LEGAL GROUNDS FOR PROCESSING OF PERSONAL DATA?

Legal grounds for processing of the Personal Data is set by Article 6(1) of GDPR pursuant to which the processing is lawful, if it is necessary for the performance of a contract or services that you have requested to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract or registration for events organised by the Controller. Personal data processing is lawful if it is based on the consent of the data subject to the processing of his or her personal data for one or more specific purposes.

7.    TO WHOM ARE YOUR PERSONAL DATA HANDED OVER TO?

Your Personal Data is being processed only for the above-mentioned marketing purposes and fulfilling services requested by the Controller and are not handed over to any other entities. In case any third party is handed any of your Personal Data, it is and will be due to our legal obligation to do (e.g. various state bodies).

8. WILL PERSONAL DATA BE TRANSFERRED TO SOMEONE ELSE?

Personal Data will not be transferred to any third party. If the need is, we could only provide certain Personal Data within the statutory limits to the state authorities, for example, tax offices, courts, law enforcement and judicial authorities or supervisory authorities.   

9. WILL WE TRANSFER PERSONAL DATA TO THE THIRD COUNTRY OR INTERNATIONAL ORGANISATION?

We will not transfer any Personal Data to the countries outside the European Union nor European Economic Area, neither to any international organisation.

10. Cookies

Like many platforms, we set and use cookies to enhance your user experience, such as retaining your personal settings. Advertisements may appear on our platform and if so, may set and access cookies on your computer and is subject to the privacy policy of those parties providing the advertisement. Read the Apeiron Retreats Cookie Policy.

11. Children

We do not allow persons who are eighteen y.o. or younger to become members of this site.

12. Editing or Deleting Your Account Information

We provide you with the ability to edit the information in your account by signing into your Account. You may request deletion of your user account by contacting us. Content or other data that you may have provided to us and that is not contained within your user account, such as posts that may appear within our forums, may continue to remain on our site at our discretion even though your user account is deleted. Please see our Terms and Conditions.

13. Changes to this Privacy Policy

We may make changes to this Policy from time to time without notification.

14. NO GUARANTEES

While this Privacy Policy states our standards for maintenance of Data and we will make efforts to meet them, we are not in a position to guarantee these standards. There may be factors beyond our control that may result in disclosure of data. As a consequence, we disclaim any warranties or representations relating to maintenance or nondisclosure of Data.

15. HOW YOU MAY REVOKE YOUR CONSENT

The consent is freely given and you may decide not to grant it or to revoke it at any time by the applicable way of filing up the form/unticking the box/sending a request to the email or postal address of the Controller/via unsubscribe link in e-mail communication. Once the revocation of your consent is obtained by the Controller, we will assume that you no longer wish to have your Personal Data processed for the marketing purposes, and we will consider all other marketing consents consider as revoked. 

16.  RIGHTS RELATING TO THE PROCESSING OF THE PERSONAL DATA

The Controller ensures that your Personal Data are processed in secure and accurate manner. You may exercise all the rights described in this clause with the Controller.
How can you exercise your rights?
You may exercise each individual right via sending an email to contact[a]apeironretreats.com or by calling to +30 6944 748 040, eventually by sending a written request to the postal address of the Controller.

A statement or information on measures adopted shall be provided to you by the Controller as soon as possible, but not later than within 1 month from receipt of the request. The Controller is entitled to extend this period by 2 months taking into account complexity of the issue and number of requests submitted. The Controller will inform you of such an extension. 

16.1    Right to be informed – at least about:
(i)    the identity and the contact details of the Controller and of the Controller’s representative;
(ii)    the contact details of the DPO;
(iii)   the purposes of the processing of the Personal Data as well as the legal basis for the processing;
(iv)   the legitimate interests pursued by the Controller;
(v)    the recipients or categories of recipients of the Personal Data;

16.2    Right of access

You may request access to your Personal Data and obtain information what Personal Data concerning your person is being processed, and access the following information:

(i)   the purposes of the processing; 
(ii)   the categories of Personal Data concerned; 
(iii) the recipients or categories of recipient to whom the Personal Data have been or will be disclosed
(iv)  the envisaged period for which the Personal Data will be stored, or, if not possible, the criteria used to determine such period;
(v) the existence of the right to request from the Controller rectification or erasure of the Personal Data or restriction of processing of the Personal Data concerning you or to object to such processing; 
(vi)  the right to lodge a complaint with a supervisory authority;

The Controller shall provide a copy of the Personal Data undergoing processing. For any further requested copies, the Controller may charge a reasonable fee based on administrative costs. The DPO or other authorized person may decide that you should be asked to cover the costs or that your request can be rejected. Where the request is made by the electronic means, and unless otherwise requested by you, the information shall be provided in a commonly used electronic form.

16.3    Right to rectification

(i)   You have the right to request the Controller to rectify your inaccurate Personal Data.
(ii)   You have also right to have your incomplete Personal Data completed, including by means of providing a supplementary statement. While executing this right, the purposes of the processing must be taken into account and the DPO shall decide whether it is appropriate or not.

16.4    Right to erasure
You have the right to ask the Controller to erasure your Personal Data. The Controller shall have the obligation to erase your Personal Data where one of the following grounds applies:
(i)    the Personal Data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
(ii)    you object to the processing and there are no overriding legitimate grounds for the processing;
(iii)    you revoke the consent and there is no other reason for the processing;
(iv)    the Personal Data has been unlawfully processed;
(v)   the Personal Data have to be erased for compliance with a legal obligation in the European Union or Member State law to which the Controller is subject.
Right to erasure shall not apply to the extent that processing is necessary for the establishment, exercise or defence of legal claims.

16.5    Right to the restriction of processing
You have the right to restrict the processing where one of the following applies:
(i)    you contest the accuracy of the Personal Data, for a period enabling the Controller to verify the accuracy of the Personal Data;
(ii)    the processing is unlawful and you oppose the erasure of the Personal Data and request the restriction of its processing instead;
(iii)    the Controller no longer needs the Personal Data for the purposes of the processing, but you require it for the establishment, exercise or defence of legal claims;
(iv)   you have objected to processing pending the verification whether the legitimate grounds of the Controller override those of yours.

16.6    Right to object
You have the right to object, on grounds relating to the particular situation, at any time to the processing of your Personal Data, including profiling. 
The Controller shall no longer process the Personal Data unless the Controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

16.7    Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, of the alleged infringement if you consider that the processing of the Personal Data infringes your rights.

16.8    Right to portability
In relation to the Personal Data that you have provided to the Controller and that is subject to automatized processing, you have the right to receive it in a structured, commonly used and machine-readable format and the right to transmit this Personal Data to another controller without hindrance from the Controller. 

17. Contact Information

If you have any questions about this Policy or our platform, please feel free to contact us in writing, via e-mail or telephone on below contact details:

Apeiron Retreats
E-mail: contact [a] apeironretreats.com
Telephone: +30 6944 748 040