This Privacy Policy applies to the website www.travelgenius.gr , which is operated by TZINIOUS TRAVEL SINGLE MEMBER P.C. (hereinafter referred to as the “Company”).

The use of this Website is governed by the present Privacy Policy and by applicable Greek and European legislation on the protection of personal data, in particular Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR).

By accessing and using the Website, you confirm that you have read, understood, and unconditionally accepted this Privacy Policy. If you do not agree, please refrain from using the Website.

The Company reserves the right to amend this Privacy Policy at any time. The updated version will always be available on the Website.

1. Data Controller

The Data Controller responsible for the processing of personal data is:

TZINIOUS TRAVEL SINGLE MEMBER P.C.

Website: www.travelgenius.gr

Email: info@travelgenius.gr

Based on the nature and scale of its activities, the Company is not required to appoint a Data Protection Officer (DPO).

2. What Are Personal Data

“Personal Data” means any information relating to an identified or identifiable natural person, such as name, postal address, email address, telephone number, payment details, or website usage data.

3. What Is Processing of Personal Data

Any operation or set of operations performed on personal data, whether automated or not, such as collection, recording, storage, use, disclosure, restriction, deletion, or destruction.

4. Is the Provision of Personal Data Mandatory?

The provision of certain personal data is necessary in order to:

respond to your requests,

provide our services,

complete bookings or transactions.

Failure to provide required data may result in the inability to offer certain services.

5. Categories of Personal Data We Collect

We collect only data that are necessary and appropriate for the intended purpose, including:

Contact details (name, email address, phone number, postal address)

Transaction and payment information

Data submitted through contact forms

Newsletter subscription data

Preferences and interests related to our services

Website traffic and technical data

Cookie-related data

Social media identifiers, if you interact with us through such platforms

6. Legal Basis for Processing

Your personal data are processed on one or more of the following legal bases:

Performance of a contract

Your consent

Compliance with legal obligations

Legitimate interests of the Company (service improvement, security, fraud prevention)

7. How We Use Your Personal Data

We process your data for purposes such as:

processing bookings and transactions,

customer support and communication,

responding to inquiries and complaints,

sending newsletters and promotional offers (with consent),

improving services and user experience,

statistical analysis and website security,

compliance with legal obligations.

8. Cookies

The Website uses cookies to enhance user experience.

Non-essential cookies (analytics, marketing, third-party cookies) are activated only after your explicit consent via a cookie consent mechanism.

Cookies used may include:

Functional cookies

Analytics cookies (e.g. Google Analytics)

Third-party cookies (video providers, social media platforms)

You may manage or withdraw your consent at any time through the cookie settings.

9. Disclosure of Data to Third Parties

Personal data may be shared with:

trusted service providers acting on our behalf (e.g. payment processing, hosting, email distribution),

public authorities, when required by law.

Where data are transferred outside the EU/EEA, appropriate safeguards are applied, such as Standard Contractual Clauses (SCCs).

10. Data Retention Period

Personal data are retained only for as long as necessary to fulfill the purposes outlined in this Policy or as required by applicable law. Thereafter, data are securely deleted or anonymized.

11. Your Rights

You have the right to:

access your personal data,

request correction,

request erasure (“right to be forgotten”),

request restriction of processing,

data portability,

object to processing,

withdraw consent at any time.

Requests may be submitted to info@travelgenius.gr.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

12. Limitation of Liability

The Company bears no liability for any direct or indirect damage arising from the use of this Website.

13. Governing Law & Jurisdiction

This Privacy Policy is governed by Greek law. Any disputes shall be subject to the exclusive jurisdiction of the courts of Thessaloniki.

Last updated: February 2026