In the EU, companies must have a privacy policy describing how personal information is processed and the legal basis for processing it. Furthermore, the DPO or EU representative must be listed if consumers should want further information about their rights. Here's ours:
Maintenance of the users’ personal data in website enduro-touring.gr is controlled by the relevant greek legislation (Laws 2472/1997, 2774/1999, 2819/2000, 3471/2006) regarding privacy protection, as well as the european General Data Protection Regulation – GDPR – 25/05/2018). You can browse enduro-touring.gr without submitting any piece of personal information. This will be required in case of sending an inquiry via our contact form, placing a booking for one of our tours at the booking system or a placing an order to purchase merchandise at the online shop.
All personal information submitted by the website visitors is used only by authorized administrative staff of North Star Enduro Touring Company, in order to provide answers to questions and/or process booking requests and merchandise orders. No personal information is revealed whatsoever to any other third party.

