Privacy Policy

The website www.zanteyliessa.com, hereinafter referred to as “the Website”, is committed to protect your personal data. We are therefore taking the necessary measures for the protection, safety and maintenance of the integrity and availability of your data.

Users are kindly requested to carefully read the Privacy Notice of this Website. By using www.zanteyliessa.com, you accept the terms of this Privacy Notice. If you do not agree with these terms, you must not use this Website. The usage of this website after any changes submitted to this Privacy Notice means that you accept those changes.

This Privacy Notice is directly related and accompanies the Terms and Conditions of this Website. For more information please also refer to them.

ATTENTION: This website is not intended for children and we do not knowingly collect data relating to children. If you believe we have inadvertently collected such information, please contact us so we can promptly obtain parental consent or remove the information.
It is important that you read this policy for the protection of personal data together with any other privacy or processing notice we may provide on specific occasions when we are collecting or processing personal data about you, so that you are fully aware of how and why we are using your data. This privacy notice supplements the other notices and is not intended to override them.

1 Controller

The company under the name Zante Yliessa Monoprosopi I.K.E. Enikiasi Avtokiniton, based in Porto Roma, Vasilikos, 29100, Zakynthos, Tax Registration Number: 802130492, Commercial Registry (G.E.MI.) number 170562124000, with e-mail address info@zanteyliessa.com (hereinafter referred to as CS&R), is the owner and administrator of the website www.zanteyliessa.com and Controller of the personal data processed by the website and the services it offers.

2 Data we collect from you

The website www.zanteyliessa.com is of informative character, so as to allow customers and potential Zante Yliessa Monoprosopi I.K.E. Enikiasi Avtokiniton customers to be informed about the services the company can offer them, at the same time it provides the possibility to search for the services offered by the website. Consequently and depending on the purpose of your visit on our website and in accordance with the services requested/sought by you, the personal data that can be collected are:

In case of expressing interest through the website for any service by the company, the following users’ personal data are being collected:

A) Contact data:

Title/ Name/ Surname/ e-mail address /phone number /Address /City/ P.C.

B) Necessary details for the providence of the service

Parking station that the user is interested in/ Type of parking/ Vehicle Plates / Date of entry-exit to-from the Parking area

C) Payment details


Depending on the chosen way of payment and the possibilities provided on the website, payment information are collected, indicative details of the debit and/or credit card information.

At the same time, you can subscribe for the newsletter, at your absolute discretion.

Note: It is important that the data we keep about you are always accurate and updated, depending on the type of services you have chosen to receive. Therefore, please inform us of any changes of your personal information during the course of our relationship.

3 Date we collect with automated technologies

When you use our website, your device is automatically providing data to us, so that we can serve and tailor our response to you. The type of information we collect with automated technologies involves technical information about your device, like the IP address or another recognizable feature of your device, the type of the device you are using and the version of the operating system.

The data we collect are also subject to include usage information and statistical data about your interaction with the website.

4 Purpose and lawful basis of processing personal data

Processing of users’ personal data is subject to the terms of this Privacy Notice, to the relevant GDPR terms (EU/2016/679) and national law 4624/2019.

We use data that we collect via our website for the following purposes and based on the following legal bases:
Note: Where your personal data are required by law or according to our agreement and you are not providing the requested data, we will not be able to fulfill our obligations according to the agreement we have entered into or intend to enter into (for example to provide you with services). In this case, we may be forced to cancel a service, according to the information you have disclosed and if this is the case, you will be informed accordingly.

In addition, we inform you that the processing and transmission of personal data of users may result from our obligation to comply with our legal obligation or orders of the competent police, public and judicial authorities.

5 Data retention

Data of users requesting parking spaces and proceeding to sign a contract with the company are being retained for as long as the contract fort a parking space is active, as well as for the necessary period as per the applicable legislation (usually for five years (5), except as otherwise required by the applicable legislation), after its expiry or termination in any way, so as to comply with legal/ tax obligations or/ and for the protection of CS&R legitimate interests.

Data collected via a contact form or through the alternative ways of collection as per these terms, that do not proceed in signing a contract with CS&R, are retained until the end of the year, during which users submitted their request or their question, unless it is deemed necessary to retain them for a longer period of time, to comply with legal/ tax obligations or/ and for the protection of CS&R legitimate interests.

In certain cases we may retain the data for an unlimited period of time, by maintain them under anonymity for statistical purposes.

Users’ data that are collected for newsletters and contact with the company upon their consent are retained until the user revokes their consent and is deleted from the service, either by changing the relevant settings in their appliance, or by choosing to unsubscribe.

Please read the Cookies policy to get informed about the duration of retention of information.

6 Data recipients


Your data will have to be available to the CS&R personnel, as well to the website maintenance technicians, who are external partners. Moreover, we transfer your data to third- parties executing the processing, if necessary exclusively for providing our services. All parties are committed to abide by confidentiality and proper processing rules.

Furthermore, we transfer your personal data as appropriate to the company- provider of maintenance and hosting services of this website (Tilda), to the company- provider of e-mail services Microsoft, to the company- provider of website analysis services (Google Analytics – Google). All parties act as processors and are bound by an obligation to respect confidentiality and fair processing rules.

It is noted that your personal data may be made known in any case where we are obligated to do so under the existing legislature or when necessary for the purposes of our legitimate interests or when they are being processed by our partners or third- parties (such as cloud services), always making sure that the guarantees for their safety and protection are met.

7 Contact with the website

Contact with the website is made via the available contact form.

Only our authorized personnel has access to the messages we receive on our platform. Our personnel are bound by confidentiality and fair processing rules.

We do not forward messages sent to our platform to third- parties, without express consent of the sender.

An exception is made in cases where forwarding to third- parties or not deleting the messages we receive is necessary for the compliance with our legal obligations or to establish, exercise or defend legal claims.

8 Website technical measures


The personal data we process through the website are always retained in safe servers within European Economic Area and they are protected by European legislature.

Our website uses an encryption system (SSL) to ensure greater protection during your navigation.

CS&R uses third- party providers and hospitality partners to provide the necessary material, logistics, storage and relevant technology required for the operation of the website. It is probable that we save encrypted backups of our database in a third- party storage provider, to ensure the security of your data in case of emergency or destruction.

9 Social media/ Links to Third-Party Websites

CS&R is using social media to promote its activity.

When you use social media to come in contact with our website, this present policy does not apply. In contrary, processing of your personal data is subject to the privacy notice of these specific social media. We advise you to carefully read the privacy notice of the social media before you use them.

This website may content links to third-party websites. This means that by clicking on these links you may be allowing third parties to collect or transmit your data. We have no control over third party websites and are not responsible for their privacy policies. Therefore, when you visit third-party websites, even if this is done through a link contained on our website, we recommend that you read the privacy policy of each website.

10 Your rights

You have the following rights concerning your personal data:

Right to information

You have the right to be informed about gathering and usage of your personal data.

Right to access

You have the right to receive from us a confirmation as to whether or not the identity data that concern you are subject to processing and, if so, you have the right to access the identity data in a short, comprehensive, clear and easily accessible form.

Right to correction


You can request and we will ensure that, without unreasonable delay, we will correct inaccurate or incomplete personal data, amongst others with a supplementary statement.

Right to erasure
You have the right to request from us the erasure of your personal data without unreasonable delay and we will erase them, under the conditions stated by the law and provided that there are not specific legal reasons that prevent us from doing so, which we will notify you about.

Right to withdraw consent

You have the right at any moment to withdraw your consent to the processing of your rights. If your consent is necessary for the provision of specific services in our part, which we will no longer be able to offer you, we will notify you.

Right to restrict the processing


You have the right to request from us to restrict the processing activities only within specific purposes, under the conditions stated by law, for example if you wish to verify your data or if the processing is illegal but you do not wish for your dat6a to be processed.

Right to objection


You have the right to object, at any moment and for reasons relevant to your special condition, to the processing of your personal data. We will no longer submit your personal data for processing, unless there are imperative and legitimate reasons for this, which will prevail over interests, rights and freedoms or for the establishing, exercising or defending legal claims.

Right to data portability

You have the right to receive your personal data that you have given us, in a structured, commonly used and machine-readable format, as well as the right to request the transfer of those said data to another controller, without objection from us, under the conditions stated by law.

Right to acquire human intervention


You have the right not to be subject to a decision which is based solely on automated processing (including profiling) and which has legal consequences or similarly significantly affects you.

If you have any inquiries concerning data protection policy or if you want to ask for clarifications or if you wish to exercise any of your rights or to revoke your consent for a certain communication, please contact the Zante Yliessa Monoprosopi I.K.E. Enikiasi Avtokiniton at info@zanteyliessa.com. In this context we may ask you for specific information to confirm your identity and your right to access your personal data (or to exercise your other rights). This is a security measure to ensure that your personal data is not disclosed to anyone who does not have this right. We may contact you for more information to speed up your response to your request.

We will answer to your request within thirty (30) days from its reception. In case this deadline needs to be extended, we will notify you, explaining the reasons why this extension is necessary.

In any case you feel that the protection of your personal data is breached in any way, you have the right to submit a complaint to the Hellenic Data Protection Authority (www.dpa.gr). For the competence of this Authority and the procedure to submit a complaint, you can visit its website, where there are relevant detailed information.

11 Modification of the Privacy Notice

We may modify this Privacy Notice at times. We may proceed to these modifications for several reasons, for example to enforce changes or requirements deriving from the law, new characteristics or changes to company practice. The most recent version will be published in the relevant link of the website. You must check frequently so as to find the newest version. The newest version is the one that is enforceable. If the changes include important changes that affect your rights or your obligations, we will inform you in advance about them by reasonable means, that may include alert via website or via e-mail. If you continue to use the Services after enforcement of the changes, you agree with the revised policy.

Latest modification: 15/06/2023