Privacy Notice

Who We Are

ELLINAIR AIRLINES SOCIETE ANONYME (‘we’ or ‘us’ or ‘our’) gather and process your personal information in accordance with this privacy notice and in compliance with the relevant data protection Regulation and laws. This notice provides you with the necessary information regarding your rights and our obligations, and explains how, why and when we process your personal data. 

ELLINAIR AIRLINES SOCIETE ANONYME is legally operating in Greece with registration number 124053104000, and its registered office is at: 14th Km Thessaloniki-Nea Michaniona, Thermi, 57001 Airport Area. We act as data controllers when processing your data. The Data Protection Officer (DPO) is Mr. Kavoulis Nikolaos, who can be reached by phone at +30 2310 591 555 or by e-mail at dpo@ellinair.com.

Information That We Collect

Ellinair processes your personal information in order to fulfill its legal, regulatory and contractual obligations and to provide you with its services. We do not collect personal data that is not necessary for the fulfillment of the processing purposes, and we do not process your information in any other way other than as specified in this notice. 

The personal data that we may collect is the following:

  • Name/Surname
  • Date of Birth
  • Home Address
  • Personal Email
  • Business Email
  • Home Telephone Number
  • Mobile Telephone Number
  • Passport Number
  • Eating Habits
  • Allergies
  • Medical data
  • Payment details (eg credit / debit card number)

  We collect information in the following ways:

  • Online forms
  • Online booking system
  • Hardcopy forms
  • Telephone
  • Email
  • Mail
  • Verbally on 1on1 meetings
  • Interviews
  • Event registrations

How We Use Your Personal Data (Legal Basis for Processing)

Ellinair takes great care in protecting your personal data and never discloses or shares your personal data without your consent, unless required by law or for processing purposes (fulfillment of obligations). We only retain your data for as long as is necessary and for the purpose(s) specified in this notice. Where you have given us your consent to receive promotional offers and marketing messages, you may withdraw your consent at any time. The purposes and reasons for processing your personal data are described in detail below:

We collect your personal data during and for the conclusion of the agreement, as well as during and for the execution of the agreement or the provision of a service, in accordance with the individual terms of the reservation.

We collect and store your personal data as part of our legal obligation for accounting and tax purposes.

We process your personal data in the event of a complaint or claim made by you.

We will occasionally send you marketing information, which we consider to be beneficial to you as a customer, provided that we have your consent in writing to do so.

We transmit your data to Public Authorities, upon request, on the basis of our legal obligations.

We transmit your data to "processors" for the purpose of processing only.

We process your data upon request.

Your Rights

You have the right to acquire access to any personal data that Ellinair processes about you and to request, upon a written application, information about:

 What personal data we keep about you

  • Which are the purposes for the processing
  • Who are the recipients to whom your personal data has been / will be transmitted?
  • How long we store your personal data
  • If we did not collect the data directly from you, information about the source

If you believe that we hold any incomplete or inaccurate data about you, you have the right to ask us to correct and/or complete the information and we will strive to do so as quickly as possible; unless there is a valid reason for not doing so, at which point you will be notified.

You also have the right to request erasure of your personal data or to restrict processing (where applicable) in accordance with the data protection laws; as well as to object to any direct marketing from us.

If we receive a request from you to exercise any of the above rights, we may ask you to verify your identity before acting on the request; this is to ensure that your data is protected and kept secure.

Sharing and Disclosing Your Personal Information

We do not share or disclose any of your personal information without your consent, other than for the purposes specified in this notice or where there is a legal requirement. Ellinair may use partners (third-parties)to provide their services and business functions; however, all processors acting on our behalf process only your data in accordance to our instructions and comply fully with this privacy notice, the data protection laws and any other appropriate confidentiality and security measures.

Safeguarding Measures

Ellinair takes your privacy seriously and takes every reasonable measure and precaution to protect and secure your personal data. We work hard to protect you and your data from unauthorized access, alteration, disclosure or destruction and have several layers of security measures in place.

Transfers Outside the EU

Ellinair may use systems hosted by providers outside the European Union (EU) to serve processing purposes.

In these cases, we take steps to ensure that these providers use the necessary level of protection when processing your information and comply with the strict specifications and measures set by Ellinair to protect your personal data and to comply with the relevant legislative framework.

How Long We Keep Your Data

Ellinair keeps your personal data only for as long as it is necessary for the provision of the service or for as long as required by law. We have implemented strict revision and maintenance policies to meet these obligations. According to Greek tax law, we have to keep your basic personal data (name, address, contact information) for at least 10 years, and then destroy them.

Lodging A Complaint

Ellinair will only process your personal data in accordance with this privacy notice and applicable data protection laws. If, however, you wish to file a complaint about the processing of your personal data or if you are unsatisfied with the way your data is handled, you have the right to file a complaint with the supervisory authority.